Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DF40A9CCD1E511EC92D386B7F1222468.roa
File: DF40A9CCD1E511EC92D386B7F1222468.roa (raw, json)
Hash identifier: J4NP2ri20NkOuN3llhH7skkqM09u6MRR7HCr1+JfD6Q=
Subject key identifier: 9F:DA:DB:D0:7F:1F:3B:2F:5E:1F:ED:08:DE:94:1C:6A:37:CA:5B:56
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 06C7
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DF40A9CCD1E511EC92D386B7F1222468.roa
Signing time: Thu 12 May 2022 11:22:56 +0000
ROA not before: Thu 12 May 2022 11:22:53 +0000
ROA not after: Fri 12 Aug 2022 11:22:53 +0000
asID: 327790
IP address blocks: 161.123.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 12 11:22:53 2022 GMT
Not After : Aug 12 11:22:53 2022 GMT
Subject: CN=627cee10-a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:74:02:a7:bf:99:1c:bc:ce:75:00:21:df:
89:31:6d:1d:18:92:36:7a:11:7f:1d:71:b6:dc:5f:
a0:b8:cb:97:50:71:de:e7:b6:6c:fe:ae:93:8d:d2:
96:d2:34:18:30:6f:d1:ec:4c:59:2d:2a:67:d1:79:
00:09:21:f9:b2:23:19:25:38:e5:d8:d8:55:3d:7c:
51:a5:57:f5:c8:ea:48:d8:76:0a:2c:a3:3d:db:15:
be:d4:a1:da:9e:4a:a5:19:cb:d6:dd:16:ce:7f:15:
4e:00:fe:e1:da:68:7e:32:f8:f7:18:c0:5d:74:e1:
41:9d:a2:a6:3d:72:c7:38:d9:3c:bf:61:a7:5f:b2:
60:0a:96:47:39:ca:61:fa:5f:0f:d9:86:b2:27:f2:
4f:46:54:f7:11:6e:9d:c8:c4:85:ca:8f:f0:55:4a:
0e:72:e9:19:9f:ba:fd:b1:26:ec:45:72:4c:25:54:
73:18:2e:9e:14:ad:36:97:0a:67:c5:5b:61:75:34:
71:d7:23:74:7f:ac:37:a2:36:5b:a7:ec:12:ad:3d:
56:12:ac:3a:89:38:60:05:f8:7e:26:95:bc:c1:f5:
44:62:5e:40:f6:5a:31:27:59:b1:b8:f9:2e:7d:46:
93:21:0a:05:fd:13:45:af:7e:11:39:1b:99:06:43:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:DB:D0:7F:1F:3B:2F:5E:1F:ED:08:DE:94:1C:6A:37:CA:5B:56
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DF40A9CCD1E511EC92D386B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.194.0/24
Signature Algorithm: sha256WithRSAEncryption
05:04:1f:54:9c:58:f3:f7:63:00:63:ab:48:d6:96:71:76:ce:
e7:28:93:9f:34:b1:c7:83:ec:fd:2e:7c:34:69:ba:09:9b:1e:
02:88:78:31:31:66:59:40:82:dd:6e:f3:4c:66:4e:31:29:7c:
4c:cd:05:7f:4d:d2:12:ff:68:de:b8:f8:6f:14:c9:a5:ab:8d:
37:b4:72:e4:cb:5b:6f:c5:ed:2d:35:ef:55:e3:46:db:96:5a:
e4:7b:6d:61:98:fa:e4:4d:df:68:5d:f4:57:04:63:61:74:d5:
d7:8f:a2:d6:b7:90:32:96:1e:10:89:53:84:f6:55:75:6c:f7:
5b:53:03:b4:b2:09:3c:2c:f9:09:80:2d:c3:4d:74:ef:68:56:
c7:b0:f7:0e:8a:35:ce:44:c7:f7:9e:85:4c:97:c7:a7:13:7e:
85:93:30:44:bc:40:53:03:48:de:a8:5a:5b:3e:9e:c0:70:f5:
65:fd:8b:97:ec:ce:c8:06:b7:0d:2c:fa:48:ea:02:85:9c:b6:
31:8f:e6:c8:ec:d0:92:1d:91:90:49:e3:e0:c2:31:e8:5e:fc:
d4:c1:12:54:0b:07:c2:71:f8:e7:a5:86:5a:fa:64:fa:7d:01:
1d:83:49:02:ff:88:dc:72:1f:1f:88:b5:22:51:6d:30:f5:c7:
ed:e6:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org