Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C8E1FA087DEB11ECAAAB84AA5A40D577.roa
File: C8E1FA087DEB11ECAAAB84AA5A40D577.roa (raw, json)
Hash identifier: a4EpcCr5dsJ/VJSHhYVHw6zGUkG7LZU9mOnamcwXAWY=
Subject key identifier: 6B:61:97:79:84:29:E6:EC:32:68:A7:71:E4:01:77:30:0F:8A:56:5D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 04E6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C8E1FA087DEB11ECAAAB84AA5A40D577.roa
Signing time: Tue 25 Jan 2022 14:33:38 +0000
ROA not before: Tue 25 Jan 2022 14:33:34 +0000
ROA not after: Wed 25 Jan 2023 14:33:34 +0000
asID: 58202
IP address blocks: 161.123.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 14:33:34 2022 GMT
Not After : Jan 25 14:33:34 2023 GMT
Subject: CN=61f00a42-9263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:fd:05:69:e5:04:ac:f9:04:1a:f4:7b:d4:
61:b6:60:42:57:f0:9b:13:87:44:c3:21:a0:16:1c:
81:9e:4a:15:7e:e1:cf:5c:bc:b7:f0:a7:0d:a0:85:
42:e1:31:86:13:cf:57:0b:52:31:7e:b6:07:f3:9a:
ba:b5:94:7b:96:a2:fb:81:55:75:f5:74:09:8d:68:
c6:af:6d:98:fb:91:67:6d:31:17:58:24:36:9c:01:
cc:c5:bb:02:a0:de:79:ef:4f:02:b0:41:73:bc:e5:
aa:45:c7:18:75:15:1f:73:32:1e:24:d8:ed:2b:a3:
6c:e3:f7:4f:3d:0a:f0:25:bb:df:8b:cd:9b:16:e7:
aa:71:a5:a5:4a:f4:0d:fd:1f:dc:e5:61:ca:5e:b5:
d1:ed:3e:c4:fe:1c:b1:78:6c:e1:6b:85:e9:98:e5:
bd:2e:2a:eb:db:78:27:d3:0b:31:25:8f:4a:db:48:
35:52:59:50:e9:8a:43:9f:da:c3:63:b5:6c:9a:1a:
55:c2:c2:06:bd:26:80:cb:76:51:b0:b6:79:78:d4:
87:1d:4c:58:fd:29:3d:36:2a:59:3e:54:6c:3e:35:
0d:99:ec:b0:68:44:fe:9a:0c:23:28:2b:6d:db:f0:
bc:28:e9:89:74:af:e7:61:10:12:ce:5e:e0:5c:bf:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:97:79:84:29:E6:EC:32:68:A7:71:E4:01:77:30:0F:8A:56:5D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C8E1FA087DEB11ECAAAB84AA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.14.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0b:62:35:a5:91:0e:ae:e5:4c:be:63:62:f9:ac:12:34:14:
8b:40:8e:a5:6f:bd:8f:7b:da:ce:db:17:0c:5a:02:23:bd:5b:
83:fc:35:8c:0f:80:e1:c8:77:09:75:2b:1d:14:eb:c1:57:c5:
51:c3:a3:2d:14:74:1b:31:c2:c5:73:65:3c:9c:5d:e4:9b:14:
f9:02:af:af:09:66:7c:69:2a:92:f2:d6:04:10:2c:80:07:cd:
84:d5:ae:e3:60:c1:b0:84:ff:3a:98:17:21:ff:3f:aa:d5:49:
7c:c7:17:e0:32:21:15:64:b4:55:c9:38:34:35:bd:b5:2f:a3:
ff:e7:13:10:b0:68:84:20:66:1c:4b:36:a1:a5:9d:18:4d:41:
3d:4f:c6:e6:9f:6b:6b:3a:75:8d:2e:ca:3e:02:b6:2d:8b:f5:
03:cc:59:f1:95:c7:57:b7:87:08:dc:b3:c6:e9:e9:9a:26:c2:
fc:fd:ed:1e:8e:e1:d0:b4:cf:0d:d7:f7:b3:01:40:67:7c:01:
cd:e8:14:10:ee:10:27:cc:80:6d:f2:1b:29:a9:a1:8f:0d:0b:
2b:93:1d:69:18:19:dc:c2:db:16:2d:18:d4:59:40:68:14:eb:
e6:29:f0:c1:94:22:6f:11:6e:d6:26:93:f2:e0:b4:35:59:d1:
50:99:03:93
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNDMzMzRaFw0yMzAxMjUxNDMzMzRaMBgxFjAU
BgNVBAMMDTYxZjAwYTQyLTkyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLJP0FaeUErPkEGvR71GG2YEJX8JsTh0TDIaAWHIGeShV+4c9cvLfwpw2g
hULhMYYTz1cLUjF+tgfzmrq1lHuWovuBVXX1dAmNaMavbZj7kWdtMRdYJDacAczF
uwKg3nnvTwKwQXO85apFxxh1FR9zMh4k2O0ro2zj9089CvAlu9+LzZsW56pxpaVK
9A39H9zlYcpetdHtPsT+HLF4bOFrhemY5b0uKuvbeCfTCzElj0rbSDVSWVDpikOf
2sNjtWyaGlXCwga9JoDLdlGwtnl41IcdTFj9KT02Klk+VGw+NQ2Z7LBoRP6aDCMo
K23b8Lwo6Yl0r+dhEBLOXuBcv7utAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUa2GX
eYQp5uwyaKdx5AF3MA+KVl0wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0M4RTFGQTA4N0RFQjExRUNBQUFCODRBQTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChew4wDQYJKoZIhvcNAQELBQAD
ggEBAAYLYjWlkQ6u5Uy+Y2L5rBI0FItAjqVvvY972s7bFwxaAiO9W4P8NYwPgOHI
dwl1Kx0U68FXxVHDoy0UdBsxwsVzZTycXeSbFPkCr68JZnxpKpLy1gQQLIAHzYTV
ruNgwbCE/zqYFyH/P6rVSXzHF+AyIRVktFXJODQ1vbUvo//nExCwaIQgZhxLNqGl
nRhNQT1Pxuafa2s6dY0uyj4Cti2L9QPMWfGVx1e3hwjcs8bp6Zomwvz97R6O4dC0
zw3X97MBQGd8Ac3oFBDuECfMgG3yGympoY8NCyuTHWkYGdzC2xYtGNRZQGgU6+Yp
8MGUIm8RbtYmk/LgtDVZ0VCZA5M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org