Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/55C35C9C441F11EDBFE162DAF1222468.roa
File: 55C35C9C441F11EDBFE162DAF1222468.roa (raw, json)
Hash identifier: LaU8iUpJUNhCqKmhz+jRKYsbHwtRa7h3Z/2+rvGo0Gw=
Subject key identifier: CC:90:97:E3:E0:BE:C9:42:52:78:91:07:02:14:75:B5:15:25:93:96
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08AF
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/55C35C9C441F11EDBFE162DAF1222468.roa
Signing time: Tue 04 Oct 2022 20:01:29 +0000
ROA not before: Tue 04 Oct 2022 20:01:25 +0000
ROA not after: Wed 04 Oct 2023 20:01:25 +0000
asID: 203020
IP address blocks: 161.123.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 4 20:01:25 2022 GMT
Not After : Oct 4 20:01:25 2023 GMT
Subject: CN=633c9119-6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:99:25:cc:3f:2c:f0:d0:00:59:78:e3:42:
81:4f:2e:98:69:40:d0:4a:13:15:9f:a9:aa:f5:78:
4c:63:32:f6:57:a2:aa:7a:a9:e7:c2:b0:94:70:c0:
ad:a6:19:b6:49:4e:c9:c1:96:58:e0:45:37:23:07:
b8:70:1c:34:57:b4:13:3d:aa:e7:6d:79:f8:ed:9d:
4a:de:f4:da:15:04:10:a9:06:59:13:b3:51:ee:8e:
05:45:95:6a:78:08:b9:98:93:8a:5a:bf:61:f0:75:
fb:3f:5f:fc:c3:37:27:bb:36:dd:92:75:14:5b:dc:
2c:fc:17:e3:99:d0:46:4d:31:2e:30:93:da:f3:d7:
0a:37:c4:22:87:33:89:b2:45:6b:ca:93:49:ee:97:
62:9c:87:e7:c7:13:39:85:88:d4:e6:34:bb:a6:e8:
f4:ce:bd:8d:fe:75:df:40:c9:a0:d2:49:96:f0:b7:
55:57:43:39:d4:0f:09:a1:78:10:c2:23:93:cb:7e:
ce:d8:91:ed:8b:d9:22:23:80:41:23:39:a9:98:0d:
4c:f8:24:a5:13:14:e2:4b:94:01:ab:86:64:11:b7:
69:e2:54:1c:4f:91:df:f1:dc:5e:ce:2e:2c:e5:86:
b1:d5:28:ff:5b:62:56:76:a1:42:1e:3e:6a:75:6f:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:97:E3:E0:BE:C9:42:52:78:91:07:02:14:75:B5:15:25:93:96
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/55C35C9C441F11EDBFE162DAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.208.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:60:f4:29:f2:fd:aa:3a:e6:5e:8a:35:a4:07:97:36:2e:9c:
0a:25:43:d3:86:bc:e8:14:7e:d2:4a:a1:67:9d:58:19:ee:8b:
2c:c0:8a:3b:d7:80:5b:60:62:aa:1f:04:1b:87:1b:b6:df:c2:
24:5a:b2:f7:2b:4b:2b:a6:97:ad:cf:b1:c9:e6:c2:17:5e:3f:
ce:d0:bf:d2:a1:7f:0a:47:0a:8d:3b:3a:df:30:14:a0:3c:13:
1c:df:be:2c:9f:28:29:e1:d5:1d:c7:c2:d5:9a:1c:20:56:bc:
62:1f:0c:fb:87:72:97:37:1f:15:77:28:58:87:47:44:4b:ab:
7e:0f:95:0e:71:f0:f7:34:ad:d3:ea:2d:b7:90:1c:a5:7f:01:
32:53:73:aa:0a:e3:ce:f5:ee:ff:d4:9e:79:02:e8:ca:f1:30:
0d:11:d9:d9:c9:d5:25:3e:de:c6:3a:79:87:f3:b5:9f:3b:05:
22:17:fb:eb:02:97:4d:e8:66:02:3e:85:52:bb:ad:c1:04:5d:
a9:93:05:96:97:9b:98:64:e5:4d:20:64:fa:08:10:83:8a:d7:
6e:c6:84:8f:31:15:46:63:31:04:f6:6c:34:c6:e5:37:b5:fe:
ef:cd:03:da:a0:ec:24:3d:e9:0c:5e:b1:eb:6e:1b:55:8a:1e:
6a:54:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org