Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DAE85594F93C11EDAEA663894AD9E6FC.roa
File: DAE85594F93C11EDAEA663894AD9E6FC.roa (raw, json)
Hash identifier: qFSN6uFipmmjdjboweOgiEl7teiwn8c+XP24r21PUT4=
Subject key identifier: 53:CC:16:A1:88:3C:8A:B4:6D:12:B2:6A:72:01:9A:94:13:6C:41:94
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0ACE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DAE85594F93C11EDAEA663894AD9E6FC.roa
Signing time: Tue 23 May 2023 07:38:48 +0000
ROA not before: Tue 23 May 2023 07:38:44 +0000
ROA not after: Thu 23 May 2024 07:38:44 +0000
asID: 207990
IP address blocks: 161.123.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 23 07:38:44 2023 GMT
Not After : May 23 07:38:44 2024 GMT
Subject: CN=646c6d88-c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:05:8f:02:5d:bb:7e:3c:da:fb:36:99:90:
8e:70:ca:73:4f:4f:0a:7d:9b:64:12:c5:56:15:fc:
74:4c:8e:a4:2d:e8:36:56:f3:c8:b7:bf:c7:49:32:
1a:87:68:db:d0:61:8f:54:76:72:e3:59:b9:b7:5e:
ef:5a:f0:5b:cf:a9:66:cd:2f:95:84:22:30:1f:76:
18:2a:cd:93:46:45:3b:26:88:8a:17:a9:6d:1a:4e:
39:f0:48:6b:0c:df:06:5a:e7:2c:13:27:eb:38:db:
53:dd:ad:1b:29:ab:1d:4d:03:a0:25:f4:3d:ef:4b:
d8:e1:e3:40:4f:d6:7b:fe:6c:d5:21:d0:ff:1b:54:
7c:e7:4c:0b:f8:71:11:2d:8e:e0:f7:69:ce:79:e2:
c3:06:a0:6b:a6:81:30:91:45:09:bf:45:c2:2e:ee:
7e:ac:0e:81:a7:e4:73:1a:a8:4c:7a:4c:59:04:df:
69:c6:b1:ad:37:08:28:d6:a2:9f:53:ad:c3:6e:0b:
ff:02:dd:9f:8f:24:b9:34:bc:15:9f:61:98:84:02:
c5:da:ea:ff:b8:1a:fa:1f:62:c6:72:2d:72:5a:d5:
48:f4:f7:78:b5:fd:55:75:e3:ef:8b:20:24:cd:98:
6e:3c:1b:e3:2c:f0:22:55:c9:07:2c:a0:34:b7:58:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CC:16:A1:88:3C:8A:B4:6D:12:B2:6A:72:01:9A:94:13:6C:41:94
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DAE85594F93C11EDAEA663894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.242.0/23
Signature Algorithm: sha256WithRSAEncryption
02:c5:c4:25:4f:7a:36:49:03:5e:03:c8:2f:ba:60:d9:4a:4e:
86:61:46:a6:5f:2c:50:ab:eb:e3:02:e3:4c:b5:cb:8e:3f:b2:
68:16:36:e1:76:6b:4b:f5:81:af:5d:f3:67:0a:42:06:53:f1:
32:77:b6:23:11:7b:ee:2e:7c:44:6b:d2:4a:bc:05:d0:e4:02:
14:82:58:68:fd:50:66:d0:cc:06:55:17:41:48:8a:25:85:09:
4f:a9:f1:b0:67:aa:b4:2c:bb:1c:5a:b3:b2:64:79:2e:c2:5a:
3c:74:3e:d9:4e:31:3a:2f:20:15:f3:79:70:6c:66:06:8f:e4:
95:d3:41:c7:26:f2:ea:d2:a6:14:6b:2e:d4:9d:86:47:21:73:
53:05:44:e5:11:04:3d:ee:d1:10:99:ad:b4:f7:f1:48:1f:cc:
6e:19:28:ef:cb:a5:5a:84:72:9b:f0:e9:38:48:ea:6b:ee:a3:
24:47:07:f6:31:d6:55:89:55:10:80:3c:0d:b3:1a:65:ec:8a:
e6:bc:d2:5f:8b:98:af:f3:a0:b7:95:43:80:6c:19:5d:2b:64:
82:da:56:e2:e9:12:53:47:8f:29:84:12:32:09:ef:c4:61:d9:
95:18:9c:b9:3f:22:f7:33:3a:84:44:3e:d6:6e:8c:c2:9d:44:
75:1f:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 03:28:58 2024 by rpki-client on console-ams.rpki-client.org