Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65CB2780905211EDBD5176CCF1222468.roa
File: 65CB2780905211EDBD5176CCF1222468.roa (raw, json)
Hash identifier: pPA2FQnvhhjlbqO4t48algTJ3O3lKaqvvunl8hLwFWI=
Subject key identifier: 7D:59:84:E9:42:E8:C1:C6:E2:11:7B:E7:BB:F2:1B:0F:A8:A5:3F:4B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 093C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65CB2780905211EDBD5176CCF1222468.roa
Signing time: Mon 09 Jan 2023 19:18:29 +0000
ROA not before: Mon 09 Jan 2023 19:18:25 +0000
ROA not after: Wed 03 Jan 2024 19:18:25 +0000
asID: 327790
IP address blocks: 161.123.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2364 (0x93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 9 19:18:25 2023 GMT
Not After : Jan 3 19:18:25 2024 GMT
Subject: CN=63bc6885-8151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:20:c2:84:36:93:b1:48:c5:b9:5f:a8:79:
5a:cf:f5:e7:41:9b:d7:9e:77:c4:25:16:d4:9b:df:
ca:5d:2a:d8:95:a7:c0:6f:6c:92:3f:c8:f2:cf:54:
c6:16:bd:b4:c3:1a:15:2f:37:97:e4:c3:c7:e5:58:
bb:04:30:32:ab:bc:2d:67:c0:7b:ce:c0:48:b0:31:
54:f9:8e:13:6a:a3:55:5c:79:5b:49:6d:4b:c5:6d:
df:e9:c8:8d:e1:3b:a3:d9:91:3e:ea:3f:cb:9f:3e:
8c:a2:e8:77:ac:5f:ee:74:a7:62:fa:d1:e0:9d:74:
87:46:03:a6:40:83:06:fe:ec:2f:b4:93:7e:8f:95:
f5:4c:31:1c:c4:c2:4a:ef:c8:58:db:fa:d8:3d:71:
92:fa:8e:19:34:1e:1b:68:3b:da:da:34:72:12:83:
9f:c0:e1:fc:5d:fb:cb:e7:84:30:0f:98:78:f5:2a:
f4:4a:fe:be:e7:5e:77:24:50:76:3c:fb:bf:a1:eb:
4b:35:2a:19:64:7c:79:08:a8:88:88:2f:6c:cb:ef:
13:25:e6:8d:e5:42:c5:a2:5b:03:92:dc:df:77:a7:
db:f8:8e:51:86:e9:4d:9e:e8:71:a8:86:cd:ac:b7:
7e:c9:b8:c4:c8:91:63:84:96:3e:9e:14:13:18:83:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:84:E9:42:E8:C1:C6:E2:11:7B:E7:BB:F2:1B:0F:A8:A5:3F:4B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65CB2780905211EDBD5176CCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.222.0/24
Signature Algorithm: sha256WithRSAEncryption
93:97:51:07:6e:8d:f2:f8:57:9f:ad:8c:95:18:5d:0a:c5:1f:
83:aa:38:bf:fc:ca:03:97:97:25:65:98:71:a5:dd:32:ab:1a:
24:cd:b6:6d:ed:10:71:20:be:8c:96:6b:43:49:3c:d8:b4:ba:
18:b9:8a:11:6c:39:53:dc:a4:f5:88:57:d8:06:ce:ef:c6:47:
d8:c7:89:f6:7c:29:92:98:ad:53:ad:3a:ca:bb:4d:b7:13:83:
73:d2:2a:72:d6:1e:25:6e:7a:4c:8d:da:a7:a5:61:09:b7:89:
0e:5a:13:91:0e:d6:b4:44:43:d1:85:11:34:d6:24:e1:38:df:
22:6e:7e:bb:32:ae:b4:81:3f:5e:15:70:72:7e:4c:c7:23:44:
1b:20:e5:2b:0f:19:0e:40:f7:a9:34:92:62:8c:10:97:e1:1c:
55:e5:e7:72:ee:9b:83:47:0d:7c:ce:e1:2b:c3:44:04:66:0c:
c4:a4:aa:c3:34:17:7f:26:54:1d:c8:6a:ae:b2:70:69:46:65:
9f:93:ec:cd:11:17:b8:98:6b:46:70:2f:fe:f2:24:9e:b8:9d:
03:68:fa:f7:ce:e4:51:53:dd:a9:34:be:94:e8:b1:c8:1b:4a:
1b:0b:0a:56:b6:94:d9:09:08:a1:b0:21:b3:0e:93:dc:95:48:
04:19:3a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org