Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1B8EAD261A1A11ED86374CA3F1222468.roa
File: 1B8EAD261A1A11ED86374CA3F1222468.roa (raw, json)
Hash identifier: EQzDKcGRyRxIWcdqHOEInu61TI73Wk7BwRUuoRR8mDA=
Subject key identifier: FF:C1:74:69:58:76:AA:A4:26:A1:07:0D:3E:09:E0:A9:4E:64:F9:42
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 07DE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1B8EAD261A1A11ED86374CA3F1222468.roa
Signing time: Fri 12 Aug 2022 08:38:15 +0000
ROA not before: Fri 12 Aug 2022 08:38:11 +0000
ROA not after: Fri 11 Aug 2023 08:38:11 +0000
asID: 212738
IP address blocks: 161.123.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 12 08:38:11 2022 GMT
Not After : Aug 11 08:38:11 2023 GMT
Subject: CN=62f61177-200d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:20:c1:15:bc:95:d4:c0:cd:2c:7d:b3:b2:
86:02:32:5e:bc:52:2a:09:3a:b8:30:94:a0:a0:b5:
8d:a4:3b:d8:ed:23:26:c4:d2:bf:9d:f4:f4:56:ff:
f0:80:08:0e:93:52:09:f7:9e:c2:c8:b8:ae:3d:39:
dc:2c:53:80:ce:31:d0:81:a5:9e:ca:1c:6b:2d:8e:
10:e1:3b:c7:77:c2:34:dd:3b:9c:77:78:20:7d:ca:
3d:c4:b5:e2:3e:95:1c:8f:57:80:4e:73:dd:37:10:
af:c7:57:5b:99:0d:b3:20:d3:05:a9:69:3f:78:80:
3e:22:a0:ca:1f:81:67:20:55:6c:84:52:a8:2e:b8:
60:af:eb:df:fc:08:80:87:80:87:7d:96:c8:3a:34:
8e:2f:8f:06:7b:b0:a0:5d:13:f6:5e:c3:0a:4e:28:
29:60:fa:29:da:50:49:32:6c:69:e6:76:d1:9f:7e:
44:8c:37:f2:89:8c:f2:ff:e5:f2:ac:3f:f1:ed:e9:
ba:f2:e1:4b:1d:a2:de:6d:d4:f3:23:c8:5b:0d:74:
9e:10:27:16:ae:52:9f:2a:fc:da:0b:d6:d5:78:7c:
64:4a:31:23:3c:fa:8f:ac:25:6b:8e:5e:5d:1a:c6:
20:ca:89:01:84:f3:5b:0e:03:30:b8:77:4a:81:0a:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:74:69:58:76:AA:A4:26:A1:07:0D:3E:09:E0:A9:4E:64:F9:42
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1B8EAD261A1A11ED86374CA3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.222.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:5b:39:ef:d1:f4:71:76:85:75:c6:e1:d7:dd:27:7a:66:5a:
87:cc:9f:65:50:7b:05:c1:f8:e3:63:75:9d:66:63:00:2f:dc:
10:7c:40:73:fd:41:95:1b:3c:05:6b:7e:68:1b:dd:59:07:6d:
2b:d6:58:06:28:6c:cf:e6:ee:72:03:1c:c2:89:fd:43:a7:89:
c9:fd:62:d1:b1:8a:57:b0:30:0f:8e:25:1a:a4:4e:13:4c:fc:
3a:66:14:d4:f3:f4:22:36:5d:f1:4c:69:57:30:e2:cc:67:84:
be:cc:60:af:47:a2:48:9d:b9:48:72:e2:f7:18:38:cb:eb:14:
9a:d9:f7:e2:cc:76:40:82:12:b1:94:f3:c4:ac:d2:35:6b:39:
86:11:af:e9:66:8a:a7:65:ea:73:2b:07:1c:22:5d:fd:ac:8e:
4a:0c:1e:b8:63:30:58:c7:c1:77:39:04:bb:21:4c:cb:dc:ff:
1c:d5:96:02:d2:05:64:c4:d2:bd:86:0e:a0:1e:de:5d:2c:12:
78:2a:2d:64:2b:40:e5:4c:ec:de:43:a5:f2:f9:9a:06:31:05:
52:9c:6b:d7:d7:b5:b8:b2:ce:a6:72:1a:61:9a:1b:9e:23:64:
97:4d:b1:43:c9:f6:61:63:e2:b6:d7:77:42:98:23:33:f4:4a:
c3:b9:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org