Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E651DCC6F16211EC96D17DB5F1222468.roa
File: E651DCC6F16211EC96D17DB5F1222468.roa (raw, json)
Hash identifier: EXKCS2KnfAX0swo1pJ6FOlENbZ44WLa7tLFAh5GTkuc=
Subject key identifier: 92:D6:1D:7D:FA:7D:90:FD:C4:A9:C1:42:CE:C9:40:AA:45:63:97:AC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 076F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E651DCC6F16211EC96D17DB5F1222468.roa
Signing time: Tue 21 Jun 2022 13:06:01 +0000
ROA not before: Tue 21 Jun 2022 13:05:58 +0000
ROA not after: Wed 21 Jun 2023 13:05:58 +0000
asID: 203999
IP address blocks: 161.123.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 21 13:05:58 2022 GMT
Not After : Jun 21 13:05:58 2023 GMT
Subject: CN=62b1c239-3725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:9b:94:e8:3c:52:c7:f9:46:2e:e9:41:b3:
0f:4f:a6:40:16:43:d8:2d:60:a8:0f:c8:ed:3a:2f:
5a:dd:5c:c7:68:6c:64:a1:e6:5b:cc:27:2a:3e:2a:
b0:ff:38:77:c9:8c:42:2f:d5:ef:26:0f:54:d6:b5:
bf:07:ec:d6:db:19:93:b4:a8:eb:29:87:43:ab:8a:
d3:d6:46:88:77:1d:65:66:52:5c:ca:39:5b:da:d5:
9f:b0:b6:26:a8:ef:89:e4:c0:46:e2:74:83:45:fa:
d0:fb:ec:07:f4:4b:7b:ef:c3:b3:f5:af:0a:04:a1:
58:f1:08:f4:3e:f5:32:dd:e2:c6:17:b7:88:d3:d8:
3d:aa:21:6a:fb:d4:26:2c:81:8a:d0:38:b5:1b:c2:
b6:a1:37:56:b0:d1:05:b9:cc:b9:21:9c:d8:05:89:
e7:cf:71:e3:1a:9e:41:28:fa:2d:7a:11:e2:d7:83:
cd:6f:fa:b1:de:c7:43:4c:70:e0:1f:ae:60:b6:92:
d5:5b:0b:8e:fe:ad:57:fa:13:5f:a8:f1:dd:a3:b1:
d5:03:73:e6:e4:e4:c6:2d:ed:f4:43:e6:aa:b7:72:
85:fa:9a:4e:ef:3f:9e:e7:6d:1d:ed:88:63:20:86:
e9:e2:9f:22:e3:8d:61:e4:ea:75:e7:a4:85:ab:b6:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:1D:7D:FA:7D:90:FD:C4:A9:C1:42:CE:C9:40:AA:45:63:97:AC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E651DCC6F16211EC96D17DB5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:0b:b1:9d:43:2c:cb:82:fa:00:0b:75:e3:11:0f:33:de:e8:
3c:88:65:21:b5:db:8d:7f:67:c5:aa:3a:93:0e:8f:63:37:b3:
0d:b8:a1:c7:4a:6c:de:56:7a:ba:7e:62:b4:c1:cb:82:e1:43:
f3:bc:b0:90:b3:0e:ee:c9:6b:19:77:72:b7:05:f9:e3:0d:cf:
b7:fc:0e:f3:0e:4c:fd:0e:64:1b:86:cc:e3:e0:d8:51:25:4e:
c8:42:c2:4c:17:b9:15:6a:4d:fb:47:7a:bf:4c:27:a0:7a:38:
e6:7a:f3:ff:e3:f7:73:23:e5:4b:0d:84:99:f7:82:ec:21:f5:
15:99:89:ab:6d:b4:93:c2:92:2a:5b:44:09:a7:af:23:07:55:
d3:29:cd:eb:b5:e5:5c:c9:b4:1c:30:9c:67:68:b0:2d:82:fc:
b7:2b:be:c0:a4:c9:8c:80:7e:e3:69:27:05:50:ee:c1:63:16:
de:3b:10:5a:cf:4d:d5:82:80:1a:5b:e0:d5:e0:a6:bf:0f:ec:
9f:07:42:4c:26:42:a3:13:7e:69:84:76:b7:2e:c3:07:a3:f8:
fa:79:f8:02:86:2f:39:47:4f:6d:fe:ef:c1:b7:53:fb:55:a4:
df:c7:8d:5b:58:55:06:8b:88:28:a4:60:a1:63:b2:d4:b3:d6:
e9:86:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org