Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B814B3A7A0911ED9CFF7885F1222468.roa
File: 3B814B3A7A0911ED9CFF7885F1222468.roa (raw, json)
Hash identifier: WGoSjJE+x4/QMd1t7n6n7hSwshMeIM95F03TBg3GdVg=
Subject key identifier: DB:8E:8E:1C:23:AB:23:65:8A:0C:85:9F:BD:C5:07:9F:7E:7B:3C:71
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0913
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B814B3A7A0911ED9CFF7885F1222468.roa
Signing time: Mon 12 Dec 2022 10:39:19 +0000
ROA not before: Mon 12 Dec 2022 10:39:15 +0000
ROA not after: Tue 12 Dec 2023 10:39:15 +0000
asID: 205431
IP address blocks: 161.123.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 12 10:39:15 2022 GMT
Not After : Dec 12 10:39:15 2023 GMT
Subject: CN=639704d7-5a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:ec:1c:be:81:f9:6b:b9:5e:ce:7d:1f:34:
f1:49:49:0b:b3:96:ce:99:ca:e1:50:79:8c:7f:10:
e1:04:35:55:ad:85:21:16:2d:da:97:07:65:e5:e4:
3d:2f:23:d2:2f:e4:b1:31:4d:c8:94:d6:3b:c5:bc:
d7:7b:50:48:59:07:1e:9a:77:49:ce:2c:a3:32:52:
2e:29:9e:6a:15:e1:52:70:82:ce:92:69:72:ac:25:
73:54:bd:46:35:c4:99:bb:d5:f6:fb:3f:d3:12:20:
09:2e:c8:5b:46:da:4c:b3:c3:b1:0a:35:b3:e1:28:
60:5d:fd:ef:e8:e2:69:a9:40:f9:f1:15:fb:1d:3a:
74:fd:11:2d:96:cd:04:33:2b:5a:2b:9d:8d:90:91:
65:6e:ba:f8:a2:e6:9e:f0:0e:73:da:81:80:35:88:
ca:8c:cb:a7:37:39:22:1f:38:b6:92:60:63:bc:01:
ad:a5:f6:0e:56:68:ee:b1:97:e8:98:23:29:06:67:
9b:32:3b:76:3b:da:9f:63:c0:36:c9:8a:03:35:73:
fb:54:c8:6f:18:c4:c3:23:f8:3f:cd:6b:c4:3f:be:
c4:19:a0:19:b9:d3:a5:6d:5b:93:4c:2e:91:d8:7c:
8e:42:34:23:11:97:9e:60:f4:80:ae:67:11:57:cd:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:8E:1C:23:AB:23:65:8A:0C:85:9F:BD:C5:07:9F:7E:7B:3C:71
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3B814B3A7A0911ED9CFF7885F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:73:b4:3c:a7:26:89:6c:4e:b2:0f:44:35:30:64:44:9d:90:
35:26:5e:d5:15:79:16:b1:05:71:69:a0:d1:7e:29:e4:9f:5b:
2a:a5:68:6d:53:05:d5:a4:ff:11:e1:cd:45:ea:4d:52:4c:33:
c0:a3:8b:f1:5c:ec:37:48:8e:ec:ee:71:fd:19:10:69:b7:c2:
c1:5a:f8:41:5f:d8:0e:64:82:42:b1:c8:95:a3:ca:53:22:64:
75:ad:1d:03:51:53:55:5c:e7:ca:99:f7:9a:3b:df:24:5d:30:
a0:5a:41:8f:08:36:d6:28:8c:d1:2d:ef:4a:e3:b5:fb:e6:d5:
65:96:30:c0:32:16:f8:31:a1:ee:39:3c:59:ee:ed:62:12:68:
28:b5:85:a5:d9:aa:04:a3:76:1e:ec:09:bc:98:c8:c2:bc:0d:
b4:52:70:b0:ea:e3:a4:31:0c:24:e8:9c:91:33:c9:4a:d4:57:
72:8a:94:51:20:93:20:30:3f:d1:ee:47:c4:cc:2b:db:c6:20:
07:fa:be:10:01:fd:4c:ca:82:30:33:88:cf:ed:ab:b8:4a:e4:
99:50:40:41:e4:6c:c4:0d:af:c3:b9:f9:ea:b7:7f:92:cf:79:
0d:d9:f6:fa:a0:80:d6:e4:d2:05:57:19:43:19:d4:18:d5:d7:
1e:0f:cd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org