Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5ACCB266845711EC99F5FD835A40D577.roa
File: 5ACCB266845711EC99F5FD835A40D577.roa (raw, json)
Hash identifier: UYcGEop/TDz+7hn+QOqC+Al8NKOgyi1Mg1eU4JP0nbU=
Subject key identifier: 3D:C4:0F:1D:F0:82:C9:64:25:3A:C2:B3:E9:B7:30:B8:E2:A0:59:63
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0571
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5ACCB266845711EC99F5FD835A40D577.roa
Signing time: Wed 02 Feb 2022 18:38:46 +0000
ROA not before: Wed 02 Feb 2022 18:38:43 +0000
ROA not after: Thu 02 Feb 2023 18:38:43 +0000
asID: 3561
IP address blocks: 161.123.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 2 18:38:43 2022 GMT
Not After : Feb 2 18:38:43 2023 GMT
Subject: CN=61facfb6-bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:48:e5:8c:b6:15:2c:ae:00:d9:d3:6d:eb:
99:c6:ab:8b:ca:e9:dc:7c:c3:d0:be:a5:c8:02:90:
81:21:49:7c:73:72:70:06:c1:fc:ef:97:01:07:db:
33:d8:9b:f8:83:03:61:85:6a:6e:27:ff:1c:44:97:
63:f0:52:b4:38:92:f6:35:a7:1c:28:01:31:1b:ce:
3f:c4:f6:b4:54:8b:84:33:69:26:8c:23:c9:ac:fb:
38:3d:d5:62:f0:18:66:5a:1a:87:fd:6e:53:78:3f:
3d:ab:08:e4:0d:bd:45:dd:f8:d7:a6:00:fd:f8:36:
39:89:0c:80:38:ac:42:31:00:13:96:26:61:45:2c:
d6:37:ea:c5:d2:f8:7e:4b:d7:4b:fc:e1:92:bf:c9:
57:0d:b2:1d:88:ad:7b:ff:71:04:d3:ad:60:06:4c:
dc:cc:39:3c:33:f8:71:4c:c2:4b:f1:c8:78:1a:81:
54:ca:82:30:93:c8:ac:0f:bc:3f:8b:47:ec:22:eb:
89:98:55:38:4a:06:c2:9f:dc:f2:5b:7e:46:5c:89:
27:3a:df:4f:c7:c6:3a:b3:6c:1d:da:b7:ee:32:ce:
94:f7:04:0a:5d:1f:0c:0b:fc:48:74:7f:10:fe:d5:
c2:08:6e:2b:93:f7:f7:30:70:16:98:c2:7a:b6:a9:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:0F:1D:F0:82:C9:64:25:3A:C2:B3:E9:B7:30:B8:E2:A0:59:63
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5ACCB266845711EC99F5FD835A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:9e:25:ff:d2:2d:15:41:bb:26:0c:c8:17:79:6a:37:a1:47:
78:34:58:20:16:96:45:b2:16:7a:93:31:9c:c9:e7:71:5f:cf:
0a:4e:e8:ea:76:08:17:66:e9:1b:89:6e:48:ae:6a:1d:63:6e:
e3:2a:c9:28:ba:dc:24:03:31:77:a4:fb:df:ee:61:15:22:c1:
8c:77:dc:8e:98:93:14:a1:68:e7:ed:4b:b6:51:96:31:a2:a4:
a9:a7:87:b2:2a:b5:11:c3:80:7b:c6:5b:e5:58:21:aa:28:2d:
08:2a:71:f4:84:20:dc:35:82:2f:97:91:04:6a:50:e6:df:a8:
b0:d1:99:eb:a5:8d:88:81:38:a3:e5:c7:6f:27:61:8b:90:54:
96:ee:cb:33:b3:b2:fe:35:ee:a0:c5:9c:b8:c8:f1:c8:82:23:
63:2d:99:82:56:20:f0:37:15:0a:72:40:b9:44:8e:6d:01:65:
3b:08:34:17:2a:a9:1e:63:7d:9f:11:82:c5:57:49:a8:42:c0:
9b:45:20:28:3e:7c:cb:86:3d:3d:49:24:4b:13:09:f1:16:1c:
aa:78:8c:c8:77:40:63:86:4e:d6:e7:ff:ec:75:21:c2:b1:b2:
b3:6a:87:ff:ef:9b:e9:bd:35:4f:85:fe:3b:dc:98:69:23:ee:
64:83:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org