Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/590DDE2C3D8011ED83FA5BAFF1222468.roa
File: 590DDE2C3D8011ED83FA5BAFF1222468.roa (raw, json)
Hash identifier: Ltkh3ffd5AvlfSCg3LrMXrj0cr3YUXSqwSCb2ki07sk=
Subject key identifier: 14:13:F1:7B:18:39:72:F5:1A:08:0A:C3:DE:1A:97:F1:4F:D0:4B:AB
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0861
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/590DDE2C3D8011ED83FA5BAFF1222468.roa
Signing time: Mon 26 Sep 2022 09:48:18 +0000
ROA not before: Mon 26 Sep 2022 09:48:14 +0000
ROA not after: Tue 26 Sep 2023 09:48:14 +0000
asID: 203999
IP address blocks: 161.123.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:48:14 2022 GMT
Not After : Sep 26 09:48:14 2023 GMT
Subject: CN=63317562-f612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:bb:05:e4:c4:ef:61:29:cb:f6:f6:7e:a4:
57:3e:4b:c9:ba:e6:6e:02:4b:e9:cf:39:e9:2d:c4:
be:c5:1a:ef:f6:54:fb:40:70:05:4e:8c:ed:fe:e2:
b7:11:87:eb:61:d2:21:53:aa:19:a5:c3:65:3c:3c:
20:b5:f0:55:be:a5:a7:0c:8e:dc:fd:56:69:2d:e4:
dc:73:db:8e:aa:62:32:c6:e7:95:1e:48:f9:05:cc:
1b:f8:7e:94:d1:6c:1a:49:75:46:ee:6c:05:5b:69:
df:66:85:1b:00:75:77:02:b6:76:25:4f:d0:65:18:
c5:6c:f0:9e:6e:3b:25:41:12:5c:0f:3a:d1:eb:c2:
23:cf:fd:d8:82:ac:af:30:6b:9b:f0:3c:5b:10:2b:
18:d0:8b:61:b5:df:f0:ad:77:e5:21:ba:77:85:4e:
74:ea:f9:d6:b8:12:41:db:41:06:f6:af:72:57:fe:
77:90:43:b8:6d:b3:3e:bb:60:b8:40:cd:1d:ac:59:
59:f8:e9:ce:f5:15:9d:ea:d8:b9:d2:47:df:d5:c9:
59:f1:51:3c:0e:f6:ae:d5:03:54:aa:f1:04:17:4b:
4a:a8:ae:8b:41:90:df:ff:45:6f:a6:03:77:55:d7:
bd:2e:e4:56:51:c7:aa:f7:47:25:00:75:bf:55:ce:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:F1:7B:18:39:72:F5:1A:08:0A:C3:DE:1A:97:F1:4F:D0:4B:AB
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/590DDE2C3D8011ED83FA5BAFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.108.0/22
Signature Algorithm: sha256WithRSAEncryption
90:0b:64:3f:11:a8:53:c2:37:ef:a9:84:3e:b9:2e:c6:24:3b:
f6:fa:33:a1:fc:45:81:c4:65:d5:71:32:74:fb:69:36:99:08:
e5:96:59:f3:7a:6f:75:1a:41:6f:0e:59:96:00:4a:58:92:2f:
16:fb:0a:46:7a:06:9e:cc:dd:c4:78:77:39:2c:7c:48:54:d4:
1e:8b:00:d4:f7:f3:52:73:57:ba:11:80:25:ef:83:b0:f2:39:
1a:bf:9b:54:cd:75:96:4d:74:fd:23:1d:7a:54:37:6a:09:66:
72:9a:c7:24:bd:1b:10:5d:56:49:52:5d:af:ed:a3:3e:42:e8:
97:61:2d:6c:04:3c:c7:ea:e9:10:ec:30:d9:5b:3f:88:8e:b1:
aa:29:48:4f:44:bc:c4:6a:ff:c6:b2:25:c2:14:23:f1:8e:cf:
0e:78:71:4d:9d:dd:68:64:a9:86:91:24:91:e5:7b:08:27:25:
5e:78:01:65:89:60:00:33:ac:d9:5d:ff:22:27:fd:d4:26:07:
33:dc:b5:36:b3:d0:d6:37:64:b9:3b:11:eb:d8:21:26:43:96:
91:80:e4:09:8e:7e:24:50:2f:4b:5c:5b:f3:ce:dd:d1:b1:0e:
64:02:ce:44:37:c9:c0:42:07:84:d7:09:a7:b5:86:36:db:c9:
e3:6f:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org