Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/613A2FE0A89411ED9A5B647DF1222468.roa
File: 613A2FE0A89411ED9A5B647DF1222468.roa (raw, json)
Hash identifier: uHpsRfnDtAlIYFq5XvX40Hc1/ZndT5TsDU2rcVfrPmg=
Subject key identifier: 3C:56:46:5F:6E:2E:F7:68:A5:9C:AF:80:DC:6E:A9:A8:A2:89:89:1A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 099D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/613A2FE0A89411ED9A5B647DF1222468.roa
Signing time: Thu 09 Feb 2023 16:11:17 +0000
ROA not before: Thu 09 Feb 2023 16:11:11 +0000
ROA not after: Fri 09 Feb 2024 16:11:11 +0000
asID: 207990
IP address blocks: 161.123.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 16:11:11 2023 GMT
Not After : Feb 9 16:11:11 2024 GMT
Subject: CN=63e51b24-2da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:71:14:77:7d:cb:26:96:ed:c1:71:08:86:
84:16:08:e2:cf:fc:93:4d:8b:1b:d2:35:40:3c:e2:
64:02:bd:fe:cf:44:f6:7d:10:84:0c:b8:f4:25:da:
fc:56:06:31:56:47:f2:8e:a8:03:62:01:46:97:f4:
ce:bb:18:2c:12:8c:01:fb:de:24:68:2d:8c:c9:10:
37:fe:62:65:44:db:ee:fb:45:36:6a:15:3f:cc:9c:
11:83:c9:84:b6:cd:06:ca:dd:09:4f:f3:25:00:7a:
22:b7:6e:50:1c:4f:c8:7a:86:72:18:78:39:7f:6d:
97:48:41:00:7f:db:29:df:65:8b:73:ec:9a:d2:b7:
6b:ad:63:f6:9d:1b:51:26:ff:3f:37:e2:45:e5:1a:
6c:1f:1d:5a:53:48:97:68:53:32:23:86:47:bb:3d:
3e:55:ee:00:ab:a6:ed:cb:6d:04:bf:23:a5:90:dc:
d1:67:5d:cc:82:9f:18:01:63:d4:03:67:ca:7d:c0:
a7:45:7c:6c:17:fa:63:30:f8:f2:01:60:d8:3a:31:
c3:f1:64:1a:50:39:80:b6:4f:e2:3e:3a:50:18:66:
7f:70:e7:04:62:b0:2f:23:8b:47:73:13:d9:74:ad:
c4:5c:d2:0c:81:7e:91:a7:a6:00:81:96:52:46:1f:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:46:5F:6E:2E:F7:68:A5:9C:AF:80:DC:6E:A9:A8:A2:89:89:1A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/613A2FE0A89411ED9A5B647DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.32.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9f:f3:a5:a6:cb:3e:a3:e2:18:af:3f:04:03:91:89:5f:5a:
81:5a:c6:17:29:28:dc:30:7a:c3:ee:69:27:83:dc:ec:d4:34:
a5:01:a8:fe:ca:c9:ab:31:c0:70:3c:ef:99:8e:16:e6:41:a7:
a7:4b:9d:ab:db:76:d1:b6:09:2a:77:a8:3e:ae:3d:22:dd:b9:
d1:b8:c8:a2:3f:a0:b8:a7:dd:b7:c9:fe:9b:a3:9e:8f:8c:06:
98:ee:61:e1:b0:dc:e0:50:bc:5d:26:0b:ad:46:6a:43:32:d5:
5e:f9:86:8c:a1:80:be:ba:10:b3:c9:05:99:59:8c:b1:76:9c:
3f:d6:8b:0a:f2:84:6d:4d:99:f3:83:2e:c1:d5:6b:4b:90:de:
0a:a1:44:88:40:aa:53:67:fd:4a:a2:d9:f2:58:1d:6a:04:44:
1b:2d:67:5b:ba:af:bb:23:78:8e:77:5e:e0:ea:c6:18:93:0e:
cc:09:22:c5:f0:ae:9d:35:cf:9c:bc:a0:74:f9:b6:42:2c:49:
a4:2a:e9:a6:f2:af:63:99:b4:dc:85:bd:db:66:6c:9f:21:9c:
32:e4:ae:0d:6f:ba:71:83:d8:e8:b8:58:91:2d:c4:b4:29:d8:
a2:ec:72:c4:40:4f:0d:73:9a:5d:7f:28:9e:bd:03:4c:1d:59:
01:5a:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org