Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/14ED9D1C85BC11EC93BCF89D5A40D577.roa
File: 14ED9D1C85BC11EC93BCF89D5A40D577.roa (raw, json)
Hash identifier: Fvfe508wdjgC1ecVpG3aG70OzbJdYUecImCiLf/bwxA=
Subject key identifier: 88:A8:92:EB:58:6E:2C:0E:09:94:BD:21:DF:1C:6B:F4:AB:F6:FA:8E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0591
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/14ED9D1C85BC11EC93BCF89D5A40D577.roa
Signing time: Fri 04 Feb 2022 13:12:19 +0000
ROA not before: Fri 04 Feb 2022 13:12:16 +0000
ROA not after: Fri 03 Feb 2023 13:12:16 +0000
asID: 58202
IP address blocks: 161.123.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:12:16 2022 GMT
Not After : Feb 3 13:12:16 2023 GMT
Subject: CN=61fd2633-471a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:71:3e:e4:d5:2b:6e:bd:51:00:3a:eb:8d:
cd:ee:b2:f5:90:23:bb:a3:ca:94:d0:67:da:e5:a1:
b3:e2:2b:85:c5:ec:40:1f:80:a7:38:f4:15:db:33:
37:b0:80:5c:78:7d:79:12:06:ca:e8:fe:fd:88:f6:
28:76:14:5e:e2:f9:88:e0:3b:3a:9d:c7:b6:50:f3:
5f:b5:72:59:ec:87:89:af:d3:a2:e8:a5:a7:68:2e:
74:5d:3a:2e:1d:67:e8:c7:8e:6d:a4:cb:fc:fb:40:
f3:f2:37:38:d6:ee:1e:e0:d4:58:b3:eb:11:f7:48:
de:2c:38:13:8a:05:06:de:7b:4a:d0:3f:2d:8b:24:
d2:cb:1d:ae:d9:db:4b:20:e3:81:d8:9e:ea:cb:54:
45:0c:26:40:7c:f9:ac:2e:58:9d:0a:d5:86:85:5f:
f4:81:92:4d:34:52:50:cf:61:3e:e3:f8:76:91:ef:
ed:91:a3:6a:e7:ee:a4:5f:e9:ab:01:1a:c2:84:3d:
b2:53:19:63:ef:40:77:96:b9:4d:07:e6:a5:16:74:
8e:79:76:38:6d:60:ba:ba:f7:a1:4a:78:e2:04:ad:
55:a7:5c:73:6e:35:11:ec:63:ba:42:16:17:38:cb:
48:54:4c:44:95:b8:99:c3:6c:f3:5c:3e:d1:7b:60:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:92:EB:58:6E:2C:0E:09:94:BD:21:DF:1C:6B:F4:AB:F6:FA:8E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/14ED9D1C85BC11EC93BCF89D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.112.0/23
Signature Algorithm: sha256WithRSAEncryption
38:99:ee:06:c9:c7:c4:16:40:5a:53:22:dd:12:8d:66:6d:e7:
1c:93:24:bf:39:f7:f7:1b:8b:5a:9a:be:12:1f:fe:64:93:6a:
61:1e:a8:b4:ea:fe:a9:55:da:f2:92:ca:2d:be:32:2c:ca:66:
76:71:c0:b4:93:74:44:5e:b2:f1:56:0c:8a:2e:d3:8a:88:f1:
c5:15:6a:a0:d2:99:a2:9c:e2:12:17:be:7b:92:f1:bd:15:0b:
05:0d:79:e5:29:8e:08:fa:1e:57:5a:2d:1a:d6:8a:04:99:b3:
4d:13:c4:0d:20:a1:f8:75:39:61:3a:da:7c:d6:34:23:06:7d:
91:c1:79:56:a5:21:e3:94:3d:a4:23:60:97:25:59:0e:85:67:
9d:29:c5:67:2a:c8:02:1f:8b:13:4c:6b:2e:96:3c:93:6b:35:
f5:d0:0a:3f:4b:8f:ef:9a:c0:9e:15:02:c9:9e:83:8b:a6:36:
4d:36:82:4a:f2:95:b0:f0:2d:4b:f0:4e:59:a8:16:c7:30:d2:
cf:14:2d:b1:98:ef:80:7f:f9:0f:6a:36:2b:18:8b:30:81:ad:
20:b1:ff:a1:e5:8c:a6:4e:8a:81:16:62:6a:45:b9:fa:37:a1:
a0:82:29:f7:77:fa:c6:6b:35:49:d9:c8:4b:03:20:b9:d9:02:
ed:8a:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org