Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8BDFF4C8A89411ED9383D77DF1222468.roa
File: 8BDFF4C8A89411ED9383D77DF1222468.roa (raw, json)
Hash identifier: hOz4I2KWK86kxE8TYoK3d5ZLiPa54d9QogTEgj2EzAo=
Subject key identifier: E0:40:C0:9C:B7:9E:5B:B8:E7:D9:CA:75:1C:B6:D7:58:A8:B6:BA:1F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09A1
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8BDFF4C8A89411ED9383D77DF1222468.roa
Signing time: Thu 09 Feb 2023 16:12:28 +0000
ROA not before: Thu 09 Feb 2023 16:12:24 +0000
ROA not after: Fri 09 Feb 2024 16:12:24 +0000
asID: 207990
IP address blocks: 161.123.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 16:12:24 2023 GMT
Not After : Feb 9 16:12:24 2024 GMT
Subject: CN=63e51b6b-f9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:92:aa:20:64:8a:55:d7:40:37:47:79:be:
e9:da:33:71:d7:09:ed:7b:38:cc:52:71:41:9a:6a:
8d:bb:42:8d:f2:70:c2:56:20:9e:67:47:80:82:1a:
b1:35:d6:a0:4f:62:45:ae:df:de:3f:b1:da:bc:8e:
91:7b:a5:7b:66:a0:56:3e:93:92:69:23:5f:24:8f:
0d:bc:0a:92:1d:d2:27:89:15:36:a0:2d:4e:77:43:
80:d5:1e:d0:fc:86:63:14:08:d2:46:ca:42:3e:86:
05:81:16:c4:5e:b5:68:66:14:89:68:a5:da:ca:3d:
b4:0f:f4:c4:f1:3b:3f:e3:42:15:b7:de:cc:4b:aa:
4a:65:f0:55:04:77:e3:ae:f1:e8:93:1a:be:53:86:
9a:be:9c:e5:26:bf:31:e4:f5:1a:ce:4b:f4:11:64:
79:39:c3:2b:7d:5c:1b:ff:10:cc:d3:c9:0f:d1:00:
9b:9d:20:7c:e0:f1:b5:ba:e8:6b:8a:4b:93:dc:76:
a0:36:49:16:f2:67:b0:7e:78:27:91:35:4d:2d:6d:
6c:85:65:2a:62:a8:06:74:55:9b:f2:9a:e2:ad:33:
8b:43:51:f4:21:a6:73:1b:14:56:b8:f0:d2:cc:52:
29:40:97:71:ac:d2:e2:00:78:c1:1e:cf:e8:49:2e:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:40:C0:9C:B7:9E:5B:B8:E7:D9:CA:75:1C:B6:D7:58:A8:B6:BA:1F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8BDFF4C8A89411ED9383D77DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:41:a9:96:54:d6:01:31:54:29:01:2a:12:07:00:68:db:5f:
69:ba:38:53:5f:62:d8:cb:4f:42:b8:3c:38:23:b8:d2:98:3e:
b9:91:86:fe:a4:30:a9:9f:da:49:85:d6:d7:18:4b:5d:39:8b:
c4:1d:cd:d9:94:68:91:31:e6:51:86:76:0d:9b:16:b4:43:86:
c9:cb:32:ee:ca:59:15:12:ba:c9:0d:5d:9e:0a:35:e5:5d:d9:
58:21:09:d7:89:58:7a:40:8a:66:74:e7:5b:ae:09:da:98:5c:
d1:b6:f4:71:ff:79:22:55:67:ff:53:f5:30:b7:25:ea:cb:94:
fd:8b:03:14:67:c1:50:1a:f6:d9:78:64:1e:ea:a6:f4:20:8b:
0b:9e:6d:3c:f0:44:b8:6a:67:6c:69:de:94:d5:23:9b:00:7d:
dc:ba:bc:f5:82:f7:54:f6:35:d1:af:b5:00:88:50:de:db:48:
db:4c:63:e9:6d:b6:31:41:e4:9f:d3:04:0f:e3:6e:2c:b4:56:
12:61:d9:60:b8:ba:b9:cb:e7:6d:66:54:14:b4:fc:5c:b5:0c:
1e:47:b2:24:26:88:2c:c5:33:45:04:3f:4b:89:37:c1:e5:f0:
01:69:84:62:79:5a:35:0d:51:56:6a:50:82:46:21:7b:2d:ad:
d5:c8:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org