Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8166933EB99E11EC9E03BB845A40D577.roa
File: 8166933EB99E11EC9E03BB845A40D577.roa (raw, json)
Hash identifier: C2vEGFSfT5wSQP6GxjvMhpqk7QoR7MYSvlFpOmznBpc=
Subject key identifier: CA:F9:CE:80:C6:C5:36:0C:A2:27:35:F0:EB:6C:26:20:AD:31:6F:C0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0658
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8166933EB99E11EC9E03BB845A40D577.roa
Signing time: Mon 11 Apr 2022 13:51:37 +0000
ROA not before: Mon 11 Apr 2022 13:51:33 +0000
ROA not after: Tue 11 Apr 2023 13:51:33 +0000
asID: 400377
IP address blocks: 161.123.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 11 13:51:33 2022 GMT
Not After : Apr 11 13:51:33 2023 GMT
Subject: CN=62543269-e640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:63:d6:d9:88:ba:af:84:ad:46:bf:81:e4:
28:7d:11:c4:fc:50:5f:5e:7d:4c:e0:fb:72:78:5d:
08:62:18:4c:74:0b:cc:51:1e:e6:59:08:18:c8:b3:
f9:80:1f:6d:d7:3d:d0:07:db:f9:cd:2b:cf:a1:29:
69:d7:31:37:fa:ca:fc:83:87:be:08:5f:21:b7:34:
95:e5:09:e1:88:c5:4e:0c:9c:78:07:2c:3f:aa:24:
c7:5b:d2:cd:33:ab:b8:9c:9d:9a:93:3e:d9:af:9b:
7b:87:6f:68:a7:1f:7e:4a:6a:2a:a2:ff:14:52:02:
76:81:81:5e:7c:72:8d:c3:14:76:8d:bb:ed:4f:31:
4d:ae:af:59:9d:41:c2:fa:ac:94:3e:36:4c:bc:0d:
57:5e:91:9c:f7:22:58:94:b6:78:5d:79:8a:29:e7:
fb:ff:c2:11:d9:93:09:fb:76:db:70:67:51:37:89:
e8:5d:2f:ce:39:9a:9a:c7:a3:63:7d:f3:3e:c9:54:
14:63:26:4a:21:15:8d:29:6a:10:26:40:07:d0:ad:
73:1f:ec:91:e6:24:2a:62:ca:0e:9c:74:a5:b4:87:
e8:e4:26:35:0b:7a:0e:30:76:ae:8d:15:bc:14:3c:
80:16:5a:7c:3e:21:3b:f8:8f:d5:d0:c9:3d:6d:08:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:CE:80:C6:C5:36:0C:A2:27:35:F0:EB:6C:26:20:AD:31:6F:C0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8166933EB99E11EC9E03BB845A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:27:d8:c9:09:ce:2b:38:ec:47:40:3f:5c:c9:52:87:5f:2c:
28:65:24:a9:86:d1:2e:15:2b:a6:3a:1d:f7:03:62:0e:8e:46:
90:08:9d:1c:26:36:f7:51:3c:dd:a1:72:d8:55:f1:8f:14:29:
b4:11:f2:db:9b:6a:96:ad:99:a8:2f:ba:95:f3:75:f3:c1:c1:
88:9f:76:9f:ee:df:6c:44:67:14:1e:8b:3c:4e:4b:e4:f7:5b:
38:b1:9e:0e:a3:d6:6f:f7:82:e2:d3:08:29:c8:00:81:e1:e8:
d2:29:f2:68:82:fb:8c:0a:8e:35:98:6d:f6:98:ee:bc:06:c8:
76:b1:7f:14:5f:03:43:bc:e4:d7:c0:22:f5:ee:df:b9:10:2d:
d9:d2:e2:5e:13:79:aa:b0:b7:5e:38:d9:1d:ea:f7:a4:71:ae:
0b:59:b8:7f:53:95:72:d3:64:32:eb:95:8d:e2:04:ed:bf:f1:
a4:41:db:c3:3b:26:97:1e:68:39:e0:7a:42:cd:45:1b:3c:85:
13:1f:03:56:68:57:64:c4:f0:66:5e:76:44:98:e7:4b:74:2d:
1d:f7:e7:b6:ac:2f:79:c5:8c:40:ef:6e:8f:e6:77:09:2c:17:
97:d5:4d:89:0c:45:9f:1a:89:4f:27:26:3b:a7:8d:b6:bc:9b:
67:ce:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org