Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0702DF4C41111ED81D92AACF1222468.roa
File: D0702DF4C41111ED81D92AACF1222468.roa (raw, json)
Hash identifier: Od2xQXWq3G8ObUTi5QDm7uGQqVcQHfdQrw0NPL65awA=
Subject key identifier: D3:42:CF:B7:5E:52:9A:A1:DA:8A:9D:DE:10:FA:61:2E:8A:47:3C:5C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A2B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0702DF4C41111ED81D92AACF1222468.roa
Signing time: Thu 16 Mar 2023 15:47:11 +0000
ROA not before: Thu 16 Mar 2023 15:47:07 +0000
ROA not after: Sat 16 Mar 2024 15:47:07 +0000
asID: 207990
IP address blocks: 161.123.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 16 15:47:07 2023 GMT
Not After : Mar 16 15:47:07 2024 GMT
Subject: CN=641339ff-52b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:71:71:d1:92:db:db:71:27:aa:81:93:16:f8:
6b:f4:be:d5:28:f4:30:c1:4c:5f:ea:47:6e:e2:18:
60:de:97:cf:7c:8f:9d:74:83:b9:38:d5:33:2f:92:
1b:38:09:4f:74:78:3f:ee:8a:01:5e:ae:2c:04:86:
a1:c3:73:62:99:bf:a9:1a:7c:db:e0:16:72:c0:d0:
43:4f:07:56:ff:60:68:80:c8:36:d2:5c:e4:44:78:
86:4c:b8:d1:39:1e:9b:5d:95:7b:68:fc:5b:e4:97:
28:d6:67:c5:ab:8f:5c:cf:15:ef:3e:ef:08:24:53:
8e:9f:65:30:fb:3d:ad:6d:1d:8c:c6:be:34:4f:07:
03:58:53:c7:18:65:ee:c0:36:16:69:30:77:5e:8c:
62:f5:f7:76:87:15:d5:bc:b1:2a:70:24:6a:77:84:
74:fa:49:b4:5d:6b:8c:1c:30:a9:4a:3d:b2:ee:f4:
87:a4:83:10:ed:42:1a:50:d0:a3:55:30:53:7b:3f:
ec:a8:ba:9d:f9:48:e1:4a:fb:1f:47:ee:c2:bc:93:
81:cb:6a:89:eb:8f:91:14:d4:a6:47:02:9b:73:27:
27:fa:fb:60:cd:2a:07:50:08:8e:70:20:16:bd:db:
8f:92:4d:89:55:7d:b8:a0:f4:b4:72:a6:04:79:18:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:CF:B7:5E:52:9A:A1:DA:8A:9D:DE:10:FA:61:2E:8A:47:3C:5C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0702DF4C41111ED81D92AACF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.160.0/20
Signature Algorithm: sha256WithRSAEncryption
47:7a:fb:a5:f6:58:15:cf:73:9c:3d:c1:75:97:e8:07:d6:96:
ee:66:f7:e7:3b:48:1e:62:5c:f8:1b:55:8c:f2:fc:f0:84:05:
05:21:41:82:97:d2:76:fa:e7:9a:ea:2b:c4:d2:7e:a6:e4:22:
4c:9b:26:fd:4b:73:3d:2e:0e:b4:26:3c:a6:2b:81:cf:dc:7c:
f5:ff:18:9b:9e:b0:67:62:19:87:33:f7:d3:b3:3c:74:7b:17:
82:f1:c2:4e:78:86:76:82:84:fb:12:24:61:fa:44:f2:d7:a6:
17:c4:9b:74:84:51:53:ba:fe:0d:0a:ca:dc:56:87:ef:45:3e:
05:4c:f9:63:8c:e1:65:25:51:40:b7:36:5f:41:30:5a:ec:95:
81:83:28:c2:9f:0a:81:c3:22:87:ac:42:bf:84:88:7d:48:a5:
26:33:52:c9:1d:37:94:db:a1:36:f2:9b:f4:20:5a:b5:65:22:
c3:27:a0:35:fe:ca:bb:ef:1e:f5:44:c0:03:ad:2b:cc:a7:a7:
2a:c5:e1:ae:5e:64:39:44:c1:7d:0a:47:24:14:98:d6:50:2d:
c1:47:07:13:44:8b:8a:e5:54:6f:b2:4d:e2:d2:5d:1c:5e:9f:
e8:e7:24:a1:2d:37:64:96:f6:67:1e:d9:c2:53:f0:5c:59:8c:
59:58:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 02:54:25 2024 by rpki-client on console-fra.rpki-client.org