Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7024EFEC339E11EDA879A1E6F1222468.roa
File: 7024EFEC339E11EDA879A1E6F1222468.roa (raw, json)
Hash identifier: zSy775MIJmC/R1iJZhIBmBD4ddiri7KghKVTiDy2HKY=
Subject key identifier: 87:D0:06:39:C0:5F:3B:3E:02:2C:60:DD:43:6E:DA:AB:DE:04:1B:70
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0821
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7024EFEC339E11EDA879A1E6F1222468.roa
Signing time: Tue 13 Sep 2022 19:58:30 +0000
ROA not before: Tue 13 Sep 2022 19:58:24 +0000
ROA not after: Wed 13 Sep 2023 19:58:24 +0000
asID: 205431
IP address blocks: 161.123.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 13 19:58:24 2022 GMT
Not After : Sep 13 19:58:24 2023 GMT
Subject: CN=6320e0e6-6b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:22:ba:e0:3d:5b:60:ba:a0:9c:91:95:4b:
aa:75:e7:03:86:e5:8d:8c:44:1d:ea:c3:c6:90:eb:
f2:18:be:09:58:66:2f:d7:07:bb:83:44:ac:97:4c:
d6:f7:9b:63:a2:2f:1f:95:51:9c:12:db:d0:15:18:
bd:23:81:7a:ec:93:31:f6:7f:e6:15:e6:9a:d4:3d:
21:af:2f:58:36:89:64:9c:63:4c:58:a8:ae:39:25:
ed:f1:f1:70:fb:24:b9:94:41:e3:86:d7:d1:03:11:
f4:5f:0c:fb:6d:5a:96:56:da:20:46:b7:7a:65:a2:
fc:66:d4:41:13:cb:3b:ab:42:1e:54:06:39:c5:8b:
c0:a6:73:c2:01:39:db:95:b2:26:66:4f:a9:6a:1b:
af:00:db:b3:05:10:66:68:08:ce:ab:14:47:f0:83:
63:20:79:b4:03:47:a0:36:a7:5e:27:50:b3:61:92:
eb:12:e4:88:9d:7a:b5:3e:2f:f3:b5:ac:1a:fb:52:
01:aa:47:05:23:51:ab:b2:39:8b:dc:6c:ea:c3:1a:
f3:0a:45:0a:a2:fb:39:e6:a5:cc:95:05:04:4e:d9:
15:9e:8a:ca:3b:13:b9:fd:64:17:06:d8:58:db:f8:
cc:90:42:5c:9f:9f:83:1d:c3:ac:c9:bf:72:0b:f8:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:06:39:C0:5F:3B:3E:02:2C:60:DD:43:6E:DA:AB:DE:04:1B:70
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7024EFEC339E11EDA879A1E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6d:b3:2b:1e:e6:d4:65:20:c7:0d:f7:d9:2b:4e:a8:2c:4f:
ed:6c:fa:60:5f:25:a6:91:1d:c7:d0:5e:57:fc:86:11:22:62:
8e:af:29:7c:ad:2d:aa:79:1e:e7:ff:2b:2e:af:60:c7:64:ea:
67:8d:0c:87:07:4a:de:f3:d3:cb:f1:2c:e9:aa:d7:43:1f:cd:
13:1c:97:68:e1:18:fe:97:bf:16:50:66:82:11:08:0d:1a:1f:
93:96:72:9b:d2:99:73:f2:f9:ed:03:99:79:e6:99:9c:60:8a:
67:3d:ed:17:27:22:f7:1c:70:8f:47:d0:65:68:8a:43:c3:31:
44:23:86:57:35:7f:5e:ce:0f:a8:1c:0b:1c:60:4e:a0:d8:60:
f7:40:a6:1a:e6:a4:f7:9d:80:ef:09:5b:81:2a:68:6f:3c:1d:
dc:72:e2:b8:21:ae:98:27:44:99:35:dc:48:0a:b1:be:ea:7b:
32:d6:b9:5f:92:e0:df:bb:6a:b0:df:1f:07:2c:c0:a4:84:ea:
80:b9:26:3f:86:b5:00:9c:71:3e:ef:19:20:ed:a4:68:c6:96:
17:67:06:99:cf:08:f6:32:55:27:2e:c7:dd:22:34:0b:ba:11:
0d:44:45:00:bb:20:fa:0d:41:be:23:a3:e1:d1:f8:9e:d4:fa:
d4:32:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org