Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B5FDA9C7A0911ED899E1B86F1222468.roa
File: 6B5FDA9C7A0911ED899E1B86F1222468.roa (raw, json)
Hash identifier: hUpP5CCXySMmQooSD4cW9lqNKr76J2kV8ZY2jVCM+e8=
Subject key identifier: 7F:3A:48:21:78:64:D8:A3:F9:CA:C4:5C:02:CF:07:43:03:D0:DA:71
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0919
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B5FDA9C7A0911ED899E1B86F1222468.roa
Signing time: Mon 12 Dec 2022 10:40:39 +0000
ROA not before: Mon 12 Dec 2022 10:40:36 +0000
ROA not after: Tue 12 Dec 2023 10:40:36 +0000
asID: 205431
IP address blocks: 161.123.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 12 10:40:36 2022 GMT
Not After : Dec 12 10:40:36 2023 GMT
Subject: CN=63970527-cb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:e2:27:fa:78:82:c2:0d:2d:d4:54:14:38:
21:4a:08:29:c6:e9:68:50:4a:f7:fb:e6:7c:a8:02:
c4:6d:2a:7d:2e:3b:b2:6d:03:2f:d5:2f:2a:63:5e:
97:e2:47:57:cf:82:56:55:92:2d:5c:2c:54:80:73:
6c:24:08:f6:ab:d8:c4:aa:b9:c2:80:6f:7e:b9:4e:
aa:a8:69:42:20:fd:57:3f:3f:42:36:47:92:dd:4b:
79:f9:bf:4e:b5:cb:fb:89:be:fc:c3:45:8c:58:c1:
af:a0:b3:3f:fe:97:98:4d:78:e6:95:27:55:b9:59:
76:b7:a2:d8:89:1c:b9:8d:b2:ab:4a:73:ef:ae:03:
e5:37:0b:15:d2:f5:5d:aa:ba:0d:a9:8f:22:e7:06:
f2:72:b9:6d:b5:eb:32:77:91:98:e0:01:c4:46:4e:
4d:92:76:23:4a:46:c1:8c:9f:96:73:68:c5:a2:b3:
e1:09:27:66:81:dc:ce:8b:d6:c9:53:16:6d:aa:d4:
91:4f:7b:db:2e:dc:ab:f8:7c:da:9a:f6:75:10:d6:
95:e2:13:f0:0d:20:e0:f1:d0:f3:7e:14:3a:97:23:
b5:35:2d:32:8b:a7:4d:d1:72:35:24:8c:10:45:2f:
79:cb:c7:f7:c5:a7:3d:98:7b:d6:4c:26:2f:8e:16:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:48:21:78:64:D8:A3:F9:CA:C4:5C:02:CF:07:43:03:D0:DA:71
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B5FDA9C7A0911ED899E1B86F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d1:9d:fb:a8:3e:f5:3d:9b:b4:b0:4e:ff:ac:54:a6:ce:0b:
fa:03:2d:f5:6c:7f:58:22:20:7b:42:46:d6:44:13:bd:bf:57:
a5:6e:f7:82:50:20:7a:03:07:7c:73:72:af:5d:b4:7c:b5:fa:
2d:1b:2c:ab:5e:d4:54:8e:fa:6a:0c:e3:26:2e:0a:7e:fd:b4:
39:96:6f:52:bf:91:82:46:36:8c:fa:d9:b6:d0:b0:d8:05:38:
ea:8b:66:40:1b:97:e7:04:a2:e7:fa:1d:5c:30:7a:e5:e1:4c:
9c:8a:8c:c8:9a:23:55:c4:34:4e:1b:cd:b4:81:66:73:67:24:
ab:6d:78:9d:9d:2d:37:d9:43:c3:6c:6c:07:4b:b4:be:b5:22:
d3:f8:b0:2b:dc:55:4a:58:f0:18:32:2c:5f:c5:48:8b:54:3f:
1a:a3:31:a6:b2:81:74:f6:6b:e9:c6:a4:64:b0:92:c5:32:42:
49:b3:49:5d:b2:b2:d2:65:37:43:e4:87:31:bb:de:c6:a2:30:
f6:e4:da:e0:25:2c:d7:bd:28:6f:d4:78:c0:4b:a9:c7:28:0a:
99:42:44:1c:35:ec:30:aa:1a:76:4b:18:79:e4:59:f7:ac:0a:
9b:21:8f:53:a7:64:53:3a:8c:17:18:9d:61:a4:ef:24:2e:4f:
86:7b:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org