Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A5A39F52C41111ED896397ABF1222468.roa
File: A5A39F52C41111ED896397ABF1222468.roa (raw, json)
Hash identifier: YdWiQIZcAUKkK4/7hqsolJ065NrAKTBRyXb+ppzS9Ew=
Subject key identifier: 40:BF:37:76:4A:BB:1D:F0:AE:FB:0A:87:91:01:AD:D0:A1:CA:2D:C2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A29
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A5A39F52C41111ED896397ABF1222468.roa
Signing time: Thu 16 Mar 2023 15:45:59 +0000
ROA not before: Thu 16 Mar 2023 15:45:55 +0000
ROA not after: Sat 16 Mar 2024 15:45:55 +0000
asID: 207990
IP address blocks: 161.123.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2601 (0xa29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 16 15:45:55 2023 GMT
Not After : Mar 16 15:45:55 2024 GMT
Subject: CN=641339b7-b06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bd:ad:a9:a0:eb:81:2d:f3:fb:7a:5b:0f:f3:
9d:30:60:34:85:4a:f1:e7:40:95:46:9f:45:b6:cf:
9a:9a:e8:49:fd:bc:12:15:fb:7c:43:30:ec:48:b8:
7d:11:d8:b5:6c:a2:b4:a9:a5:37:d0:85:8c:02:13:
82:0a:2a:f1:9e:0e:86:57:6e:07:21:ca:db:1f:0d:
26:7f:0c:e4:4a:eb:ee:84:e9:40:db:44:52:a1:a3:
2c:58:7a:75:b1:b3:d5:f9:b8:24:41:22:58:b1:ac:
4e:cb:55:2b:95:51:f4:1a:e7:63:de:7e:92:2c:e2:
a8:a8:a2:44:e7:74:bd:f2:f6:f3:2f:72:58:89:39:
4d:e2:65:1d:12:f8:59:42:32:a4:31:9e:48:52:2c:
81:4b:af:89:17:e1:48:d4:3b:40:90:f2:8d:41:53:
a8:84:36:df:be:d7:4d:9b:b7:43:0f:9d:ff:67:fd:
32:78:01:65:8a:3b:e8:1f:73:26:5d:cb:77:7d:be:
dc:b4:c3:c2:15:c2:17:2e:96:a1:72:ae:ba:90:26:
25:96:ea:e6:6b:d4:cd:91:d2:2c:5f:48:97:46:45:
4b:0f:08:9d:a3:f4:62:77:cb:07:f1:49:4d:5b:25:
a2:ce:2f:a0:48:44:0d:67:19:74:34:3c:57:fb:8b:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:37:76:4A:BB:1D:F0:AE:FB:0A:87:91:01:AD:D0:A1:CA:2D:C2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A5A39F52C41111ED896397ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:c7:53:9d:1c:eb:9d:c3:cc:47:ec:55:71:80:a9:38:08:8f:
cd:62:45:a7:d9:7c:4c:de:c6:20:f2:a5:31:09:e0:51:19:29:
d9:59:19:bb:9a:d3:8c:a9:13:3e:e7:29:af:39:d2:49:3c:05:
2a:e1:9e:e7:b3:53:7f:d9:95:59:8e:11:b7:e2:d3:ab:b4:84:
2c:de:b0:a9:4f:15:49:17:54:82:11:b0:0c:60:12:48:45:b4:
ff:89:97:92:a2:5b:6f:4a:73:53:20:99:ed:34:6f:4b:ed:70:
bf:51:e4:21:31:5a:24:67:e6:90:76:fa:df:fd:aa:bb:05:02:
48:91:f4:ee:fa:43:98:20:49:39:8f:cb:e5:18:3e:2a:5a:2b:
57:66:9a:3d:41:34:7c:11:af:e1:4b:6e:87:48:3d:2e:c6:09:
3f:4a:dd:60:78:2b:66:4b:b3:bd:3f:da:58:ea:7b:6f:8a:23:
dd:b4:08:f0:63:5e:bc:d2:e3:b2:78:bd:67:f2:5b:1e:34:bf:
91:57:c2:55:b3:71:5d:d6:20:e0:78:83:cf:4e:10:32:2b:9e:
4a:30:79:03:e2:18:09:32:3a:c5:e5:3b:47:a5:5e:d5:35:0f:
9e:a4:bb:9b:d9:03:ee:61:8e:98:83:26:b8:49:ad:bc:a4:0c:
94:36:cd:0f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCikwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAzMTYxNTQ1NTVaFw0yNDAzMTYxNTQ1NTVaMBgxFjAU
BgNVBAMMDTY0MTMzOWI3LWIwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4va2poOuBLfP7elsP850wYDSFSvHnQJVGn0W2z5qa6En9vBIV+3xDMOxI
uH0R2LVsorSppTfQhYwCE4IKKvGeDoZXbgchytsfDSZ/DORK6+6E6UDbRFKhoyxY
enWxs9X5uCRBIlixrE7LVSuVUfQa52PefpIs4qiookTndL3y9vMvcliJOU3iZR0S
+FlCMqQxnkhSLIFLr4kX4UjUO0CQ8o1BU6iENt++102bt0MPnf9n/TJ4AWWKO+gf
cyZdy3d9vty0w8IVwhculqFyrrqQJiWW6uZr1M2R0ixfSJdGRUsPCJ2j9GJ3ywfx
SU1bJaLOL6BIRA1nGXQ0PFf7i+1LAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUQL83
dkq7HfCu+wqHkQGt0KHKLcIwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0E1QTM5RjUyQzQxMTExRUQ4OTYzOTdBQkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhezQwDQYJKoZIhvcNAQELBQAD
ggEBAE3HU50c653DzEfsVXGAqTgIj81iRafZfEzexiDypTEJ4FEZKdlZGbua04yp
Ez7nKa850kk8BSrhnuezU3/ZlVmOEbfi06u0hCzesKlPFUkXVIIRsAxgEkhFtP+J
l5KiW29Kc1Mgme00b0vtcL9R5CExWiRn5pB2+t/9qrsFAkiR9O76Q5ggSTmPy+UY
PipaK1dmmj1BNHwRr+FLbodIPS7GCT9K3WB4K2ZLs70/2ljqe2+KI920CPBjXrzS
47J4vWfyWx40v5FXwlWzcV3WIOB4g89OEDIrnkoweQPiGAkyOsXlO0elXtU1D56k
u5vZA+5hjpiDJrhJrbykDJQ2zQ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org