Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2DDAB71E7DFC11EC833559D95A40D577.roa
File: 2DDAB71E7DFC11EC833559D95A40D577.roa (raw, json)
Hash identifier: Xpds+xlqzaL0pWkOC4UYbmEsfZXvwNODBfQM63nnQjs=
Subject key identifier: DE:01:B5:C0:8C:79:B1:1F:1D:D5:DC:B7:07:06:E7:CD:22:D5:0B:35
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 053C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2DDAB71E7DFC11EC833559D95A40D577.roa
Signing time: Tue 25 Jan 2022 16:31:00 +0000
ROA not before: Tue 25 Jan 2022 16:30:56 +0000
ROA not after: Wed 25 Jan 2023 16:30:56 +0000
asID: 327790
IP address blocks: 161.123.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:30:56 2022 GMT
Not After : Jan 25 16:30:56 2023 GMT
Subject: CN=61f025c4-cc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:5c:78:e7:ab:9d:64:06:b1:f9:5c:ce:12:
1a:e5:0b:3a:70:12:be:a3:02:54:be:1b:2d:4f:6d:
23:1b:5f:1c:01:e8:f4:c7:a8:7d:99:a5:10:4f:7e:
9d:01:99:80:cf:8d:8e:d0:14:39:01:59:ac:c5:a5:
7d:ee:c7:64:63:79:8d:0a:b0:f1:cc:0e:25:38:63:
6e:72:7f:6d:41:5c:a1:19:19:80:3d:bb:4c:fa:1a:
da:5a:b3:42:fd:3b:7f:bf:b9:87:63:0a:f8:90:8b:
e1:10:97:a4:bc:8b:e8:c9:cb:ab:d5:37:7f:0e:f8:
ed:0a:f9:77:10:81:21:30:79:e9:a3:03:29:07:20:
5b:61:a5:ea:08:18:2e:44:7c:67:bd:5a:6d:5f:26:
28:ae:f5:c1:33:be:83:01:b4:b9:65:92:e8:e8:62:
7c:45:ae:10:8b:7c:81:ce:b3:03:3a:42:10:ca:ff:
21:cd:1a:7c:f9:78:52:0b:7f:fd:1c:e8:02:e7:e6:
90:42:7b:0f:c3:65:cc:47:d4:c6:cf:a0:cf:16:a9:
7f:6c:4b:73:b0:c4:7e:0c:60:ae:cc:82:98:5e:66:
15:0c:a9:c1:bf:7c:ff:ac:4d:e5:c1:fb:ca:6c:6c:
ef:ae:fb:1c:32:52:0f:56:55:64:4c:d9:d0:0a:2a:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:01:B5:C0:8C:79:B1:1F:1D:D5:DC:B7:07:06:E7:CD:22:D5:0B:35
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2DDAB71E7DFC11EC833559D95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:2d:2c:0a:16:0f:8a:4b:e1:05:6e:f4:9a:a0:de:00:f9:13:
d6:92:43:9f:a7:75:d0:6a:70:26:c0:82:08:e5:ce:e1:bb:13:
02:72:18:6d:a8:2a:22:16:4f:e3:09:29:bf:b0:c7:7c:34:4b:
cd:b6:b5:40:f4:9e:64:dc:63:11:1d:b3:a6:8b:a8:d7:51:de:
fa:b9:0f:9a:15:7b:d4:75:36:b1:b8:b8:f6:6e:48:5d:70:f9:
ab:93:62:9a:0b:57:88:b2:ef:f1:a6:57:56:5b:ec:3e:77:77:
11:3b:6f:a6:da:6c:33:3e:75:91:ff:32:5c:f7:47:92:df:63:
32:2f:cc:84:ba:08:d6:db:ec:87:6d:cd:ed:7e:f8:6b:44:f5:
89:95:17:c6:38:b2:4f:fb:97:1c:de:5d:00:ca:5b:15:36:6e:
47:30:09:aa:1a:c8:ed:04:3f:b7:5d:a3:07:73:51:d2:25:71:
92:9f:8c:2f:2e:34:75:10:42:f6:90:19:0e:c4:c2:0d:01:a4:
94:c0:73:45:19:38:c4:b4:fc:d5:11:f4:cc:7d:fb:4d:b1:0f:
7e:a0:45:42:60:6b:c1:dc:cb:34:b1:2b:e6:f3:5f:e9:d1:a9:
6d:81:08:0c:fa:74:4a:d3:ab:d6:1a:8d:eb:39:3b:47:9e:3e:
75:71:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org