Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4053A9DE3D8011EDBB2719AFF1222468.roa
File: 4053A9DE3D8011EDBB2719AFF1222468.roa (raw, json)
Hash identifier: qfBNQtbXGJK9zu5ykVDiDKrVa52nrBsPhCoMMsHV8k0=
Subject key identifier: F1:A2:68:11:35:D5:BD:2B:2E:0C:E7:77:F0:81:B1:97:24:74:B3:C7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 085F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4053A9DE3D8011EDBB2719AFF1222468.roa
Signing time: Mon 26 Sep 2022 09:47:36 +0000
ROA not before: Mon 26 Sep 2022 09:47:33 +0000
ROA not after: Tue 26 Sep 2023 09:47:33 +0000
asID: 203999
IP address blocks: 161.123.102.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:47:33 2022 GMT
Not After : Sep 26 09:47:33 2023 GMT
Subject: CN=63317538-1b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:3f:df:42:76:b6:b0:23:d6:6c:d6:e5:e3:
e8:5a:c2:55:5e:e4:cf:85:c7:5d:43:bd:03:5b:0a:
15:e0:8c:b8:4b:90:66:a4:45:39:e4:fe:4e:ba:0a:
70:fc:d2:29:a5:d0:92:0c:8c:39:05:c9:a0:b0:42:
af:f3:f8:ea:04:7b:e7:a3:df:74:58:a5:99:2d:13:
a3:0a:54:b4:35:e7:9e:e0:d2:58:dd:36:e1:fa:c8:
cc:de:33:a0:c3:49:0b:b9:16:e4:23:6b:16:50:1d:
01:ac:09:2b:85:1d:d4:b6:06:05:e6:88:73:c1:b1:
3c:3d:31:45:2f:e7:95:c8:f7:27:3b:59:25:52:ed:
28:a0:9b:9d:d0:fc:1e:9d:2e:5c:ea:f9:1e:9f:6d:
76:b4:dc:3b:10:8b:6f:34:17:3f:f8:31:00:63:39:
68:43:c0:d0:84:7a:d0:a8:77:7b:4e:8a:b4:b9:3f:
67:48:b8:0e:4e:67:df:d1:91:9d:67:d5:1f:8f:c8:
f6:65:23:d9:e5:ba:fb:e8:40:3c:fe:66:0e:d8:57:
8c:b2:ad:48:4e:9b:81:7a:e0:50:56:0a:d6:2b:c5:
e2:ec:e0:a3:b1:8a:a6:6e:8e:05:68:ec:f1:89:2c:
79:df:43:a8:14:02:d2:d1:e9:e2:ba:6a:ad:3e:3f:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:68:11:35:D5:BD:2B:2E:0C:E7:77:F0:81:B1:97:24:74:B3:C7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4053A9DE3D8011EDBB2719AFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
52:3b:22:ac:da:97:8e:8d:a5:60:4e:05:74:02:fc:a1:9a:47:
63:b2:28:ab:2c:75:80:c4:d4:1b:25:e4:b8:8f:cf:14:05:9c:
62:ee:21:33:0c:c8:cb:a0:f8:d6:a8:40:14:e7:1b:0d:38:e6:
e5:0d:40:e4:da:7a:bb:a2:a6:22:e1:fa:7f:cf:0f:2b:82:49:
0c:d3:87:36:16:11:79:7a:7c:e7:71:02:ad:6b:c5:70:a5:b7:
a1:3c:5a:70:c0:1e:37:d9:b6:85:01:8d:e4:d8:ef:69:52:25:
75:61:bc:b2:4a:d6:88:9b:ec:6f:e8:f2:dc:3c:72:2b:fb:8c:
ed:97:bf:5e:d2:e4:29:f1:de:fd:8a:8d:81:f9:11:df:3a:d3:
1e:a8:9f:ac:34:94:0e:a4:28:a5:8b:f5:46:1f:0b:41:f4:ed:
b2:16:20:fc:3d:a6:ad:be:7b:4d:3d:e5:81:f3:15:2a:28:98:
19:51:c0:48:0a:65:4f:9b:5e:3d:bd:57:91:cc:4a:b6:68:c9:
22:c7:d3:18:8e:95:5d:0e:b4:7e:56:78:ce:23:b9:b8:63:8e:
41:44:ae:fe:cc:8d:2b:2c:10:32:20:49:97:24:81:aa:0b:d5:
c8:24:96:76:22:aa:8f:db:2b:78:d6:44:8b:e7:0a:79:6a:6a:
0f:ee:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org