Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CC467C76C89C11ED9FD771E6F1222468.roa
File: CC467C76C89C11ED9FD771E6F1222468.roa (raw, json)
Hash identifier: k8LoTkK3Oe/OlfYUeTcwUA+Hs68xqDieLa2+DDgEETg=
Subject key identifier: 85:39:37:C2:C8:98:8A:1D:2D:AC:01:12:D5:5E:2B:D7:EC:AB:C7:C6
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A3F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CC467C76C89C11ED9FD771E6F1222468.roa
Signing time: Wed 22 Mar 2023 10:32:09 +0000
ROA not before: Wed 22 Mar 2023 10:32:05 +0000
ROA not after: Fri 22 Mar 2024 10:32:05 +0000
asID: 207990
IP address blocks: 161.123.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 22 10:32:05 2023 GMT
Not After : Mar 22 10:32:05 2024 GMT
Subject: CN=641ad929-cd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:9b:0c:ec:4c:96:31:b1:c8:23:26:3e:77:
95:40:79:fe:a2:9b:9e:a6:71:c7:b3:64:93:e0:be:
b4:21:ed:ee:34:a7:c1:2e:61:9e:1d:48:20:52:a5:
a0:11:f4:c7:4a:d8:9f:a3:5b:67:1a:5e:27:ea:3a:
54:b3:42:71:38:84:1a:a3:e2:a1:b6:e9:ff:68:e0:
81:c4:05:f7:05:ba:f4:d5:a5:a9:67:bb:67:f2:e8:
40:71:58:32:a3:0a:e1:4d:c2:f0:35:b4:ff:36:11:
7b:49:bd:e4:97:92:dc:da:e8:7f:0d:77:32:1f:1d:
63:65:dc:32:d6:2d:61:f9:c3:82:df:16:42:0c:88:
a0:d0:35:08:03:3d:5a:d8:b1:f1:c8:21:cc:5b:4e:
38:8c:5d:64:7f:c6:fd:85:87:6a:e7:e3:1e:49:1c:
22:85:3d:3b:2b:d7:27:77:8d:aa:7e:4e:74:59:f6:
f2:fd:c1:8e:04:68:2b:95:d2:5c:c3:8f:30:8b:3e:
22:a1:8b:e1:2e:37:b5:ac:6a:ab:3c:93:88:4a:3d:
3c:1d:08:43:63:2c:52:79:3d:32:f8:ed:77:af:80:
5d:ee:24:34:57:01:9b:dd:6b:99:7f:52:9a:6b:11:
1a:a9:f1:46:74:d5:61:a7:1b:e6:b0:2e:a2:9e:d0:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:37:C2:C8:98:8A:1D:2D:AC:01:12:D5:5E:2B:D7:EC:AB:C7:C6
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CC467C76C89C11ED9FD771E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.80.0/22
Signature Algorithm: sha256WithRSAEncryption
66:20:b4:b5:8e:5c:73:36:39:62:95:ef:15:f8:2d:26:e2:7a:
99:49:66:05:f9:b0:d3:f8:af:1e:58:f9:85:fb:49:42:38:fe:
89:84:be:dc:a5:eb:2f:a9:22:52:ea:64:82:02:32:4f:3f:ba:
cb:f2:2e:f8:0d:6a:0f:44:3a:cf:4f:33:8f:32:63:c2:e6:b5:
8e:5a:c2:83:01:80:34:8b:9d:e7:32:1a:9f:73:b3:a8:cf:d4:
49:dc:85:2d:f6:9a:80:1e:52:7c:fb:ca:ef:8c:00:cc:6f:36:
a0:33:fd:96:25:3c:35:6f:55:62:0a:ac:dc:f3:7d:7e:82:79:
f6:e4:a2:f4:a7:98:71:52:98:e6:24:7e:f6:34:69:0a:fc:fc:
94:e0:04:ae:f3:6c:6a:67:cb:c1:c5:3a:b5:48:5a:aa:9b:ab:
3f:40:21:6b:32:54:75:3b:23:7f:ba:c8:62:cd:8b:87:4e:29:
41:3b:a4:8f:bd:9e:ae:2c:3e:e4:9f:20:21:bc:2f:7d:1b:74:
2e:3e:1f:3d:c9:21:a3:2a:fb:d0:28:ef:84:f5:e2:51:57:f9:
04:e6:4f:34:6c:b1:1a:fe:01:91:97:6b:52:89:6c:c4:50:55:
cd:9a:7e:c9:5a:f5:57:27:6c:7d:98:fa:ad:84:bd:12:52:0d:
e9:3f:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org