Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CEC33CF62FB711EDAF2EB97EF1222468.roa
File: CEC33CF62FB711EDAF2EB97EF1222468.roa (raw, json)
Hash identifier: bKO0M6V6HNWlRziaxHZSIXely9RSccYjhPC/p/wXJkw=
Subject key identifier: 23:1C:7F:73:67:A6:D6:EF:6A:A6:29:24:26:B8:72:DC:2B:23:65:09
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0812
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CEC33CF62FB711EDAF2EB97EF1222468.roa
Signing time: Thu 08 Sep 2022 20:50:01 +0000
ROA not before: Thu 08 Sep 2022 20:49:58 +0000
ROA not after: Fri 08 Sep 2023 20:49:58 +0000
asID: 205431
IP address blocks: 161.123.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 8 20:49:58 2022 GMT
Not After : Sep 8 20:49:58 2023 GMT
Subject: CN=631a5579-4d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:95:74:31:27:9e:7d:66:6e:35:23:1f:92:
75:53:82:80:b1:64:04:e9:f2:3a:a2:a5:83:08:bf:
28:53:73:3b:d6:0b:e2:ca:ff:7b:3d:22:62:dc:37:
53:d5:54:81:5e:3b:ab:f1:be:3b:b8:7b:15:0a:cd:
23:d9:db:d1:a3:5c:eb:29:d8:a3:11:6b:8f:7b:fb:
0c:3f:cc:aa:5e:86:c6:85:de:94:f1:7d:1f:dc:cb:
80:c5:fd:eb:b3:f5:a8:5c:37:8e:15:51:88:3a:8e:
c5:04:ba:d1:8a:1f:19:db:d4:de:0a:a9:43:e7:c5:
1b:27:b5:91:d9:8b:3d:c1:9f:2d:df:ab:a6:81:43:
1d:7a:9f:55:43:3a:b4:e4:1b:b4:e7:11:b1:3a:3d:
d5:57:83:5e:bd:5b:ed:c7:24:d0:84:72:8b:61:ba:
93:4a:33:4e:cd:da:85:78:f2:74:25:b1:73:04:b8:
0f:41:95:fa:60:30:8b:eb:f6:95:3c:82:2b:a7:6c:
da:f9:17:81:8d:e5:d4:0c:32:b5:74:4d:fa:55:84:
c3:ec:45:45:19:6b:a7:57:45:7a:a1:6b:3f:bc:eb:
0a:18:86:ef:89:a5:f4:ee:65:27:01:f0:c3:54:83:
76:ae:06:10:76:51:47:cd:76:68:16:a7:0f:8e:8e:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:7F:73:67:A6:D6:EF:6A:A6:29:24:26:B8:72:DC:2B:23:65:09
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CEC33CF62FB711EDAF2EB97EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.69.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f7:0d:dc:b1:87:d2:20:3c:fc:59:2e:65:66:13:52:a5:88:
7d:4e:62:5a:24:3c:3e:bc:13:9d:78:9f:3d:22:ea:20:ef:62:
65:0a:e8:62:94:c4:96:8d:3c:62:a5:05:9b:88:f0:2c:ef:4c:
24:4a:1a:7c:66:2c:6a:f9:f2:14:e0:25:cd:68:c5:21:85:a1:
a4:c6:20:84:3c:a4:ba:df:ad:a0:a3:94:d9:a5:77:50:58:f7:
d2:b9:29:ac:01:f0:02:9c:70:20:75:d8:02:f7:d7:87:d3:7d:
ba:df:b9:64:60:0d:fe:08:49:c6:63:64:43:34:98:6f:0a:54:
f9:5d:f8:85:40:75:a3:95:5d:50:69:af:a7:bf:a9:49:3e:d3:
c8:36:f7:88:50:06:a3:d0:d9:cb:12:cb:82:c1:d0:a5:47:c0:
95:9b:3e:a4:a7:f4:57:7d:90:7c:44:6d:71:c2:57:e6:78:b0:
26:c5:17:a0:8d:4e:fd:a0:f2:2f:1b:8a:e4:7b:80:50:e2:a5:
10:00:f4:f8:87:68:0d:b1:88:c3:ff:51:53:96:0b:18:6c:95:
00:cf:14:33:26:9c:d7:6a:5a:f9:76:26:67:e2:c1:c4:9d:33:
15:51:a2:1c:9a:d3:2f:80:03:e8:61:9b:65:d3:f6:73:d4:c7:
24:44:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org