Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/98AD9936630211EC8B8C79C95A40D577.roa
File: 98AD9936630211EC8B8C79C95A40D577.roa (raw, json)
Hash identifier: iY17rAF2Ac8s07UaNqfEolTaguN6YnMAka5D+ye6is8=
Subject key identifier: 81:34:F4:43:41:75:BB:3C:2F:BC:70:0C:8D:C1:EA:E9:57:6B:6C:28
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0405
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/98AD9936630211EC8B8C79C95A40D577.roa
Signing time: Wed 22 Dec 2021 08:38:54 +0000
ROA not before: Wed 22 Dec 2021 08:38:51 +0000
ROA not after: Thu 22 Dec 2022 08:38:51 +0000
asID: 60458
IP address blocks: 161.123.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 22 08:38:51 2021 GMT
Not After : Dec 22 08:38:51 2022 GMT
Subject: CN=61c2e41e-0d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:62:12:64:de:0e:50:ac:ea:b0:aa:ce:65:
a4:bb:3b:7b:b7:23:9c:f2:03:00:c2:08:18:83:c4:
26:a3:7f:6e:95:92:cd:5d:d2:0a:c4:44:bb:d9:d2:
36:fd:a8:4d:53:8a:f1:b5:c5:84:2e:88:d5:6f:45:
33:0d:e0:83:72:ba:83:68:80:95:82:71:8d:1a:47:
40:8d:a4:b5:80:ff:dd:c3:7f:ee:bb:96:f8:e8:9e:
ef:83:ab:68:59:20:ab:eb:ad:98:a5:42:a4:57:0b:
ac:58:d9:00:41:c8:4d:c8:32:6e:fe:2a:e0:44:3e:
90:f4:79:4b:26:db:bb:4b:26:d9:98:6a:22:cb:f4:
d5:ff:b1:ef:7a:76:60:65:9f:1c:4b:03:69:74:37:
52:bc:e3:37:d2:b1:4b:a0:5c:57:41:23:83:60:33:
97:62:d1:10:e0:80:14:1f:a8:5d:15:8f:25:df:94:
9f:07:22:a3:fc:d7:5c:e9:4e:32:72:fe:dd:2d:57:
b7:8a:39:13:6f:a7:5d:0f:f0:d3:df:16:dc:4b:32:
a3:8f:34:64:1e:75:2f:5a:4e:15:b7:e9:8c:a8:6f:
8b:38:57:72:cb:c7:a9:f3:aa:9d:60:df:1e:65:36:
d5:69:02:dd:fa:8f:87:cf:a3:04:3f:97:59:9c:0a:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:F4:43:41:75:BB:3C:2F:BC:70:0C:8D:C1:EA:E9:57:6B:6C:28
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/98AD9936630211EC8B8C79C95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.160.0/24
Signature Algorithm: sha256WithRSAEncryption
01:86:b1:9b:ca:6b:6e:3e:d2:40:b2:db:5c:22:01:55:06:64:
3c:61:31:0e:82:3c:04:c5:4d:5c:3f:61:bb:2e:aa:a5:ad:04:
0b:35:73:63:4b:f6:c4:be:cb:d7:c4:5d:d8:6e:75:ba:6a:76:
a5:22:eb:1f:a3:f2:f2:22:73:35:e1:c2:98:7f:fe:46:24:57:
bf:6b:97:dc:09:09:99:68:c8:99:4f:3c:9d:0c:22:34:f8:85:
a0:e7:d0:9a:dd:8a:69:24:64:df:cb:b5:6f:62:a9:64:6f:47:
6f:1e:b9:51:2d:98:a8:c1:0f:19:1f:f3:c2:b0:85:b7:1e:d9:
74:91:28:dd:78:cd:4a:37:a2:c2:76:de:37:b8:3b:06:0b:51:
71:80:f8:78:7f:8a:40:c8:70:16:aa:db:c8:4c:de:98:b9:a6:
e5:2f:56:97:e2:cf:15:da:23:04:70:9b:e5:b3:90:e6:fc:1a:
06:bb:c6:b8:f2:2e:9a:b1:d7:21:18:33:26:3f:36:72:20:1a:
2a:ab:0c:9f:8a:91:14:89:73:b5:d6:c3:8e:c8:8e:80:d2:46:
35:cf:17:ef:52:57:90:13:80:e0:64:3c:f4:00:95:77:87:38:
bd:14:37:3d:75:5b:32:4d:45:fc:49:f3:21:3f:8e:71:fe:d2:
fe:38:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org