Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4F0DFD74652D11ED9874B99AF1222468.roa
File: 4F0DFD74652D11ED9874B99AF1222468.roa (raw, json)
Hash identifier: l8noovjM/wgtJsRNl7MlE+fcGxsrkUXzUq2rfq3Fso0=
Subject key identifier: 56:06:86:B8:1F:B1:7B:69:84:D7:8A:07:9F:BA:5C:89:A0:01:79:80
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08EE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4F0DFD74652D11ED9874B99AF1222468.roa
Signing time: Tue 15 Nov 2022 21:34:39 +0000
ROA not before: Tue 15 Nov 2022 21:34:36 +0000
ROA not after: Wed 15 Nov 2023 21:34:36 +0000
asID: 205431
IP address blocks: 161.123.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 15 21:34:36 2022 GMT
Not After : Nov 15 21:34:36 2023 GMT
Subject: CN=637405ef-cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:c8:06:e8:0a:22:02:53:54:64:d7:69:5a:
8d:90:6b:0f:61:92:37:56:7b:c3:e0:58:db:09:6e:
c7:6d:95:8b:c5:92:67:db:f8:61:4c:9b:e7:2e:c4:
99:02:e0:4a:c5:78:a4:a1:0d:6e:75:c9:4d:8a:cd:
40:f0:2a:c2:0f:d9:ea:ee:89:18:44:15:8e:ab:75:
e2:f9:87:3a:82:d1:29:af:01:88:2b:87:1b:a1:b8:
5f:2b:9d:3a:5d:52:ca:a6:de:50:2e:cc:62:39:98:
a8:8a:68:fc:ed:97:c2:33:4d:aa:30:6a:8d:3b:71:
82:d2:27:e8:15:c7:a2:27:29:eb:b5:ca:26:ee:cc:
db:3b:5a:0c:88:3e:64:35:07:88:c4:2a:46:63:e1:
f9:41:3c:bb:1b:bb:fd:ee:ea:a7:24:90:59:53:ce:
22:03:84:3d:1f:37:77:56:e3:b3:5b:b7:97:63:f2:
09:6c:f1:37:77:38:a6:6a:ed:8f:b8:7f:f8:3d:ea:
30:9d:14:bb:70:64:a2:8c:6a:40:15:f5:33:3f:8c:
76:84:34:2c:b5:ad:4d:d2:86:f3:79:57:8c:ed:9c:
51:ce:a6:b8:c5:c4:20:a1:e7:74:c5:4f:94:67:80:
20:b4:78:66:e8:17:7f:ae:e1:de:49:64:40:ee:53:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:86:B8:1F:B1:7B:69:84:D7:8A:07:9F:BA:5C:89:A0:01:79:80
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4F0DFD74652D11ED9874B99AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.222.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b2:95:cc:7c:1d:bb:c9:d1:d7:66:c6:d2:1e:63:34:35:08:
3f:9b:6e:93:ea:d5:e4:df:bf:3f:2c:05:b9:d5:0e:44:ca:e3:
90:7a:a4:3f:21:8a:10:f3:4f:4e:61:3a:db:cb:1a:14:dc:73:
1c:97:2a:6d:ca:c4:eb:f8:7a:40:14:66:7e:5a:a3:28:b1:28:
f3:38:f0:a7:24:c4:03:4c:55:60:24:5c:5d:2e:86:44:03:84:
d4:9d:60:f7:3f:93:99:24:9f:d7:d8:05:87:32:d2:9d:23:08:
09:52:92:0e:05:d8:cd:57:c3:95:a1:32:f5:b6:8b:83:d9:90:
db:27:a5:ff:ec:77:92:d1:e6:83:3e:54:11:4c:50:c7:2a:ae:
3b:de:b6:2c:7b:00:d8:9c:ff:db:d1:fb:e2:b2:08:21:e4:ce:
26:11:1f:42:5f:e1:78:fa:67:d1:1a:6e:aa:f3:43:7d:78:40:
bd:f5:19:d1:2e:68:92:14:81:8e:c1:55:f1:b8:a5:3e:d2:dd:
68:a6:9d:d7:ed:03:c5:f6:6a:fd:86:dc:b7:e8:55:83:c7:93:
4a:c5:7d:23:3a:1c:b7:25:87:8f:f9:ca:cc:5a:d9:95:64:d0:
36:c4:58:d1:d4:30:7f:fe:2f:e1:dc:32:6e:f8:9f:d3:65:78:
ee:e5:b4:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjExMTUyMTM0MzZaFw0yMzExMTUyMTM0MzZaMBgxFjAU
BgNVBAMMDTYzNzQwNWVmLWNlY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTYcgG6AoiAlNUZNdpWo2Qaw9hkjdWe8PgWNsJbsdtlYvFkmfb+GFMm+cu
xJkC4ErFeKShDW51yU2KzUDwKsIP2eruiRhEFY6rdeL5hzqC0SmvAYgrhxuhuF8r
nTpdUsqm3lAuzGI5mKiKaPztl8IzTaowao07cYLSJ+gVx6InKeu1yibuzNs7WgyI
PmQ1B4jEKkZj4flBPLsbu/3u6qckkFlTziIDhD0fN3dW47Nbt5dj8gls8Td3OKZq
7Y+4f/g96jCdFLtwZKKMakAV9TM/jHaENCy1rU3ShvN5V4ztnFHOprjFxCCh53TF
T5RngCC0eGboF3+u4d5JZEDuU6ZfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVgaG
uB+xe2mE14oHn7pciaABeYAwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzRGMERGRDc0NjUyRDExRUQ5ODc0Qjk5QUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe94wDQYJKoZIhvcNAQELBQAD
ggEBADGylcx8HbvJ0ddmxtIeYzQ1CD+bbpPq1eTfvz8sBbnVDkTK45B6pD8hihDz
T05hOtvLGhTccxyXKm3KxOv4ekAUZn5aoyixKPM48KckxANMVWAkXF0uhkQDhNSd
YPc/k5kkn9fYBYcy0p0jCAlSkg4F2M1Xw5WhMvW2i4PZkNsnpf/sd5LR5oM+VBFM
UMcqrjvetix7ANic/9vR++KyCCHkziYRH0Jf4Xj6Z9EabqrzQ314QL31GdEuaJIU
gY7BVfG4pT7S3WimndftA8X2av2G3LfoVYPHk0rFfSM6HLclh4/5ysxa2ZVk0DbE
WNHUMH/+L+HcMm74n9NleO7ltNo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org