Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/330DAC82BE4711EDA9481780F1222468.roa
File: 330DAC82BE4711EDA9481780F1222468.roa (raw, json)
Hash identifier: 4syIQr2V+AVRtB/6p2fp6tVdJYIt8xCjnK+CMFuMKjs=
Subject key identifier: 32:BD:E8:0C:60:73:0A:9E:57:17:DC:9D:EC:54:14:18:C5:36:6F:85
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 06
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/330DAC82BE4711EDA9481780F1222468.roa
Signing time: Thu 09 Mar 2023 06:54:13 +0000
ROA not before: Thu 09 Mar 2023 06:54:02 +0000
ROA not after: Fri 08 Mar 2024 06:54:02 +0000
asID: 327697
IP address blocks: 164.160.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Mar 9 06:54:02 2023 GMT
Not After : Mar 8 06:54:02 2024 GMT
Subject: CN=64098295-625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:a0:c4:19:e9:5c:ed:b9:52:d4:9a:06:76:
8a:8b:59:ff:c2:71:30:22:00:d2:df:5f:f1:46:4d:
d3:1c:bb:b7:65:7c:3e:d8:a8:69:b8:43:eb:e4:3c:
d3:4e:ce:2f:78:7c:95:56:c1:a0:41:48:f0:e1:82:
50:ec:a3:a7:5b:3d:1a:82:31:85:1e:5d:0a:4b:fe:
f2:7c:90:fd:b5:56:85:3f:f0:8e:69:33:f9:0c:1d:
f5:99:bd:69:4b:6a:a4:0f:4c:99:b1:84:ff:81:88:
1a:a9:b8:6b:ed:bb:b0:56:c5:4d:d6:8b:e9:94:2e:
ca:81:1d:48:9f:34:02:0e:8d:5a:ca:d6:76:ab:1f:
8a:f3:b6:5f:c4:75:2b:15:c7:a0:ba:f7:f4:d8:d9:
2c:b9:9a:72:2f:dd:3d:da:52:d3:67:67:aa:d0:82:
80:8b:e5:97:5a:54:d0:59:ea:60:db:11:06:29:a6:
ad:4f:31:73:b0:77:cf:f7:6a:09:50:87:d6:07:55:
07:de:0c:c6:9a:30:6b:26:e6:04:9b:94:16:11:8f:
b7:ee:c0:05:e3:f1:f5:e3:1a:41:d2:f9:bf:06:61:
82:4c:09:d5:45:b0:eb:d8:b4:cd:12:77:79:f3:0f:
52:fd:1f:d9:10:af:b7:24:91:b4:96:db:e9:44:ca:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:E8:0C:60:73:0A:9E:57:17:DC:9D:EC:54:14:18:C5:36:6F:85
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/330DAC82BE4711EDA9481780F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.160.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:60:12:e0:e7:e3:be:0a:96:f5:de:e4:07:f6:2e:64:b0:a7:
a5:2f:d6:75:ad:c5:2c:de:35:0e:ed:54:5b:90:3a:27:73:53:
21:19:24:1f:2e:44:dc:1e:dc:67:99:44:9e:4c:8f:93:ce:75:
f0:c0:d0:57:d0:04:5b:bb:de:87:79:b1:1f:ab:a8:34:1f:c3:
07:3b:ed:87:b6:6c:6b:6b:bb:36:12:7c:25:d7:7f:53:16:40:
c0:2d:51:27:78:76:cb:18:e9:17:c8:5c:4d:ba:d5:61:0a:bf:
e8:92:71:af:e8:7c:90:8a:84:d7:d2:59:eb:93:ae:f4:43:3f:
da:5a:bf:6b:c6:77:25:d9:ac:1c:e9:37:2f:87:f9:be:75:44:
96:0f:ea:ba:3a:f1:82:67:f8:16:c5:c0:68:1e:ad:61:c7:67:
4d:be:de:f1:36:80:0d:da:43:5c:eb:4f:9c:ec:f1:fe:a9:ee:
3f:33:f7:df:22:44:39:d7:0b:be:09:ac:85:ab:cb:c1:f1:22:
da:b0:5c:31:94:ca:dd:30:9b:a1:1b:55:ca:07:f9:c5:c7:d6:
b4:6f:35:fd:37:69:69:eb:0a:46:9b:83:87:f8:6b:f5:ce:b5:
cc:a8:3d:83:af:a9:84:33:41:1d:4d:ef:98:64:b9:34:35:24:
0e:a0:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 14:07:07 2024 by rpki-client on console-ams.rpki-client.org