Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EBDC512482C411EC83A9F5E45A40D577.roa
File: EBDC512482C411EC83A9F5E45A40D577.roa (raw, json)
Hash identifier: Pdcyu0eWEOzbrb/krWrRQxGdX1yGfOe13kjab11iyMk=
Subject key identifier: 4B:5B:AE:F6:E7:91:93:05:04:58:71:5B:5F:4A:07:17:C7:6C:80:E7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0569
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EBDC512482C411EC83A9F5E45A40D577.roa
Signing time: Mon 31 Jan 2022 18:38:02 +0000
ROA not before: Mon 31 Jan 2022 18:37:58 +0000
ROA not after: Tue 31 Jan 2023 18:37:58 +0000
asID: 213035
IP address blocks: 161.123.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1385 (0x569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 31 18:37:58 2022 GMT
Not After : Jan 31 18:37:58 2023 GMT
Subject: CN=61f82c8a-0eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:3b:ec:ff:de:2e:08:04:f7:4e:93:e6:2c:
f8:4f:ad:b0:df:df:d2:f0:ac:a6:fe:38:55:b8:9d:
cd:a7:dd:8b:d3:83:5a:93:f8:e2:86:eb:64:e4:4e:
d7:e2:aa:88:8a:d0:01:62:58:6e:eb:73:f3:5e:19:
3e:26:13:c2:ee:7c:ab:36:09:9d:4e:77:b2:c4:57:
b3:49:9b:1f:ed:22:bc:b4:f5:f7:be:8b:b7:bc:b2:
8d:54:97:8a:fd:83:31:66:7c:be:45:07:d1:3e:73:
58:90:4f:3c:98:1e:a9:9b:2c:fe:91:e7:7a:30:56:
c4:09:c6:a9:9a:d9:cc:14:90:30:0f:81:18:92:1f:
e3:ba:32:16:10:51:f8:4d:70:fa:7b:ab:a2:0b:59:
9f:b3:42:3e:dc:81:cb:3c:cb:87:2e:c6:02:c6:7d:
78:da:9b:3b:31:10:3a:95:06:ca:81:c4:5f:a0:dd:
3e:f8:cc:d4:de:c3:92:8f:1c:aa:0c:c2:87:f0:6b:
b3:fa:0e:20:01:17:f8:ea:01:05:b4:0a:1e:94:2a:
c5:c2:3e:32:dc:11:3b:f3:b9:fb:f0:ed:c4:61:f0:
ef:3b:54:4b:0f:d1:f2:ab:5d:92:0f:7a:64:fa:cb:
1d:fe:e2:ad:63:41:36:91:c5:8a:0e:45:c4:b5:39:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:AE:F6:E7:91:93:05:04:58:71:5B:5F:4A:07:17:C7:6C:80:E7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EBDC512482C411EC83A9F5E45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.140.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:55:72:f1:92:46:55:a4:2f:09:82:2b:b6:f3:97:5c:11:
7c:25:aa:11:4b:8a:90:b9:f6:d6:58:b5:a0:39:47:82:94:fc:
5c:c2:b9:cf:c3:bc:f8:66:00:5e:81:b2:7d:ea:f7:59:7c:ff:
b5:18:12:b5:ac:d0:33:3e:23:5c:96:26:8c:b7:7e:f2:3e:30:
fd:4c:3e:66:14:20:40:1d:83:29:e4:b9:52:08:3f:fc:18:2f:
c6:b0:9a:06:28:f1:f9:e2:1d:e8:9c:02:cf:e9:5e:41:93:1e:
db:14:9b:5a:a1:53:52:09:30:4d:ea:35:91:99:51:39:05:9a:
53:48:79:e5:b7:5c:2f:37:0c:62:2a:c4:84:4f:50:92:bb:b0:
54:9d:cf:99:57:9a:d9:44:88:da:a2:ec:f2:66:46:a0:82:27:
52:89:ee:b1:ab:db:ec:ba:e9:c1:f5:68:da:2e:0c:2b:02:fa:
35:ba:2c:3a:20:9f:c3:1b:2b:56:77:54:85:fb:45:a7:8a:92:
8b:29:f7:1f:fa:bf:18:ab:0a:77:b6:27:a2:f6:94:28:01:3c:
41:1a:26:ac:85:17:a0:12:b5:50:17:7d:91:72:2e:7e:11:10:
08:d0:6e:b4:49:4f:55:85:8e:34:8a:45:79:65:dd:0d:84:b3:
aa:0f:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org