Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5A9BA7867A0911EDB8D80086F1222468.roa
File: 5A9BA7867A0911EDB8D80086F1222468.roa (raw, json)
Hash identifier: 6AwVXU7bQ3xpo90QlvTInH7/Ox66n4+e8r+rpNZhcEQ=
Subject key identifier: 53:B1:D6:15:12:61:BE:51:95:A0:9F:08:10:16:90:12:17:4E:A2:CB
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0917
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5A9BA7867A0911EDB8D80086F1222468.roa
Signing time: Mon 12 Dec 2022 10:40:11 +0000
ROA not before: Mon 12 Dec 2022 10:40:08 +0000
ROA not after: Tue 12 Dec 2023 10:40:08 +0000
asID: 205431
IP address blocks: 161.123.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 12 10:40:08 2022 GMT
Not After : Dec 12 10:40:08 2023 GMT
Subject: CN=6397050b-e6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:e8:1f:cf:3e:1b:79:c3:16:cb:db:e6:15:
d4:f0:ba:3f:91:06:29:9f:4d:95:eb:60:75:69:85:
7d:61:26:ef:2f:c4:3c:6a:94:8f:9d:2d:6c:1b:58:
d0:53:59:7a:ed:d2:d4:c3:31:e9:b7:bf:ad:bc:9b:
7e:c5:1b:1a:66:b5:7b:41:1a:f6:0f:b7:55:d8:7b:
e8:1e:ae:c5:c4:4d:3c:33:00:36:cc:a9:ba:ae:5c:
e8:14:9b:ce:5f:fe:95:15:2f:3d:b5:0c:04:2e:2b:
33:42:c3:c8:c6:dc:33:ea:a9:70:1a:1c:c9:41:9f:
7a:3c:13:a9:ce:1c:0b:a6:6d:3b:88:98:87:d4:d7:
c3:bb:aa:96:14:5c:02:c1:dc:6e:d2:70:2c:f7:ff:
98:38:c0:80:34:b1:e9:ce:5e:16:ca:b0:22:80:e3:
7b:e3:fc:a0:5f:e9:76:9b:a8:9d:60:c6:fc:7e:27:
ea:06:a0:92:b0:19:e6:1a:6e:35:35:62:9e:67:57:
98:46:f0:76:bc:ac:3e:b3:66:f2:90:e8:a1:1b:d1:
dd:72:ca:4a:89:a8:e7:1c:4e:2e:98:df:b3:85:f4:
01:25:9a:85:c7:42:3f:cb:d3:49:20:ef:73:58:eb:
80:7c:0f:b5:eb:25:b1:37:4b:6b:bf:5c:9b:95:52:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:D6:15:12:61:BE:51:95:A0:9F:08:10:16:90:12:17:4E:A2:CB
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5A9BA7867A0911EDB8D80086F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8e:bc:90:00:69:db:9e:02:a1:cb:ee:04:a9:ac:7e:76:1d:
18:55:67:b0:b4:1d:9c:91:b5:39:88:8d:21:d4:c6:d9:96:2a:
05:e9:f0:80:5c:a9:48:cf:36:90:ca:61:10:91:95:19:34:08:
3f:cf:1b:58:bf:94:41:e1:c5:9d:4e:c6:99:be:83:50:77:5d:
a8:63:91:4d:ed:7c:93:a3:2c:36:d9:6a:90:ca:2e:3b:27:c5:
1e:ad:3d:32:d4:c8:ed:5f:d9:b2:a7:5a:4a:a2:54:a8:99:d4:
e1:ce:8c:6f:7b:58:87:e0:4c:67:f7:4d:8a:35:44:14:95:92:
bf:6d:cf:ab:af:ad:57:a0:4c:0b:2e:0a:16:69:b1:8e:28:84:
d0:95:7c:c9:38:32:1a:86:35:df:83:0d:d3:b6:b3:ab:72:fa:
a3:6d:ce:27:bd:75:3f:71:fb:11:f0:e2:28:70:2c:9e:59:3b:
62:6e:96:2d:04:18:1b:ba:47:9d:47:3d:e9:34:98:82:29:63:
7f:0b:4b:c4:48:d3:9f:39:2c:20:d8:d5:0c:1a:21:4c:ff:23:
e9:5d:68:2f:4d:b8:f1:12:e9:d6:56:d3:6f:c9:f4:63:28:79:
1b:0e:99:33:c8:b1:8a:7e:8b:88:22:5c:91:eb:20:44:1d:fd:
bb:ef:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org