Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DCE46627F6111ECBFA3F3765A40D577.roa
File: 7DCE46627F6111ECBFA3F3765A40D577.roa (raw, json)
Hash identifier: rI5XdhqfnWnFtfZGm6P1l4uxVuQRu8Oz3caihIK3LIw=
Subject key identifier: 68:40:B2:0B:55:FB:DE:BD:25:F1:8A:B2:20:B3:EA:FB:69:70:3D:66
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 054F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DCE46627F6111ECBFA3F3765A40D577.roa
Signing time: Thu 27 Jan 2022 11:08:44 +0000
ROA not before: Thu 27 Jan 2022 11:08:40 +0000
ROA not after: Wed 25 Jan 2023 11:08:40 +0000
asID: 136744
IP address blocks: 161.123.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 27 11:08:40 2022 GMT
Not After : Jan 25 11:08:40 2023 GMT
Subject: CN=61f27d3c-6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:89:d0:a1:f7:9e:4e:31:82:f9:2b:b3:3c:
d7:8d:47:2d:a3:b3:1b:8d:6f:01:e9:8a:6c:3c:72:
68:a5:31:fd:12:24:34:b3:1d:69:87:56:23:94:01:
12:00:01:04:ac:15:e6:c9:bf:19:1d:04:b8:d4:75:
4f:17:c9:a2:30:0b:b6:13:05:ed:3c:80:f8:2d:fe:
75:56:7f:56:05:f9:05:bb:b6:1b:a7:98:2f:83:0d:
10:b0:34:12:93:98:10:d7:07:1f:7e:fb:e0:d8:77:
e1:be:9f:37:e7:60:d5:18:0c:9a:52:67:02:f4:a9:
44:80:7c:37:e2:ca:f8:c7:bc:93:43:66:5e:ff:f4:
a3:24:ac:0b:6f:ab:ed:7c:30:f8:5f:2d:f9:38:e3:
55:8d:7d:60:06:fa:b1:ad:d5:72:0e:1a:f4:53:30:
3d:29:9a:8a:03:24:7d:e4:b8:cf:f3:e0:56:90:6b:
d6:1d:50:49:4b:23:93:6f:4a:79:71:a3:a5:a3:4a:
88:01:b7:13:e6:ec:ae:81:63:3b:fa:b6:f0:fd:9c:
8d:35:42:b6:0c:e9:6a:f8:75:5f:8d:4d:c3:ba:8f:
2b:de:a7:3b:e3:38:2c:7e:a8:b9:c1:b1:7d:2c:f5:
a9:87:0b:ac:1f:ec:3a:29:04:d7:6a:b1:4a:52:ed:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:40:B2:0B:55:FB:DE:BD:25:F1:8A:B2:20:B3:EA:FB:69:70:3D:66
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DCE46627F6111ECBFA3F3765A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fd:56:93:ad:55:d8:fa:b9:98:7d:30:43:b4:bf:e7:b4:ce:
b7:e7:47:cb:ac:e5:94:14:9a:cf:2c:b6:9e:0e:1d:71:aa:ea:
e3:fd:d6:53:5c:ca:34:3d:a6:cb:1a:c3:1e:66:64:38:8c:01:
61:15:55:bb:6e:0e:85:90:77:42:0b:b1:8a:4f:9d:48:3b:e8:
4f:de:e6:1f:d8:d7:2a:76:57:54:c9:c5:0b:0c:e6:b0:23:31:
6c:01:78:0b:c1:6e:84:82:d7:c0:ad:e1:6f:89:a3:b2:f9:67:
a5:c2:15:bb:cc:63:d0:66:25:4e:fd:0e:fc:72:d3:31:b0:8b:
e6:a6:d9:34:53:b5:96:9a:c1:4a:9e:b6:01:9b:77:20:d0:4b:
34:5e:f9:d6:50:19:7f:08:b5:fe:b0:8e:c4:5f:84:f6:e3:49:
1f:b4:bc:87:07:e0:b9:98:e8:08:79:f9:71:8d:d1:66:80:83:
f3:ad:f4:dd:db:59:61:cb:19:3a:e7:3c:68:0e:46:2d:11:57:
cc:02:4c:d8:f9:99:82:d9:fa:55:a7:86:e6:3f:cc:68:29:41:
9a:aa:f5:be:77:f1:ec:51:e4:34:2e:8c:3d:18:d4:02:b5:9c:
6c:62:63:94:b1:22:67:5e:6a:9d:0d:d9:94:37:fa:66:8b:1a:
db:18:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org