Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4003EF00E5DF11ECA33F7C9CF1222468.roa
File: 4003EF00E5DF11ECA33F7C9CF1222468.roa (raw, json)
Hash identifier: fEuvlMnhZGBG/6tGmPXx7GdDsaYY+h8eF+Qm3m3mqyY=
Subject key identifier: 40:41:C9:1E:A1:04:42:47:C5:90:58:26:B8:62:CE:F9:2F:FC:06:8A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 071C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4003EF00E5DF11ECA33F7C9CF1222468.roa
Signing time: Mon 06 Jun 2022 21:25:56 +0000
ROA not before: Mon 06 Jun 2022 21:25:52 +0000
ROA not after: Tue 06 Jun 2023 21:25:52 +0000
asID: 203999
IP address blocks: 161.123.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:25:52 2022 GMT
Not After : Jun 6 21:25:52 2023 GMT
Subject: CN=629e70e4-3587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:0c:2b:6d:67:f4:b0:cb:bf:0e:1c:b3:46:
17:00:f4:25:8a:dd:b3:92:e0:b9:89:d9:50:97:35:
aa:ab:a5:72:d9:5e:b4:97:1d:eb:f5:0a:09:b9:d5:
7c:c1:d8:c5:de:e9:66:a4:8b:09:3c:71:73:6c:50:
d8:ef:a9:8d:6d:c6:3b:c9:c8:16:a4:96:ee:22:01:
4b:89:47:0d:be:ab:2f:2e:c1:60:2c:4f:2d:54:f2:
b4:0c:a4:c1:e6:ff:04:7c:da:18:d1:89:15:7a:e1:
95:59:7e:ce:6f:d7:00:aa:29:dc:3b:de:0f:cb:52:
8d:b9:31:7a:47:79:37:44:1b:c5:15:0f:4d:a4:59:
48:79:94:23:fb:7a:07:88:70:a6:70:c2:9c:02:bc:
fc:f4:61:30:a8:5e:e8:c7:69:40:d2:34:fe:7d:2e:
bb:cf:d3:3a:36:22:46:fa:fb:82:65:85:4f:c0:21:
6e:06:ef:df:7f:92:0e:88:86:1f:7a:0b:32:fe:35:
a7:00:69:f8:1c:9a:19:c4:c6:c7:22:32:28:a1:b9:
85:10:56:5f:36:d1:4b:11:fa:a1:79:d8:80:5b:28:
b2:ef:7d:2f:4c:90:5f:22:00:10:e1:a3:a1:96:8d:
b8:4f:13:2b:e6:c5:0d:b5:51:f0:2e:92:74:fc:55:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:C9:1E:A1:04:42:47:C5:90:58:26:B8:62:CE:F9:2F:FC:06:8A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4003EF00E5DF11ECA33F7C9CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b4:fc:1f:7a:75:e6:6e:8f:b9:e7:60:03:a4:fb:01:40:7c:
7a:70:2d:3c:f4:f8:f6:bb:c7:c7:48:f2:6e:b4:2b:e2:24:1c:
cb:1b:61:75:0b:e8:07:2c:d9:0f:50:b0:cd:fe:48:5a:34:6c:
88:3d:46:9a:6b:32:79:fa:4a:fe:44:fd:8f:5b:4a:8a:26:53:
99:64:ad:b6:24:ae:30:dc:e7:fb:60:a3:29:a0:52:9b:bb:f2:
16:fa:8f:42:6c:84:83:e6:04:e9:ba:7a:96:09:ca:a0:22:cf:
b3:af:5d:1c:ae:96:c3:24:4c:92:82:a3:1c:cb:ed:20:f3:6c:
60:5e:cc:12:fd:1c:77:1f:36:bb:b7:06:6b:89:44:ff:29:45:
09:57:56:10:10:f3:49:13:36:2e:e8:0a:12:7e:58:ad:bd:fb:
8f:b4:0d:ce:0b:c9:b1:24:e6:f7:ca:ac:12:d7:4d:b5:f5:05:
3b:7f:33:3e:d0:36:4f:e7:b8:18:1b:22:76:44:29:73:c1:a2:
22:82:17:e2:d4:3c:d0:a3:c1:fc:3e:e6:5c:50:03:a1:45:59:
f8:57:d1:42:e5:a5:2a:0a:1a:f7:e1:5d:36:f4:25:eb:4c:77:
9b:20:d5:ed:0f:f8:f1:07:44:f9:ae:22:8e:02:c1:45:b0:49:
17:3b:ea:a7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA2MDYyMTI1NTJaFw0yMzA2MDYyMTI1NTJaMBgxFjAU
BgNVBAMMDTYyOWU3MGU0LTM1ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcEAwrbWf0sMu/DhyzRhcA9CWK3bOS4LmJ2VCXNaqrpXLZXrSXHev1Cgm5
1XzB2MXe6Wakiwk8cXNsUNjvqY1txjvJyBaklu4iAUuJRw2+qy8uwWAsTy1U8rQM
pMHm/wR82hjRiRV64ZVZfs5v1wCqKdw73g/LUo25MXpHeTdEG8UVD02kWUh5lCP7
egeIcKZwwpwCvPz0YTCoXujHaUDSNP59LrvP0zo2Ikb6+4JlhU/AIW4G799/kg6I
hh96CzL+NacAafgcmhnExsciMiihuYUQVl820UsR+qF52IBbKLLvfS9MkF8iABDh
o6GWjbhPEyvmxQ21UfAuknT8VVqjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQEHJ
HqEEQkfFkFgmuGLO+S/8BoowHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzQwMDNFRjAwRTVERjExRUNBMzNGN0M5Q0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexgwDQYJKoZIhvcNAQELBQAD
ggEBAJS0/B96deZuj7nnYAOk+wFAfHpwLTz0+Pa7x8dI8m60K+IkHMsbYXUL6Acs
2Q9QsM3+SFo0bIg9RpprMnn6Sv5E/Y9bSoomU5lkrbYkrjDc5/tgoymgUpu78hb6
j0JshIPmBOm6epYJyqAiz7OvXRyulsMkTJKCoxzL7SDzbGBezBL9HHcfNru3BmuJ
RP8pRQlXVhAQ80kTNi7oChJ+WK29+4+0Dc4LybEk5vfKrBLXTbX1BTt/Mz7QNk/n
uBgbInZEKXPBoiKCF+LUPNCjwfw+5lxQA6FFWfhX0ULlpSoKGvfhXTb0JetMd5sg
1e0P+PEHRPmuIo4CwUWwSRc76qc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org