Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C7F47408EB3C11ED921F16544AD9E6FC.roa
File: C7F47408EB3C11ED921F16544AD9E6FC.roa (raw, json)
Hash identifier: ZZkmSLP2qqd3yyo3QvZ1OgEmDRmRHuGmd9W5J/rTQ2Y=
Subject key identifier: 92:27:2E:34:EA:FC:E7:C3:78:94:91:61:55:02:2D:8A:19:77:4A:73
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AA8
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C7F47408EB3C11ED921F16544AD9E6FC.roa
Signing time: Fri 05 May 2023 12:03:00 +0000
ROA not before: Fri 05 May 2023 12:02:57 +0000
ROA not after: Sun 05 May 2024 12:02:57 +0000
asID: 205431
IP address blocks: 161.123.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728 (0xaa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 12:02:57 2023 GMT
Not After : May 5 12:02:57 2024 GMT
Subject: CN=6454f074-9f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:63:20:77:1d:b3:b1:9b:7f:58:1a:72:d4:
b9:52:0a:58:96:bb:76:b1:d4:e9:0c:cf:31:0d:dd:
76:69:6b:27:d0:a1:98:13:50:d2:87:3b:03:a4:cd:
1b:9f:11:f5:e8:00:f9:4c:61:8f:56:f4:35:1c:41:
88:cb:a6:8e:2d:a7:9e:2e:73:b0:39:c5:55:f1:7e:
94:93:11:02:18:60:09:b5:ac:ba:68:a1:96:6a:b8:
e4:85:5c:8f:ea:9c:e6:75:70:03:8c:02:c8:c8:18:
a1:eb:60:28:df:a0:8c:b0:cd:b7:f1:9c:44:d2:89:
85:55:f9:07:ed:20:84:c6:26:39:33:ed:6b:95:a4:
5c:35:7b:30:04:7a:b0:24:be:04:d9:e8:b8:ed:5f:
28:3d:20:98:71:c3:99:74:a2:99:8e:89:de:6f:d4:
c8:9d:79:11:b7:fe:db:5e:b4:35:2b:05:53:24:15:
cd:6c:d6:c9:c2:53:ae:d9:a7:31:97:31:9f:52:cc:
57:3d:5c:3e:13:42:a5:00:a8:9f:91:8c:6c:58:43:
26:12:45:d9:0a:19:f0:7e:91:51:56:dc:6d:f5:1e:
13:ff:ef:ec:1f:82:48:0c:f7:1b:bb:02:a8:ed:4f:
23:db:76:9f:66:97:b6:36:d6:57:39:16:4a:63:db:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:2E:34:EA:FC:E7:C3:78:94:91:61:55:02:2D:8A:19:77:4A:73
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C7F47408EB3C11ED921F16544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.150.0/24
Signature Algorithm: sha256WithRSAEncryption
09:88:36:62:cd:a9:f2:3e:b4:02:8a:12:4d:94:27:ab:50:2d:
64:3d:b4:36:08:95:80:5c:c7:71:34:91:1c:99:f0:9b:ff:a4:
0a:52:2f:42:fe:c0:14:4f:46:a5:71:e2:01:75:96:b5:e7:09:
ad:d2:5d:0c:6e:ab:2c:e9:04:c1:e4:e3:97:51:62:14:99:97:
f7:1e:53:bd:e0:6c:c6:32:17:74:23:f4:44:ee:08:6c:cb:40:
cb:d7:cb:ab:88:b0:4e:62:ea:6b:3f:91:9e:b6:e7:71:ed:5b:
60:aa:40:53:74:b7:73:c4:ef:42:1d:eb:0f:34:c3:66:e9:f6:
b7:5c:b2:34:03:43:24:bb:ab:09:81:73:5b:91:14:de:b6:d8:
f5:32:62:7e:70:e4:89:75:a0:94:4c:77:e7:b4:40:ad:94:ec:
d2:c1:c7:6b:8f:a3:a8:4e:f8:d1:e9:d6:bf:71:aa:f7:d4:85:
6e:4f:e6:ab:37:13:9a:5c:61:fe:88:88:01:c7:75:0d:2d:b6:
48:ce:ef:56:0a:aa:b7:39:3e:b6:ea:e5:7d:9c:72:8c:8d:e4:
ac:ee:72:42:36:10:ed:ce:51:13:5d:4e:d0:cc:f2:1d:88:10:
e9:c3:5b:c4:3b:e4:3c:52:d4:49:4b:09:43:01:17:d8:e1:75:
22:8d:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org