Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C6C20E22B99E11EC919A9A855A40D577.roa
File: C6C20E22B99E11EC919A9A855A40D577.roa (raw, json)
Hash identifier: jCyhFDXWK6bgMhZkku0yw31g5kKXWozb1aQsxeVZRnc=
Subject key identifier: 37:9A:56:96:53:16:8D:37:CB:27:26:24:39:13:F3:6B:6E:9D:C8:D3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 065C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C6C20E22B99E11EC919A9A855A40D577.roa
Signing time: Mon 11 Apr 2022 13:53:33 +0000
ROA not before: Mon 11 Apr 2022 13:53:30 +0000
ROA not after: Tue 11 Apr 2023 13:53:30 +0000
asID: 400377
IP address blocks: 161.123.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 11 13:53:30 2022 GMT
Not After : Apr 11 13:53:30 2023 GMT
Subject: CN=625432dd-21f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:fa:db:52:4a:c2:dd:3b:7e:9f:6a:d7:d3:
e6:f9:27:de:dc:e3:95:c6:44:47:65:b1:11:13:d6:
e6:af:99:46:91:ca:0c:89:52:1f:a2:02:50:6a:73:
77:0a:57:d1:d0:db:91:a0:30:77:3e:b1:9f:11:00:
bc:ad:dc:1a:6f:a1:bb:39:26:34:26:62:d9:3a:3e:
0c:d5:d2:91:06:22:42:d9:9f:ba:d7:39:97:59:dc:
75:e5:c9:8a:15:5c:a1:b7:fc:b9:29:81:ae:07:c1:
87:51:98:b7:7b:0b:04:46:80:e7:8c:e6:ce:d7:dd:
0f:d4:18:51:fb:b7:b8:aa:5b:7c:4f:fc:d9:fd:28:
9f:fa:69:6c:7e:d8:f3:23:b0:90:57:5e:b2:24:57:
2b:85:0e:98:b4:61:dd:03:b4:61:5d:8e:5b:4b:74:
60:10:3c:45:4c:a1:3c:58:3f:71:ab:64:bf:24:6c:
26:ef:72:cb:27:e4:80:72:8b:59:73:fa:4d:1e:70:
51:14:77:95:31:af:61:11:50:d2:cd:b7:94:45:28:
eb:30:4f:40:eb:87:87:f4:2b:99:5b:ab:62:90:96:
1b:52:fc:54:45:cf:f4:8d:9e:b6:47:f5:8a:82:42:
2c:01:14:6f:ef:fd:a2:a7:d8:3e:0a:a0:ec:f3:b7:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:56:96:53:16:8D:37:CB:27:26:24:39:13:F3:6B:6E:9D:C8:D3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C6C20E22B99E11EC919A9A855A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:76:cf:a7:45:eb:0a:10:1e:c7:fa:00:cf:e4:0c:3d:3b:62:
8c:3b:ca:b8:db:f3:01:bb:b7:7f:6b:8b:f2:ad:98:77:7c:f9:
b1:c4:51:19:55:07:a6:42:35:2e:0b:77:79:71:37:f2:22:d4:
23:e6:65:75:a9:c2:20:0d:11:a9:87:45:05:8e:ac:08:78:17:
94:ff:26:14:81:32:7a:2c:25:b7:a1:81:f5:83:96:70:a0:aa:
94:29:c5:c9:ef:82:88:67:aa:d5:6d:5b:65:ed:f9:25:66:05:
1b:53:82:90:f6:de:9d:92:45:25:a0:2e:eb:59:b3:14:34:20:
73:70:1a:f8:2c:69:fb:ef:f3:e7:10:fb:96:ca:5d:3c:8b:e6:
41:c3:f6:31:7b:4f:c9:b7:42:18:aa:ce:63:5b:85:d2:04:6a:
0e:af:07:37:52:ef:eb:df:47:9d:5f:ea:0d:bb:48:d7:cc:82:
de:c5:07:9a:68:00:39:98:3a:08:1c:7d:63:46:e5:7f:7b:25:
5a:f7:01:2b:c1:e3:aa:6f:3c:33:58:54:d8:ce:52:e4:50:fe:
4e:65:fb:e4:47:4a:a7:d8:10:79:f3:4e:b6:72:bb:f2:12:6d:
bf:40:ff:50:9e:63:46:f4:64:01:ed:2a:c1:ea:9d:77:08:4b:
67:ea:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org