Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8445D3007DEC11EC9C8DA0AC5A40D577.roa
File: 8445D3007DEC11EC9C8DA0AC5A40D577.roa (raw, json)
Hash identifier: uIiqpE8hr4rIuimIncwffflpN2BukFxB7uLIrZ4KhNA=
Subject key identifier: FF:19:9F:8D:87:35:FF:B2:99:2D:E0:A0:71:E3:A1:BD:3A:B9:B4:76
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 04EC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8445D3007DEC11EC9C8DA0AC5A40D577.roa
Signing time: Tue 25 Jan 2022 14:38:53 +0000
ROA not before: Tue 25 Jan 2022 14:38:49 +0000
ROA not after: Wed 25 Jan 2023 14:38:49 +0000
asID: 58202
IP address blocks: 161.123.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1260 (0x4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 14:38:49 2022 GMT
Not After : Jan 25 14:38:49 2023 GMT
Subject: CN=61f00b7d-c02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:ca:c4:8d:a0:4f:3a:a0:20:88:c1:4c:a7:
bc:72:ae:ab:ed:ac:b5:d7:2e:e4:b7:f7:9a:dc:0c:
66:71:b3:b5:9a:11:81:5c:58:2f:bb:40:2b:23:5f:
76:03:5f:fa:db:11:d5:42:00:dc:95:6f:0e:c1:ca:
a1:be:a1:e5:68:bc:a6:98:a1:54:72:e3:5f:2d:7a:
64:92:db:f8:17:b0:12:50:f5:57:a3:d8:e1:2e:41:
01:8a:78:7b:09:db:3a:10:48:36:11:ab:14:d1:6c:
8f:59:5b:c3:5c:6c:c6:86:ba:15:03:e4:0c:7c:32:
a2:8e:db:42:fc:1d:12:0d:c0:f5:d5:59:65:c5:e6:
1c:e2:88:10:fd:75:3a:c9:77:cb:6a:b3:a7:4e:fa:
1b:57:7a:49:2b:bf:96:3f:c4:df:e2:32:3c:ce:0e:
96:c3:9a:8f:92:65:87:84:f6:0e:0f:6b:54:dd:64:
af:51:ba:e7:96:9f:16:51:12:3c:e9:24:e6:bf:64:
9a:ff:66:42:04:42:0f:60:f0:9d:24:b3:71:a7:ff:
99:7c:5a:61:01:17:d5:81:c7:c7:f8:86:66:8b:6e:
c1:68:78:c9:2f:b9:7b:c5:d3:bb:87:a9:a9:44:04:
78:c0:76:a3:62:44:dc:8b:84:33:81:f5:c7:02:3b:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:9F:8D:87:35:FF:B2:99:2D:E0:A0:71:E3:A1:BD:3A:B9:B4:76
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8445D3007DEC11EC9C8DA0AC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.154.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1c:71:8e:84:d2:3b:ca:95:ba:96:79:c5:50:e0:2c:c1:91:
76:6a:2a:6f:ce:ed:20:05:f3:f0:9f:74:7d:54:32:ea:a5:a7:
34:7f:bb:2e:ca:92:fb:c0:a1:67:7f:19:02:b6:d4:89:55:3b:
b0:86:ef:5a:52:38:bf:35:4a:95:83:09:19:7e:15:09:ec:4f:
b5:26:6f:da:4d:f9:fa:f1:39:04:a9:23:62:a4:9e:f3:9d:ba:
87:c4:38:24:0e:ed:28:f2:c8:66:9f:f5:cf:af:a6:65:cd:b9:
df:1c:32:67:bc:c6:cb:f5:e0:a6:34:20:d8:fa:a9:4e:17:9c:
bc:17:f3:cb:ed:e7:ae:58:5b:61:ad:3c:ba:9a:af:69:98:0a:
89:0c:1c:2b:e1:b3:e3:23:92:6c:0e:59:18:e8:4e:dc:fb:16:
bc:7d:bf:51:44:d7:02:34:e9:b6:bb:78:9e:69:90:57:4f:66:
ad:12:10:f2:3e:d9:97:43:34:ef:c5:2c:17:f9:11:8b:37:ef:
5f:4f:a2:f1:df:4f:70:9d:ed:f2:7f:59:30:67:ec:bc:81:22:
1b:b2:8a:ca:7c:8c:81:53:81:e9:f5:4a:70:66:5d:8f:2a:3f:
78:39:53:b8:00:7c:af:46:37:13:dd:84:c9:30:21:7b:bc:4d:
8e:42:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org