Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB1E8E583D7F11EDAB37F4ADF1222468.roa
File: DB1E8E583D7F11EDAB37F4ADF1222468.roa (raw, json)
Hash identifier: T1O+QBVxRJIaaRDu3ZKATcw2TAYlK+37xQm1LbSETns=
Subject key identifier: 6E:50:AF:01:18:FD:EF:58:EB:9E:CC:2A:23:D8:E4:8B:91:14:2C:61
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0859
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB1E8E583D7F11EDAB37F4ADF1222468.roa
Signing time: Mon 26 Sep 2022 09:44:46 +0000
ROA not before: Mon 26 Sep 2022 09:44:43 +0000
ROA not after: Tue 26 Sep 2023 09:44:43 +0000
asID: 203999
IP address blocks: 161.123.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:44:43 2022 GMT
Not After : Sep 26 09:44:43 2023 GMT
Subject: CN=6331748e-f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:02:55:dd:4c:4a:01:36:d5:7c:cc:ef:ae:
f3:41:3e:6c:0f:6f:a3:12:b6:10:38:05:4b:f7:cb:
19:cc:44:6c:22:8d:e2:0a:58:a8:f9:e2:19:2a:a4:
9f:ef:b3:bf:59:dc:c7:70:83:e5:31:57:21:4b:33:
93:fa:0e:8b:0f:18:84:89:02:47:35:c7:bc:98:82:
b3:f7:4c:a6:2f:5d:87:cc:d0:e4:44:51:c5:8e:b8:
60:b1:72:17:1a:0c:d7:80:b5:24:a3:33:3a:28:6c:
5e:ab:b5:79:08:b7:e9:55:bc:88:3a:3b:dc:41:71:
99:e2:9d:f7:2e:2c:42:8c:5b:77:78:7b:fe:b3:ac:
15:71:b4:2e:6d:1b:60:4e:e5:92:01:bf:f1:c8:4b:
6a:d6:92:5a:02:2c:78:32:99:18:e4:63:b0:1c:4a:
93:53:6f:18:cc:1b:26:14:5f:45:5b:7c:43:52:df:
0d:61:48:2d:f0:4f:83:3f:3d:04:56:22:1f:08:28:
33:b9:82:3d:33:38:89:06:92:28:73:f5:0f:e8:19:
e1:18:31:12:07:a2:46:0c:5b:ce:af:98:83:c9:bb:
35:0d:15:d7:72:f7:83:4d:33:7e:19:2a:d6:a2:03:
e9:85:59:76:2a:96:c4:10:6c:1d:9a:2e:56:81:e9:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:AF:01:18:FD:EF:58:EB:9E:CC:2A:23:D8:E4:8B:91:14:2C:61
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB1E8E583D7F11EDAB37F4ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:45:09:3b:50:e7:b4:22:a3:a1:0c:af:9b:04:c9:74:57:c1:
09:5f:62:0a:b2:83:79:c1:51:85:ad:bc:1c:ec:36:44:31:8b:
ef:e6:eb:a8:f3:23:4c:86:24:a5:75:69:42:cb:26:75:58:ac:
8f:a0:07:75:e8:65:ba:55:9a:ea:3d:7f:1e:32:b0:90:c5:ec:
2d:6f:ae:fc:56:e3:fd:40:88:5b:91:2a:74:f0:fe:31:ac:44:
c9:f9:d8:76:15:da:08:11:33:d0:5b:4b:39:e3:c1:66:8a:58:
46:2a:52:d9:46:6c:29:ee:16:bb:80:0a:60:3b:dd:56:fb:c9:
43:a9:e2:9d:e6:a3:36:1d:c9:a0:92:63:e9:de:a9:cb:c3:31:
a6:df:7e:12:1d:aa:25:f2:d4:7a:19:9d:e1:e6:e2:2a:12:ef:
0a:89:b1:f4:b0:c4:91:ba:a9:cb:57:1a:3d:13:5e:f9:41:43:
18:a7:99:5f:96:4c:7e:8a:35:d8:25:a9:30:19:d4:3f:87:72:
1d:3b:e9:64:48:19:5d:32:77:e0:e9:72:91:55:1a:bd:ea:b2:
ed:30:f9:93:0d:fc:72:83:7c:56:85:79:6c:4e:bf:e5:18:92:
3f:1c:05:e0:50:34:c3:8a:90:03:45:8d:a0:7e:0a:e5:04:ce:
94:df:a4:d8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYwOTQ0NDNaFw0yMzA5MjYwOTQ0NDNaMBgxFjAU
BgNVBAMMDTYzMzE3NDhlLWYyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFqgJV3UxKATbVfMzvrvNBPmwPb6MSthA4BUv3yxnMRGwijeIKWKj54hkq
pJ/vs79Z3Mdwg+UxVyFLM5P6DosPGISJAkc1x7yYgrP3TKYvXYfM0OREUcWOuGCx
chcaDNeAtSSjMzoobF6rtXkIt+lVvIg6O9xBcZninfcuLEKMW3d4e/6zrBVxtC5t
G2BO5ZIBv/HIS2rWkloCLHgymRjkY7AcSpNTbxjMGyYUX0VbfENS3w1hSC3wT4M/
PQRWIh8IKDO5gj0zOIkGkihz9Q/oGeEYMRIHokYMW86vmIPJuzUNFddy94NNM34Z
KtaiA+mFWXYqlsQQbB2aLlaB6S3tAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUblCv
ARj971jrnswqI9jki5EULGEwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0RCMUU4RTU4M0Q3RjExRURBQjM3RjRBREYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe10wDQYJKoZIhvcNAQELBQAD
ggEBABxFCTtQ57Qio6EMr5sEyXRXwQlfYgqyg3nBUYWtvBzsNkQxi+/m66jzI0yG
JKV1aULLJnVYrI+gB3XoZbpVmuo9fx4ysJDF7C1vrvxW4/1AiFuRKnTw/jGsRMn5
2HYV2ggRM9BbSznjwWaKWEYqUtlGbCnuFruACmA73Vb7yUOp4p3mozYdyaCSY+ne
qcvDMabffhIdqiXy1HoZneHm4ioS7wqJsfSwxJG6qctXGj0TXvlBQxinmV+WTH6K
NdglqTAZ1D+Hch076WRIGV0yd+DpcpFVGr3qsu0w+ZMN/HKDfFaFeWxOv+UYkj8c
BeBQNMOKkANFjaB+CuUEzpTfpNg=
-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org