Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4D051A6EA8BA11ED99143FE5F1222468.roa
File: 4D051A6EA8BA11ED99143FE5F1222468.roa (raw, json)
Hash identifier: GBBmbF7CQtavtFMkDLYYWLGLhSUR8pnC5vSPtE535b8=
Subject key identifier: 92:B4:58:BC:F9:A4:B2:2B:B1:9E:A7:5B:89:25:73:27:1D:3E:4A:59
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09BB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4D051A6EA8BA11ED99143FE5F1222468.roa
Signing time: Thu 09 Feb 2023 20:42:43 +0000
ROA not before: Thu 09 Feb 2023 20:42:39 +0000
ROA not after: Fri 09 Feb 2024 20:42:39 +0000
asID: 207990
IP address blocks: 161.123.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:42:39 2023 GMT
Not After : Feb 9 20:42:39 2024 GMT
Subject: CN=63e55ac3-24f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:d5:a8:b1:94:e3:54:f3:45:13:e7:da:4b:
29:e3:ff:ae:fe:5a:e2:67:16:37:ba:7b:76:16:56:
37:78:32:e5:fb:12:7d:d0:bb:ce:78:7e:89:f5:31:
78:17:6e:c5:0b:02:03:b0:3b:56:0c:03:54:3d:10:
e0:13:ce:92:f3:af:3d:cd:f8:b6:91:7c:08:2e:db:
8b:5e:b5:15:b9:d2:17:e4:1f:2a:2f:e3:90:c4:cd:
1d:d6:40:cb:79:5f:34:b2:11:f6:1b:c7:9c:8d:74:
56:aa:27:fa:05:9d:fd:fa:e5:71:55:1e:de:04:21:
4f:19:62:e3:ac:fd:17:5c:81:48:ca:4f:2a:50:3f:
7c:6b:b7:aa:15:2d:98:9c:45:27:50:13:29:e0:65:
7c:33:57:fd:71:db:02:b5:33:67:2f:23:06:e4:34:
fc:2c:cc:4c:53:e3:47:c0:b2:3e:aa:17:69:3c:dc:
ac:68:29:0a:51:89:89:25:a1:b2:d6:2e:80:0e:86:
2a:8c:b3:f7:6e:27:ed:0f:ca:96:44:63:e4:55:d5:
e5:ab:47:a4:09:da:c1:e8:ba:35:57:a8:29:4d:19:
a0:87:09:c3:29:e6:65:19:fe:2e:36:2d:ea:4f:65:
67:e3:69:8e:fe:62:13:e3:49:01:06:ed:f9:56:bb:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B4:58:BC:F9:A4:B2:2B:B1:9E:A7:5B:89:25:73:27:1D:3E:4A:59
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4D051A6EA8BA11ED99143FE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.34.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d8:18:a9:96:4c:32:b8:a9:c6:70:34:89:49:17:f8:9d:87:
c4:3b:2d:7d:f4:38:19:76:63:56:6b:13:fd:27:74:a4:74:15:
b7:16:56:37:0d:52:fb:87:b5:e0:3f:9a:8e:f4:12:80:38:3f:
cc:e0:3c:35:60:86:98:29:e7:fd:7f:e4:9e:4b:d1:66:b3:3d:
d4:3e:0e:ca:aa:3e:d1:f0:d1:d9:56:25:d6:29:f0:1d:01:ec:
1e:b3:49:37:0a:76:0f:f6:5c:be:50:d5:fe:5c:e4:90:26:a2:
c8:91:05:49:97:d7:58:e1:9c:74:39:07:5f:6d:77:a4:76:e6:
b6:32:4d:26:20:e1:37:a6:24:1e:bc:35:30:c2:f3:2f:4c:f1:
45:b6:03:9d:7d:96:c3:72:c9:66:1a:5f:34:c8:7f:71:74:41:
bd:b7:47:d3:5c:60:27:ff:c0:59:98:1f:96:f4:59:ad:f9:95:
69:ee:48:30:99:82:e6:11:0c:e1:b8:22:24:d6:0e:ad:ca:eb:
15:10:fe:b0:a7:1b:56:5b:b9:79:61:d2:38:71:02:e6:04:bf:
a7:31:f8:b0:d9:46:30:6a:7f:5d:38:e5:7f:0e:d4:c0:ab:e1:
48:22:9a:a3:0c:1e:f5:43:93:4c:a0:ef:97:59:6a:5b:69:2e:
e2:6b:28:00
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCbswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAyMDkyMDQyMzlaFw0yNDAyMDkyMDQyMzlaMBgxFjAU
BgNVBAMMDTYzZTU1YWMzLTI0ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC51dWosZTjVPNFE+faSynj/67+WuJnFje6e3YWVjd4MuX7En3Qu854fon1
MXgXbsULAgOwO1YMA1Q9EOATzpLzrz3N+LaRfAgu24tetRW50hfkHyov45DEzR3W
QMt5XzSyEfYbx5yNdFaqJ/oFnf365XFVHt4EIU8ZYuOs/RdcgUjKTypQP3xrt6oV
LZicRSdQEyngZXwzV/1x2wK1M2cvIwbkNPwszExT40fAsj6qF2k83KxoKQpRiYkl
obLWLoAOhiqMs/duJ+0PypZEY+RV1eWrR6QJ2sHoujVXqClNGaCHCcMp5mUZ/i42
LepPZWfjaY7+YhPjSQEG7flWuxa5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUkrRY
vPmksiuxnqdbiSVzJx0+SlkwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzREMDUxQTZFQThCQTExRUQ5OTE0M0ZFNUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACheyIwDQYJKoZIhvcNAQELBQAD
ggEBAILYGKmWTDK4qcZwNIlJF/idh8Q7LX30OBl2Y1ZrE/0ndKR0FbcWVjcNUvuH
teA/mo70EoA4P8zgPDVghpgp5/1/5J5L0WazPdQ+DsqqPtHw0dlWJdYp8B0B7B6z
STcKdg/2XL5Q1f5c5JAmosiRBUmX11jhnHQ5B19td6R25rYyTSYg4TemJB68NTDC
8y9M8UW2A519lsNyyWYaXzTIf3F0Qb23R9NcYCf/wFmYH5b0Wa35lWnuSDCZguYR
DOG4IiTWDq3K6xUQ/rCnG1ZbuXlh0jhxAuYEv6cx+LDZRjBqf1045X8O1MCr4Ugi
mqMMHvVDk0yg75dZaltpLuJrKAA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org