Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3DE33F16A8BA11ED94E217E5F1222468.roa
File: 3DE33F16A8BA11ED94E217E5F1222468.roa (raw, json)
Hash identifier: YhK8Zjx8E6iY0jfqgFXXydIUjHODc2Rjq2zOPFubRgw=
Subject key identifier: EA:3C:C6:6D:FD:25:6F:8B:70:31:8B:40:64:BA:DA:20:C9:87:5E:45
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09B9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3DE33F16A8BA11ED94E217E5F1222468.roa
Signing time: Thu 09 Feb 2023 20:42:17 +0000
ROA not before: Thu 09 Feb 2023 20:42:13 +0000
ROA not after: Fri 09 Feb 2024 20:42:13 +0000
asID: 207990
IP address blocks: 161.123.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2489 (0x9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:42:13 2023 GMT
Not After : Feb 9 20:42:13 2024 GMT
Subject: CN=63e55aa9-151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:d3:2d:14:fb:cd:d0:00:14:1b:7f:2c:97:
e8:eb:5c:52:28:c2:9c:51:08:3b:36:6b:00:cb:f7:
0f:e2:0b:61:aa:a3:3d:ea:63:a9:8d:64:94:d6:80:
24:e2:60:15:70:f0:88:8d:c4:f8:d8:6a:52:a3:42:
6f:22:7c:66:28:32:76:15:80:94:c3:b9:76:0a:da:
59:82:af:bd:43:23:15:73:1c:8c:ff:3c:75:c6:48:
c0:28:2e:b9:2a:6e:25:c7:97:8d:0d:23:c5:84:78:
65:ec:37:5f:16:a3:c2:e7:53:99:24:4c:9d:3f:9f:
42:e7:f1:68:d2:6b:9c:97:15:4e:c1:c0:8d:a0:b7:
d6:09:3e:f6:da:08:04:69:0e:f2:ff:e8:c8:87:b0:
0c:af:cb:f1:d5:12:64:49:bc:45:74:28:55:bf:ab:
6d:23:60:00:de:de:95:4e:27:39:8b:6e:4f:2c:52:
1d:9d:5d:ea:1d:b9:2d:bd:2b:33:b5:aa:8d:1e:c0:
7f:47:01:2b:5d:dc:40:88:af:91:dc:3e:63:9c:51:
0d:77:69:80:9f:07:1e:f1:d3:24:13:fb:56:80:aa:
c0:ab:53:20:ab:03:23:94:39:40:3c:9e:c6:91:56:
9b:c9:f6:4d:a3:35:69:ac:76:a8:82:94:2a:88:2e:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:C6:6D:FD:25:6F:8B:70:31:8B:40:64:BA:DA:20:C9:87:5E:45
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3DE33F16A8BA11ED94E217E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.68.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8d:3c:78:ae:4d:26:da:54:59:c1:45:bc:de:6c:b1:e2:7e:
bf:84:b3:26:96:be:ac:49:71:9c:2c:b1:80:9a:54:fd:d8:c7:
18:d5:67:54:50:71:8d:3f:fb:14:2e:98:5c:d4:5c:6a:7d:da:
d9:93:43:81:15:94:57:0b:5b:b9:d4:c9:19:9c:e0:69:d0:e8:
52:83:ab:bf:b4:44:f5:73:2d:18:0c:c7:0f:10:6c:45:44:b8:
b0:bb:59:7d:02:3a:ad:c8:3a:ef:2f:c6:58:4a:18:5d:7d:4e:
c8:ec:28:6e:72:e1:5a:3e:d5:e4:6b:c3:2e:04:8c:1e:e7:5b:
c1:1f:e3:32:91:12:3a:b4:fc:66:f3:19:13:76:f2:c9:0d:5c:
56:e9:a7:32:93:96:59:c8:cc:25:8a:a1:9b:7b:e9:2a:ef:fb:
26:08:3b:9a:a9:f3:64:b4:74:fa:45:57:4f:08:44:8a:6a:a1:
76:bd:de:18:63:a1:69:ef:ee:26:70:08:27:82:96:18:da:3a:
31:46:82:97:3c:0b:78:ec:fd:20:ee:29:ea:16:14:9b:98:e3:
2d:b7:90:d5:55:7d:08:f9:df:f0:be:d1:97:af:87:61:78:23:
72:52:55:63:91:8a:67:cd:c3:f5:b8:e6:42:4e:77:e4:d3:b2:
26:41:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org