Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D9BA32D03D8211EDAEF323B6F1222468.roa
File: D9BA32D03D8211EDAEF323B6F1222468.roa (raw, json)
Hash identifier: Xle/umGgXYYaxTyj/mfDvW7kPCQ3wXDuIXgyq8+SJVw=
Subject key identifier: D0:31:C3:68:C8:07:9F:27:B2:90:8F:DC:B7:53:DA:47:57:67:69:DC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0891
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D9BA32D03D8211EDAEF323B6F1222468.roa
Signing time: Mon 26 Sep 2022 10:06:13 +0000
ROA not before: Mon 26 Sep 2022 10:06:09 +0000
ROA not after: Tue 26 Sep 2023 10:06:09 +0000
asID: 203999
IP address blocks: 161.123.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:06:09 2022 GMT
Not After : Sep 26 10:06:09 2023 GMT
Subject: CN=63317994-fe26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:2d:7e:70:a1:85:49:bc:80:e3:17:bb:20:
f6:72:b6:ae:8d:6f:6d:f6:0a:43:9f:52:e9:ad:ad:
8b:62:20:af:0a:4b:11:7d:7c:48:79:a9:32:1d:b1:
8f:58:d2:ce:5b:e1:35:80:dc:92:8e:ec:6d:fd:5d:
37:80:94:38:b1:36:02:a5:be:41:0a:e3:89:cf:17:
3b:c4:bb:45:2d:74:11:7d:fc:64:72:76:e0:bb:33:
fb:e1:c0:87:fe:50:59:bc:79:02:21:92:7f:8d:eb:
bb:ca:3c:a9:a7:2f:55:ae:7f:fe:fc:74:67:52:52:
e6:3b:2b:e5:85:b5:38:b4:b5:49:c5:e9:06:70:d8:
c4:b0:b6:78:c2:d2:fd:a1:e7:0f:29:bf:e9:c3:b8:
f8:4f:34:0f:96:2c:82:ee:72:08:c1:99:e4:85:06:
50:9c:90:ad:c0:98:d6:30:1b:84:22:c2:24:81:ea:
18:f2:eb:47:5b:a5:5c:25:62:86:74:40:97:8f:ef:
a0:74:6a:9e:75:a2:e9:0d:8d:f6:eb:a6:6b:42:1c:
90:0e:73:05:57:10:e6:3a:65:f0:ec:4b:94:2b:d5:
89:0d:c4:df:54:24:6b:ec:85:66:ac:3a:aa:5d:f4:
87:1f:5d:0c:06:93:e3:ad:db:17:4c:b6:6f:bd:d2:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:C3:68:C8:07:9F:27:B2:90:8F:DC:B7:53:DA:47:57:67:69:DC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D9BA32D03D8211EDAEF323B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.212.0/24
Signature Algorithm: sha256WithRSAEncryption
18:68:2e:e0:c5:53:17:f0:ff:c5:36:ed:cd:fa:f1:a0:95:15:
67:d8:82:d4:d4:85:f8:0b:6d:6b:ea:7a:76:5b:29:92:c7:f2:
22:6a:84:76:de:22:aa:93:d4:e3:e5:b2:d8:7e:eb:b2:73:1f:
a9:d9:ed:a3:39:fe:dc:54:dc:37:c6:4c:d2:a7:80:b8:39:67:
37:0b:8e:08:96:1c:fa:9d:67:30:a7:01:01:ac:ea:f5:d1:e3:
b3:6e:47:c5:9d:73:4e:b7:d1:12:94:b6:ac:e5:ad:48:1a:70:
2b:21:1d:c9:ec:73:4a:7a:dd:a5:84:05:1c:1e:eb:47:64:f3:
9e:59:cc:26:41:21:b6:6c:b8:82:19:bf:32:d7:da:00:fd:11:
6c:e9:db:4d:13:7a:5d:32:d8:ae:a0:1d:0e:e6:a0:1c:92:c4:
8e:91:f2:60:65:8a:b3:fb:97:4b:5f:e2:37:2d:29:7b:7d:9f:
7a:60:4a:4e:7d:14:f4:79:94:9f:2f:40:eb:90:21:d1:f8:e3:
60:dc:46:9f:fa:80:c8:7f:0b:af:de:17:1d:7d:ad:57:8e:9d:
54:3f:97:a3:3f:a2:e1:52:2e:e2:ac:33:f8:cb:f9:e6:b7:a4:
3f:cd:20:0a:87:d5:13:c4:9a:71:13:12:a7:94:bb:07:95:2c:
d0:ed:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org