Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E833A34A845611ECBFD0A4825A40D577.roa
File: E833A34A845611ECBFD0A4825A40D577.roa (raw, json)
Hash identifier: gh4Ynej7NMvH0MLiDsPMKKiz5D7hVDR+DXR1Hu+srMM=
Subject key identifier: E2:53:4E:A2:92:DB:03:54:91:CB:49:33:33:1E:81:7D:46:5F:FD:CD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 056D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E833A34A845611ECBFD0A4825A40D577.roa
Signing time: Wed 02 Feb 2022 18:35:34 +0000
ROA not before: Wed 02 Feb 2022 18:35:30 +0000
ROA not after: Thu 02 Feb 2023 18:35:30 +0000
asID: 3561
IP address blocks: 161.123.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 2 18:35:30 2022 GMT
Not After : Feb 2 18:35:30 2023 GMT
Subject: CN=61facef6-0df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:b8:2f:85:00:c6:7e:06:a2:84:98:ef:eb:
59:0a:b3:4c:4a:6e:95:66:6e:23:0b:64:96:1a:eb:
5d:5d:86:b3:ff:db:4c:45:52:f4:f8:43:b4:68:da:
af:a7:7f:7f:06:c5:e4:02:fb:ad:4b:32:e8:60:60:
e7:29:09:db:24:c9:8a:1c:2e:f5:c4:61:01:31:09:
61:7d:81:7c:30:a3:9d:0c:4a:a8:cb:14:fc:63:4d:
b8:45:4f:00:45:1a:31:c4:1d:63:06:6a:5f:8c:d0:
d6:0b:c0:92:b0:97:23:f9:2f:5e:bf:b8:51:91:66:
1d:7a:8c:cd:35:80:14:d8:ed:31:7a:05:85:59:6b:
99:5a:ac:c5:b1:ab:cc:e5:50:43:d2:e4:02:f9:6a:
a7:d4:33:d4:1c:b3:07:22:09:b6:6d:ab:2c:61:e9:
07:6d:f4:2a:87:38:78:30:78:ef:bf:e5:a8:9f:a6:
11:4c:1f:36:0c:1b:e9:a2:50:27:f3:b1:79:fb:b2:
6a:eb:ad:99:04:62:c3:48:14:5d:75:ba:64:5c:37:
20:e3:ea:98:2c:24:8e:a9:4c:4a:1a:29:5e:d6:a0:
f1:af:03:ba:a3:4a:ae:12:08:ea:a4:a1:df:40:72:
77:4f:16:1f:a1:5a:59:fd:c2:77:cc:4c:97:0c:9e:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:4E:A2:92:DB:03:54:91:CB:49:33:33:1E:81:7D:46:5F:FD:CD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E833A34A845611ECBFD0A4825A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.4.0/22
Signature Algorithm: sha256WithRSAEncryption
22:d3:da:95:04:be:3f:ae:37:7f:f2:d2:a8:74:a5:fb:5f:bd:
52:1f:14:2f:dd:46:1a:61:97:d5:4d:d7:ae:4e:b7:80:74:69:
04:bf:e2:83:73:88:e5:6e:e5:28:49:a5:a0:65:54:d1:75:f2:
e8:93:a2:ff:50:ef:74:43:e1:f4:c2:0d:ee:e3:9c:f5:2e:cf:
a8:c6:8a:83:c7:eb:e5:1b:1a:4c:72:92:2d:0a:1f:7e:ea:6f:
8a:f7:0e:f2:46:5c:23:e1:64:44:f9:d8:df:bb:01:a3:98:ea:
62:51:16:46:d7:de:35:0a:25:85:8c:34:10:4c:1b:36:ff:bf:
60:75:e4:c2:c8:9f:09:b4:6e:d1:38:e1:fb:c9:44:ee:41:8a:
a3:b4:ad:af:11:2c:3c:6f:ae:19:9a:6c:33:2d:59:3a:3d:51:
d0:a6:15:17:02:cd:81:84:da:28:63:1c:8c:1c:69:a6:26:92:
31:8f:47:7b:f6:94:09:a9:48:6b:be:d0:9c:88:e3:07:d0:42:
39:cd:af:f0:71:6b:2c:68:ac:86:95:04:7f:84:77:45:e8:2e:
f6:a1:0d:3d:b3:e4:fc:64:59:0c:a1:69:d6:a9:78:11:cb:63:
bc:87:80:ae:9a:12:77:d7:e4:10:34:5c:fd:21:96:4e:96:63:
bd:d9:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org