Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1716C468C4A111EDA7383AE1F1222468.roa
File: 1716C468C4A111EDA7383AE1F1222468.roa (raw, json)
Hash identifier: l1WArOzjmPK3eHTwCsd8v/ta1nriXLxpSxG/qDeziIQ=
Subject key identifier: 63:34:F6:F0:12:F5:D0:9B:CC:74:9E:ED:D4:EB:4A:24:14:58:2D:89
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A34
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1716C468C4A111EDA7383AE1F1222468.roa
Signing time: Fri 17 Mar 2023 08:52:48 +0000
ROA not before: Fri 17 Mar 2023 08:52:42 +0000
ROA not after: Sun 17 Mar 2024 08:52:42 +0000
asID: 207990
IP address blocks: 161.123.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 17 08:52:42 2023 GMT
Not After : Mar 17 08:52:42 2024 GMT
Subject: CN=64142a5f-96ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:3f:a9:e3:5f:80:d5:17:c8:cb:ea:d7:93:
51:c4:a6:b8:97:dd:91:58:15:c2:43:71:7e:4f:bf:
32:87:d2:80:02:e3:0c:72:7f:f8:2b:33:89:8d:f5:
fd:a8:06:06:79:7b:65:fd:dc:13:25:80:78:85:c4:
ad:a3:6d:1b:44:dc:63:d0:bd:ed:4f:d6:72:4f:9d:
a7:37:0c:74:e6:6a:1a:ab:98:b1:29:f1:da:c3:e5:
68:7f:1f:b5:42:b1:48:7d:a4:ad:88:3b:ef:ab:2b:
74:cc:c0:ff:84:d8:15:70:63:e5:12:60:fe:c3:05:
f5:34:72:20:9c:96:7d:f0:56:62:0d:c0:cd:f3:05:
2a:df:6c:7c:0e:e2:5f:03:b8:11:16:75:18:ab:13:
13:84:4f:b8:68:d9:6e:6c:5e:71:c9:f9:bc:59:b9:
20:93:5a:20:eb:fc:64:93:9f:cc:0e:47:7f:0a:c9:
8b:12:43:9d:57:eb:be:3a:fd:f6:f9:88:c3:b1:5e:
75:e2:a0:b7:ea:ee:21:a9:c7:b7:6d:8b:a0:29:e4:
e6:b2:16:eb:9d:99:eb:4b:12:fd:50:9d:e6:b5:62:
bf:d3:cb:a7:33:9e:0a:ae:b9:32:97:95:41:3e:7e:
d9:a1:91:ec:c5:80:25:12:cd:b6:d5:32:a7:d7:d8:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:F6:F0:12:F5:D0:9B:CC:74:9E:ED:D4:EB:4A:24:14:58:2D:89
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1716C468C4A111EDA7383AE1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.108.0/22
Signature Algorithm: sha256WithRSAEncryption
03:6c:48:38:03:6e:15:4f:77:3f:20:35:a3:cb:5f:23:62:da:
c4:fa:57:e9:74:3d:c0:62:ed:ec:13:14:66:ac:c5:1b:58:92:
42:89:10:58:ba:cc:71:5c:30:b9:14:b0:91:b1:a6:a4:0f:fe:
e3:ea:ad:fc:1f:ff:87:ef:96:0f:e7:04:e2:3f:24:91:ee:8a:
66:0e:b9:63:2e:0e:5b:72:4f:ad:84:3a:58:cd:e7:0a:ea:d4:
e4:9d:a6:70:31:59:6d:34:90:eb:f0:5e:4c:c8:7a:00:a0:82:
40:76:20:fc:79:6b:04:c0:14:3c:78:48:9b:61:51:8e:a2:8a:
a1:99:c9:2c:f0:21:93:8c:3b:f6:57:da:9e:46:eb:27:67:4e:
00:07:8b:3e:50:4e:2a:9b:97:c7:7c:58:11:c6:03:a0:6d:4d:
02:5c:bb:ba:f5:51:41:4b:d6:cf:93:fb:c3:68:cf:b7:b9:db:
f3:77:bf:ae:82:5e:20:03:d1:5f:61:47:e9:72:c9:a1:cc:68:
49:16:84:4e:4e:9c:24:3e:2e:de:31:ff:f2:83:1e:9a:de:24:
e0:09:a4:97:80:4f:f4:7e:46:d1:e1:4a:2b:56:ef:a2:de:b5:
e9:80:f4:1a:2c:f1:83:64:94:af:46:f3:cb:69:58:fa:46:80:
3b:51:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org