Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B296F80CF1011EDBDF3DCF5F1222468.roa
File: 3B296F80CF1011EDBDF3DCF5F1222468.roa (raw, json)
Hash identifier: t1DIAS0pkTGHEiTi8jO6plS7XQiY2tnfa5eMIo43X0A=
Subject key identifier: 40:E6:30:FF:EB:C4:32:B8:83:69:28:8F:16:FE:AF:18:94:16:83:83
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A5A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B296F80CF1011EDBDF3DCF5F1222468.roa
Signing time: Thu 30 Mar 2023 15:33:34 +0000
ROA not before: Thu 30 Mar 2023 15:33:30 +0000
ROA not after: Sat 30 Mar 2024 15:33:30 +0000
asID: 204765
IP address blocks: 161.123.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2650 (0xa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 30 15:33:30 2023 GMT
Not After : Mar 30 15:33:30 2024 GMT
Subject: CN=6425abce-4552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:9c:33:b7:43:d7:79:a4:91:e3:d1:5e:2b:
23:59:1f:b4:06:66:8b:2f:53:21:cb:e4:bc:64:83:
0b:a0:f2:0b:c8:12:5c:d9:d4:90:a0:8a:88:df:0f:
f4:b7:ee:cf:6d:21:44:de:c5:eb:45:5a:4a:55:9d:
7c:f2:78:e9:cf:f4:ce:1a:19:b3:7e:2d:3b:51:83:
1e:23:2b:56:4d:81:68:3a:b3:bd:a9:79:9b:33:f0:
db:27:40:60:46:9a:c8:da:dd:fc:0d:ca:c9:a7:72:
04:7b:2f:93:cb:32:58:3d:c1:7c:07:87:ce:c1:fb:
65:d3:52:21:a0:db:98:40:dd:bf:8d:15:1b:bf:3f:
67:c1:97:c3:b8:97:c7:61:ba:30:6e:ed:3e:6e:eb:
5a:ac:ae:4f:c3:6d:cb:1a:94:12:d2:0b:bd:c6:aa:
cc:9f:aa:85:5b:dd:c7:4e:27:f8:dc:28:c5:13:88:
67:5d:9a:58:61:07:c3:ff:67:4a:65:ae:5f:31:69:
12:33:cb:27:a4:4c:90:69:4a:20:05:f9:82:fe:eb:
47:da:68:42:c3:90:0d:21:e0:85:d3:32:cd:b3:50:
98:ff:db:30:70:bf:20:88:81:36:fc:42:18:e0:f4:
01:07:ee:fc:a0:37:46:1d:be:39:66:ee:94:55:7e:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:30:FF:EB:C4:32:B8:83:69:28:8F:16:FE:AF:18:94:16:83:83
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B296F80CF1011EDBDF3DCF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.68.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f8:5b:92:66:45:07:d0:2f:d6:16:08:f8:28:ad:3f:c2:59:
33:41:15:85:c1:d7:49:a5:4e:97:60:72:d3:ad:1d:ee:3a:70:
66:75:5a:84:2b:1c:8d:ee:a7:05:79:ba:d2:22:52:44:c8:2f:
19:27:7e:3f:58:c1:d2:f6:64:03:f8:e6:4b:51:30:8a:06:b8:
e4:07:63:23:b2:c4:33:b9:48:0c:50:1b:19:7a:44:a5:66:ea:
d2:23:35:a7:65:f8:4e:af:b6:46:6f:70:65:fc:a4:20:14:84:
80:d8:27:64:12:2c:c3:91:01:03:db:77:b8:b2:a9:11:b3:5d:
39:77:95:74:df:10:2e:34:56:a8:b9:68:1d:95:b9:51:ce:3b:
00:41:cb:11:00:6e:52:17:99:69:26:4d:16:55:39:ca:2c:7e:
84:41:17:e0:99:0b:d1:31:64:d4:cf:45:4a:a7:42:c2:54:ee:
1e:1e:cf:81:ed:45:a9:ba:d5:74:1e:46:ce:92:38:f4:6a:92:
20:1c:c1:9c:21:c5:21:fb:47:26:d0:0e:8d:fb:95:8b:19:c7:
67:30:3f:72:d4:48:18:e8:16:a2:46:46:e1:57:8b:8e:f3:6e:
8b:90:c8:a7:7f:48:86:b7:24:cf:c7:cc:92:b1:cc:15:6d:5d:
12:b4:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org