Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D6A125F2327211EC9F94056BD8A014CE.roa
File: D6A125F2327211EC9F94056BD8A014CE.roa (raw, json)
Hash identifier: RBThPex0LugEeEviLtrksjGRhmwHNd7OHZzgh4GFb6M=
Subject key identifier: 53:B6:26:6F:3C:E2:14:F7:C5:33:BF:B7:90:59:48:DD:C3:FC:1C:66
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01E0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D6A125F2327211EC9F94056BD8A014CE.roa
Signing time: Thu 21 Oct 2021 13:28:55 +0000
ROA not before: Thu 21 Oct 2021 13:28:52 +0000
ROA not after: Fri 21 Oct 2022 13:28:52 +0000
asID: 60458
IP address blocks: 161.123.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 21 13:28:52 2021 GMT
Not After : Oct 21 13:28:52 2022 GMT
Subject: CN=61716b17-d056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:9b:17:5b:9b:10:55:59:33:64:de:e7:58:
79:2f:c9:46:a0:21:93:c8:c1:54:21:20:90:20:47:
b4:15:7b:b1:19:c1:13:96:cc:3f:6c:b6:73:b6:10:
f6:75:d7:19:bc:1a:dd:53:34:5e:44:54:b4:0b:98:
7c:a7:00:8f:4c:ef:ac:21:26:2b:af:de:85:05:90:
fa:e2:52:22:4c:3b:1c:53:10:95:8e:51:55:ef:93:
de:72:89:04:56:d7:54:71:6c:7e:77:f6:69:0e:3a:
d0:76:22:cb:ca:dc:d8:ca:03:a7:41:e1:2d:b1:8c:
10:17:dd:94:9b:de:01:e0:5b:53:da:fd:d0:42:95:
60:19:a2:71:6e:85:00:e3:80:78:1e:35:71:58:76:
95:cd:11:ae:57:51:51:e1:c1:c4:c5:c1:e6:c6:d8:
4c:ea:58:4a:77:7b:f1:ed:f0:df:65:30:b6:ab:8a:
e7:1f:be:de:73:b9:25:85:34:20:18:1f:43:6d:fb:
f7:b5:86:36:7c:ff:28:6f:70:a2:dc:f3:11:05:1e:
b1:94:a2:ea:24:c3:0f:a0:1e:c2:2a:23:ef:4f:93:
96:2b:7d:f8:78:9e:ee:01:f4:d4:b9:0e:54:c8:ba:
6c:2a:78:55:84:e2:8d:fc:82:76:26:ad:7f:be:6d:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:26:6F:3C:E2:14:F7:C5:33:BF:B7:90:59:48:DD:C3:FC:1C:66
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D6A125F2327211EC9F94056BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ae:28:0a:74:ae:ef:5b:27:95:aa:e5:87:d7:36:e4:35:5a:
0a:6d:88:0f:e3:39:79:e2:d1:e8:48:53:cd:25:2c:64:ee:03:
52:de:5f:3b:73:29:08:8b:65:c7:87:fb:50:4c:32:cf:54:34:
f4:fe:08:29:8b:da:20:af:71:bf:28:58:a2:3b:f5:cf:94:3d:
9a:49:f4:a9:12:68:bb:31:ec:8f:d5:06:a2:56:00:b2:47:08:
dd:a7:e2:f1:51:ea:f7:a0:6d:21:1a:66:87:a1:13:48:48:a9:
99:ce:83:f4:06:5b:23:a9:f9:4b:ad:3a:da:d1:a0:36:9b:f2:
4a:73:c8:81:40:50:d2:38:d1:a8:c7:6d:cb:7a:6c:34:0a:30:
55:2c:0c:02:0e:91:f8:5f:49:61:f7:98:64:97:91:dd:cf:54:
99:c3:ee:18:03:70:53:05:65:cd:3e:a0:ff:bf:54:63:d8:b8:
e1:41:70:4c:8d:c8:e6:d0:47:4d:f0:7a:f0:e4:15:72:ca:e0:
a8:1a:73:40:3d:c0:a0:87:44:90:3a:4f:80:69:32:22:be:b0:
59:aa:14:eb:df:50:27:a9:3f:94:f2:7d:6a:4e:05:90:e7:26:
13:2e:5e:f9:bc:5d:da:76:78:d3:d9:f4:3f:d0:e9:fd:8c:64:
33:9c:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org