Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/55C72952827E11EC9F3A919A5A40D577.roa
File: 55C72952827E11EC9F3A919A5A40D577.roa (raw, json)
Hash identifier: V1irAvv3fpAVB/5I/eBvXjOT79IDn+MP5BvrZ5Ust5k=
Subject key identifier: 94:D1:53:A6:93:7C:10:6F:E3:4E:B2:05:1E:88:AA:95:A3:5E:15:37
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 055D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/55C72952827E11EC9F3A919A5A40D577.roa
Signing time: Mon 31 Jan 2022 10:12:46 +0000
ROA not before: Mon 31 Jan 2022 10:12:42 +0000
ROA not after: Tue 31 Jan 2023 10:12:42 +0000
asID: 327790
IP address blocks: 161.123.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 31 10:12:42 2022 GMT
Not After : Jan 31 10:12:42 2023 GMT
Subject: CN=61f7b61e-0e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:ac:22:1a:4a:b0:c3:48:bc:71:13:d5:8c:
e4:52:fa:28:b8:75:0f:88:ec:9e:2b:c9:b3:37:af:
cb:c2:46:f2:37:2b:17:ba:6d:64:6b:b8:6a:ec:65:
80:b9:9d:08:da:4d:67:c9:9e:a3:ae:da:d5:dc:a3:
f7:a7:ee:4e:04:ec:59:9b:96:9a:b9:91:3a:a7:93:
dd:8d:6a:ef:5c:14:06:ed:c3:f7:c7:33:a9:30:df:
a9:3b:2e:62:2c:86:14:0f:8d:b1:4e:53:68:ba:d6:
37:b5:a0:73:ba:ca:30:7e:4a:ce:21:cf:11:74:d7:
5a:3c:3c:6a:6e:45:1e:f7:fb:21:a4:1e:3c:ce:bb:
c3:2c:cb:76:aa:3c:85:78:35:fd:26:d1:d7:26:ef:
5d:08:90:e6:cb:50:73:18:67:ed:bd:6d:34:5a:b5:
df:36:b3:fe:37:41:4e:db:b1:a0:90:c9:18:c8:46:
6d:2a:6c:e5:9e:49:5b:e7:52:a0:82:a8:1e:6a:b2:
a1:75:aa:ed:9c:2b:1f:e4:17:f9:6d:5d:10:c9:c2:
64:89:62:01:a9:5b:b3:b5:e3:aa:f7:66:57:42:9e:
83:53:b2:46:fe:ac:e9:b7:d3:0b:86:fa:18:ea:70:
e4:c5:02:08:96:55:bd:82:fd:76:82:17:9c:ec:c4:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:53:A6:93:7C:10:6F:E3:4E:B2:05:1E:88:AA:95:A3:5E:15:37
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/55C72952827E11EC9F3A919A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:0b:3d:e8:b3:5a:a8:04:bd:e6:0f:1f:b9:60:d0:05:5f:2a:
f7:db:28:48:d8:60:b0:79:ae:2e:af:d5:4b:34:eb:96:6f:cf:
56:c0:cd:7e:ea:ee:3a:88:20:3c:60:9a:6e:12:8c:1c:03:36:
dd:ba:90:5f:c7:9b:40:fb:7b:a8:47:27:cf:63:01:43:64:18:
9b:1a:ca:6b:d0:13:c9:cf:29:2c:0d:50:bf:10:1b:25:a9:c2:
2d:61:17:e2:40:cc:cc:dd:7f:a6:b2:ee:da:19:a7:99:ce:9c:
3c:44:1e:30:91:a7:f4:92:95:a7:82:18:27:a0:26:b3:70:0e:
21:90:e7:56:31:d0:47:61:cd:85:8f:9b:e5:b2:47:f7:4b:eb:
5c:d1:70:39:f9:94:59:21:9a:5a:ce:8a:b5:90:b3:6d:b1:61:
4e:90:5d:2f:4f:2f:15:bc:c7:a6:73:6f:4b:5b:da:0f:db:c9:
6d:d3:ad:19:e7:ac:d1:46:ba:23:b1:a9:9a:82:e6:3b:19:82:
9a:42:69:b4:1c:2f:3d:29:88:b6:6e:3d:d0:a0:62:de:57:26:
f5:ba:72:1f:01:dc:44:53:d2:85:61:4a:54:4b:02:29:fa:cc:
0e:0d:2d:ed:20:9e:cf:9c:fc:79:07:87:93:0a:07:f0:29:bd:
6f:5f:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org