Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/37285E743D8311EDAD691EB7F1222468.roa
File: 37285E743D8311EDAD691EB7F1222468.roa (raw, json)
Hash identifier: CY+Z9ho+OmDK5eXz/tRLk49XMHIHOJJ0i5XqylP1ruE=
Subject key identifier: A6:A3:0E:9E:55:C0:0E:FD:C5:07:1A:DA:E1:0C:1D:7F:6A:D3:FF:DA
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0899
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/37285E743D8311EDAD691EB7F1222468.roa
Signing time: Mon 26 Sep 2022 10:08:49 +0000
ROA not before: Mon 26 Sep 2022 10:08:46 +0000
ROA not after: Tue 26 Sep 2023 10:08:46 +0000
asID: 203999
IP address blocks: 161.123.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:08:46 2022 GMT
Not After : Sep 26 10:08:46 2023 GMT
Subject: CN=63317a31-38ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:42:ef:0b:a8:06:45:62:7d:13:ce:04:4d:
55:74:b1:de:42:5c:d8:39:97:5d:da:e9:e5:7f:ff:
f0:4a:ec:40:cc:96:56:95:ca:74:5a:cd:25:7c:14:
f5:0d:32:87:69:e5:b6:f6:3e:a0:b5:e3:ca:b7:0b:
60:de:ef:88:70:27:3d:d7:ec:a9:b8:b2:e3:97:01:
b8:0a:0d:0a:11:41:98:f7:92:09:2c:43:c8:8f:c2:
0b:5c:de:27:e5:e2:f7:fe:36:a2:a6:84:24:62:3a:
70:c9:f6:d3:6c:d3:63:58:bf:26:95:a5:1a:7a:a7:
f9:85:3b:0e:01:73:38:03:c0:74:79:d4:ec:7f:2c:
3d:e3:2d:f8:7b:19:d7:45:fc:cf:57:2f:af:b5:2e:
3a:36:83:9c:f2:63:98:cb:74:f2:24:a1:f3:c1:f1:
d3:98:12:ae:d2:ec:fb:f7:45:80:26:d8:ba:6f:f9:
74:d4:f7:96:0a:13:ce:6b:b9:1e:fc:00:7f:cc:e0:
a1:a5:77:96:f0:23:95:05:f1:75:d9:41:6f:da:84:
dd:c7:76:08:90:94:d2:12:5f:5d:98:d0:6a:e9:c7:
20:0f:fa:2a:6e:6c:a3:c9:56:c3:5d:7e:3f:5d:19:
ce:e0:77:d5:59:f8:69:65:99:e7:a9:c2:6d:42:34:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:0E:9E:55:C0:0E:FD:C5:07:1A:DA:E1:0C:1D:7F:6A:D3:FF:DA
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/37285E743D8311EDAD691EB7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8e:47:13:05:5b:1f:c7:9a:03:0b:cc:64:65:28:48:34:f6:
43:76:27:b8:9b:fc:52:8d:de:20:72:de:39:e1:fb:27:2d:d9:
24:d6:c6:af:88:5f:82:7a:6e:7c:56:ab:ed:e5:e6:84:3b:eb:
5e:08:7c:d4:bc:88:f1:39:69:68:d2:df:bb:57:36:de:18:78:
d1:c4:b2:d9:2c:e5:89:b3:df:2c:8b:b2:c0:7a:87:a3:6b:27:
e4:11:ad:75:79:a4:94:09:94:03:5c:1a:95:27:7f:5c:76:80:
28:4f:81:b6:77:17:96:61:8c:fa:d9:f0:fb:97:08:94:f8:78:
30:24:8b:35:1a:cb:07:11:ae:5a:93:2d:82:e5:9b:30:86:78:
5a:d6:57:82:e2:f4:30:b0:26:18:62:c1:49:30:e4:b1:3d:a5:
1b:32:70:4d:27:04:00:45:fe:ee:30:04:fe:7a:fb:7a:2d:0e:
84:a6:a9:ba:cd:fe:17:1d:34:70:1d:32:d9:e4:3b:88:2d:44:
52:8c:b5:b7:d5:44:95:ff:83:c6:af:61:d4:50:5a:21:d2:21:
0e:2f:20:49:e4:02:37:da:6d:f7:69:cf:aa:39:07:d8:f2:a3:
f6:96:36:23:ee:ce:5a:cc:18:11:a3:64:a4:ff:87:3c:4f:d7:
89:6a:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org