Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1258AA6E5E011EC8006B8A1F1222468.roa
File: D1258AA6E5E011EC8006B8A1F1222468.roa (raw, json)
Hash identifier: 2YcXM0Zx11r7kMuUu3Nz23M3c1bzMl5x3oguuJxYaag=
Subject key identifier: 80:A5:0F:E6:70:B9:11:67:70:AD:62:A6:DB:71:AD:40:2E:55:4F:51
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0740
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1258AA6E5E011EC8006B8A1F1222468.roa
Signing time: Mon 06 Jun 2022 21:37:09 +0000
ROA not before: Mon 06 Jun 2022 21:37:05 +0000
ROA not after: Tue 06 Jun 2023 21:37:05 +0000
asID: 203999
IP address blocks: 161.123.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:37:05 2022 GMT
Not After : Jun 6 21:37:05 2023 GMT
Subject: CN=629e7385-3973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:4f:a1:ce:95:67:25:f2:4d:df:ce:16:0a:
f2:a3:c4:c1:ed:8a:39:b3:e9:ec:3f:ca:39:aa:4c:
c6:94:94:ed:07:fe:11:8d:69:4d:a8:05:b7:da:6e:
bc:22:9a:56:d8:3b:7e:ea:cc:cc:7c:08:2b:f3:b2:
ac:cc:4c:08:8a:ad:2f:15:bf:0e:5b:b9:e7:e9:ba:
94:2e:d4:d0:56:bf:11:40:b4:e0:72:7e:6c:e8:09:
5f:68:4c:49:0d:99:77:67:dd:ec:b7:ac:7c:6e:82:
8d:83:84:42:ea:4d:9c:86:2d:96:74:d8:25:9b:08:
7d:14:7d:d3:98:ca:b4:a9:87:fd:5b:c6:eb:6c:a6:
27:5f:e6:1e:28:68:be:78:cc:1a:fc:42:79:a8:44:
87:ca:57:86:34:2f:35:6e:20:c5:1b:01:b3:d2:ff:
2d:5d:29:79:2c:b7:9e:9e:e1:1b:2b:82:7d:30:d2:
ab:ad:1f:bf:b2:97:8d:5c:88:06:b2:a4:b8:c7:80:
81:5c:3d:40:c9:fe:f9:45:e6:12:05:42:6a:70:bc:
d6:db:ed:70:71:77:da:ec:28:9f:1e:ce:c6:aa:b4:
dc:d7:55:f0:5a:59:b6:59:b7:d8:c5:c6:af:2e:6d:
d8:40:9c:88:a3:1b:d0:3f:a5:25:f7:24:52:db:3e:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:0F:E6:70:B9:11:67:70:AD:62:A6:DB:71:AD:40:2E:55:4F:51
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1258AA6E5E011EC8006B8A1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:65:2e:d1:fe:04:74:81:94:0a:e0:6c:2b:1b:a7:35:8f:d0:
89:cb:bf:61:9b:21:fb:b1:ff:bd:9f:4d:57:43:94:c7:00:9b:
8a:2d:0e:74:e0:f3:76:9c:c5:11:1d:d2:a7:01:44:ae:e0:7c:
b7:06:76:18:0f:cb:12:e4:ff:a7:cc:f9:14:9b:fd:38:cd:8d:
93:3b:29:3a:9c:f5:88:90:d6:4a:cc:03:3f:1a:fd:3f:5c:7a:
c4:0f:e5:25:7f:a0:0c:7f:b2:35:3a:a2:79:69:80:7e:e8:f4:
af:b1:64:02:5c:29:3f:e3:bc:b2:51:02:34:29:2d:18:50:82:
2b:ba:80:16:d3:e8:af:2e:24:8e:af:cb:11:4a:b1:4d:9a:dc:
8f:b1:cb:00:66:f0:89:01:25:c9:ee:68:7b:b0:39:f3:c6:a0:
af:22:97:2c:97:34:f6:a1:8e:ac:e1:9a:32:75:b7:f7:e8:be:
a4:8f:89:98:48:53:73:ef:20:58:dc:c9:1e:bc:28:61:ff:ea:
49:d7:10:9d:59:7f:66:8c:8d:a7:21:97:23:fa:58:67:ca:5b:
d8:9d:4e:f1:ba:ad:f3:44:29:06:6e:73:e9:c9:65:e6:7b:b8:
90:35:90:18:cb:d6:ea:2b:3b:b7:5c:57:e1:2d:4d:49:5e:a8:
42:7d:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org