Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B957820A9CE511ED9C092ACCF1222468.roa
File: B957820A9CE511ED9C092ACCF1222468.roa (raw, json)
Hash identifier: LnlZv0QqmhqE9+81Z35iSI6c0VleHflcOg4zddiddRI=
Subject key identifier: 70:91:9B:A9:47:A6:A1:1A:DC:80:79:1D:C2:A9:EF:EA:A8:AD:21:9B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 097C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B957820A9CE511ED9C092ACCF1222468.roa
Signing time: Wed 25 Jan 2023 19:23:19 +0000
ROA not before: Wed 25 Jan 2023 19:23:15 +0000
ROA not after: Fri 31 Mar 2023 19:23:15 +0000
asID: 205431
IP address blocks: 161.123.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 19:23:15 2023 GMT
Not After : Mar 31 19:23:15 2023 GMT
Subject: CN=63d181a7-a0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:f4:4f:07:52:be:b8:37:ed:e3:0f:6b:5b:
de:6f:72:98:36:5f:c3:67:89:ec:db:77:9f:f2:42:
09:f0:44:d2:fe:42:a1:a8:a1:c5:ef:eb:74:1d:0a:
08:6f:4a:1f:3f:c3:a4:40:a9:20:ef:28:53:85:5b:
92:c7:ad:6d:ea:66:d3:9b:a5:79:61:56:b4:01:7b:
b8:6c:40:96:36:0f:e5:fb:b8:03:eb:6b:3a:20:ca:
6f:e0:d4:cc:ee:ad:de:bf:fa:53:f8:c7:8f:bc:99:
3f:2d:93:3f:dc:df:f6:cf:fb:3f:e1:22:2d:5d:82:
7d:bd:3b:66:17:c9:5a:c0:ff:00:c4:33:34:67:9d:
da:31:5d:6a:06:5b:46:39:f0:ee:1f:7c:cf:2d:d2:
03:c0:4e:c1:a2:26:5d:07:f2:e5:44:d0:8c:17:77:
a9:a1:63:dc:4a:33:a6:b1:a9:54:4c:cc:bd:40:b4:
bb:d2:e1:10:ab:df:46:4f:a3:c5:b5:bd:26:83:7a:
ac:ad:bb:91:00:c5:ae:0b:81:1f:44:24:df:18:0c:
80:db:d2:06:73:86:c0:f6:c1:e2:6a:ec:26:ba:fb:
e3:bc:4a:3d:3a:ce:7c:63:64:b3:34:12:55:ab:88:
e2:93:89:e0:5c:ac:cf:46:ec:e8:73:8b:49:42:94:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:9B:A9:47:A6:A1:1A:DC:80:79:1D:C2:A9:EF:EA:A8:AD:21:9B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B957820A9CE511ED9C092ACCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:37:9c:eb:d0:0e:8d:4c:98:58:6e:b4:2f:e3:68:57:74:ac:
2f:ff:24:14:8f:f6:e3:fa:45:f0:f3:41:64:03:c0:70:06:29:
4e:3e:77:fa:ca:0b:e6:d6:08:da:11:3f:ad:01:9b:a3:4b:5b:
50:5a:4b:d8:97:b3:24:27:22:50:f9:cd:50:0f:a4:78:76:dc:
55:32:5d:72:b5:a2:20:17:af:45:e8:c7:4e:ad:54:f7:cc:75:
71:a6:7f:c1:89:7f:16:3f:01:e7:ff:88:4d:82:f9:f8:a4:b5:
49:49:9c:cc:43:18:a5:6d:dc:c3:1b:b4:d9:aa:e8:05:aa:3a:
b8:ae:16:2a:ff:9d:3f:ce:08:c5:19:72:8c:ec:da:fd:5f:c0:
84:a9:57:c6:ce:0d:d6:f8:af:16:2d:b1:a6:d7:eb:82:85:5d:
62:cd:e0:1d:82:49:f3:75:cb:a2:fd:09:9c:a8:3d:11:dd:5c:
89:a8:f0:83:78:d1:cb:77:d5:a3:a1:03:b0:6f:d4:35:86:b8:
62:84:fa:68:45:56:2e:cc:a7:97:66:47:e6:b9:a8:64:3e:a7:
df:65:6b:d0:f1:0c:13:f4:76:a5:2e:8e:2b:bf:68:14:e4:71:
19:1f:2b:80:2b:f1:cc:0d:c4:bb:c7:c7:d5:30:2d:4f:15:c6:
16:4d:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-ams.rpki-client.org