Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/688849FC919811ED843D88D6F1222468.roa
File: 688849FC919811ED843D88D6F1222468.roa (raw, json)
Hash identifier: IURQcISVSXwjL4nT32dtQsyp+BkJy3Bf0lFiquby6tI=
Subject key identifier: E1:C5:7D:23:7A:E6:BB:6A:0D:35:5F:69:64:FE:CB:CC:00:56:83:28
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 094E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/688849FC919811ED843D88D6F1222468.roa
Signing time: Wed 11 Jan 2023 10:12:09 +0000
ROA not before: Wed 11 Jan 2023 10:12:05 +0000
ROA not after: Thu 11 Jan 2024 10:12:05 +0000
asID: 133499
IP address blocks: 161.123.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:12:05 2023 GMT
Not After : Jan 11 10:12:05 2024 GMT
Subject: CN=63be8b79-df6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:93:88:7f:70:1c:76:5d:2e:40:64:50:74:
27:83:1f:b6:93:8e:c6:25:06:37:32:26:e4:26:05:
48:60:53:2f:e1:4c:10:07:ae:c0:bd:58:73:00:2d:
23:af:0f:fa:74:d6:37:1f:90:76:80:e8:64:ac:3e:
72:d5:36:04:62:c4:fd:9e:ff:6a:07:45:83:66:44:
c9:44:f3:5f:59:46:41:77:53:0d:e6:ac:0e:af:55:
13:14:ad:f5:40:95:93:c3:b4:7e:04:99:0d:02:36:
4e:11:88:04:3e:42:e3:ce:09:92:95:39:2a:39:5b:
e7:23:40:1d:36:bc:84:f7:77:14:e4:df:9e:6f:4c:
90:a0:27:bb:5d:35:8d:24:83:b5:86:59:41:4a:c7:
b3:6b:50:bc:e2:94:8d:6f:43:28:53:61:57:67:73:
dc:ae:d2:8d:18:20:f8:54:6c:58:96:ea:c3:26:bc:
de:89:9f:f1:be:b8:df:10:4c:d1:49:c1:f8:40:92:
99:4b:f4:1d:fc:5a:62:15:cf:e9:43:33:4c:4c:e9:
05:63:ae:f3:c4:5c:6c:92:dc:e1:75:53:81:95:f7:
44:9d:3f:7e:f6:d0:00:a2:61:ed:4e:b5:d7:ab:ab:
2c:23:94:19:27:2c:d3:d5:dc:77:0f:3a:ef:54:53:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:7D:23:7A:E6:BB:6A:0D:35:5F:69:64:FE:CB:CC:00:56:83:28
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/688849FC919811ED843D88D6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.198.0/23
Signature Algorithm: sha256WithRSAEncryption
85:ce:37:25:88:99:4b:e0:7c:1b:8d:36:ec:5e:8d:26:42:40:
f6:8f:40:82:2a:c8:5f:a2:f2:6f:99:74:e8:f1:35:81:0e:1a:
59:2e:66:a2:91:ac:e4:0c:7e:2a:f0:3b:14:e5:75:4e:50:b2:
6e:94:e7:c0:66:24:1c:48:4c:59:47:d4:d7:fb:45:e6:2a:2b:
48:8f:75:cd:a3:ae:41:b8:78:45:5f:d9:40:35:0f:ba:b0:ad:
a0:4c:0b:23:f9:61:26:5f:e8:17:47:b3:6f:e2:bb:c0:99:28:
20:45:be:55:36:f0:7a:9e:7c:8e:a4:ef:92:3b:19:28:bb:60:
c9:49:71:aa:eb:d8:5a:3d:76:d5:ab:b0:7f:7b:b0:79:3c:3d:
a9:89:57:53:28:80:84:ab:14:41:62:4c:b3:46:31:53:49:30:
b9:cc:01:f7:a2:f5:46:10:74:9e:3d:b3:5e:cc:1e:27:8b:dc:
9b:8f:4d:95:a6:97:de:d0:07:76:4c:88:15:15:db:c4:86:91:
8e:5d:62:15:6a:e1:89:b6:53:20:aa:48:04:99:9d:b8:aa:61:
58:bb:c8:a9:5b:df:bb:74:f0:d3:96:e1:74:b9:96:39:68:f1:
e6:16:3a:60:a4:4c:5b:73:2f:46:70:7c:f4:4e:0b:8e:cc:7f:
7f:16:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org