Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1F473909CE511EDB5C367CCF1222468.roa
File: D1F473909CE511EDB5C367CCF1222468.roa (raw, json)
Hash identifier: LHAKzRrRWY1fiSs8OKVGGMjmHtj/XQkkqJCI8tib8FI=
Subject key identifier: 2A:46:58:0F:0E:7F:CC:4A:2A:5D:41:84:A5:7D:B0:9C:40:0E:2E:A0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 097E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1F473909CE511EDB5C367CCF1222468.roa
Signing time: Wed 25 Jan 2023 19:24:00 +0000
ROA not before: Wed 25 Jan 2023 19:23:56 +0000
ROA not after: Fri 31 Mar 2023 19:23:56 +0000
asID: 205431
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2430 (0x97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 19:23:56 2023 GMT
Not After : Mar 31 19:23:56 2023 GMT
Subject: CN=63d181d0-590f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bd:c3:9c:65:18:67:3f:e7:7c:37:20:df:48:
7c:89:3f:b5:93:e1:70:8c:4d:91:8c:95:59:5c:36:
48:61:e9:5e:63:af:23:a3:84:ea:33:28:fa:a3:e8:
29:f5:45:38:5a:5d:db:64:f1:b2:28:71:e8:ca:10:
bd:fc:2b:2d:35:ed:98:af:b5:f9:fc:05:d6:5e:0c:
1b:85:9d:6f:25:29:ab:1c:f0:74:ef:9e:07:ca:e5:
cb:57:f1:00:28:d9:e4:24:07:bf:1f:f2:fc:13:af:
99:28:59:0a:74:88:0a:e1:f2:dd:d0:e2:04:08:7c:
9c:d0:2f:1b:96:dd:e7:1e:89:2b:2c:42:d5:53:b6:
06:ca:54:42:17:f6:b8:01:75:8a:eb:e8:0f:54:26:
a8:b2:d3:a4:49:06:91:9e:c6:94:5c:ae:fc:f8:3a:
99:fc:9a:75:5d:5a:bf:3c:a0:ac:6a:08:ea:fe:72:
34:9f:54:be:46:09:79:08:fc:c4:de:50:2e:a5:4b:
a8:31:f0:b4:00:9a:90:0b:7a:08:5d:49:2e:ca:53:
0e:55:c4:07:a4:82:bc:cb:7d:ac:dc:ba:10:67:83:
0f:77:3b:84:d1:68:6d:93:59:54:b0:3c:9b:7c:d8:
8e:b0:a9:08:97:e5:ef:cb:4f:fd:18:c6:7c:4b:cc:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:58:0F:0E:7F:CC:4A:2A:5D:41:84:A5:7D:B0:9C:40:0E:2E:A0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D1F473909CE511EDB5C367CCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fc:e4:e5:49:41:4b:53:1b:fb:d9:fb:af:1c:ed:46:1f:bd:
c4:e3:ce:d3:41:56:e1:5f:31:55:22:83:fb:60:63:bd:6e:45:
4e:65:5c:f7:8c:04:92:bd:ac:aa:cc:a8:74:98:ab:02:ca:1a:
2f:0d:a1:15:5a:e4:93:a4:79:bd:dc:31:b5:87:2b:75:3e:26:
6c:cd:1b:0b:89:af:6a:e1:28:73:60:0d:ae:b2:03:3b:28:92:
85:76:59:f6:ad:18:d5:df:29:73:15:e8:d4:ec:d3:f0:57:7c:
77:0c:48:88:f2:d6:13:44:a4:a6:cf:13:e0:08:48:27:0b:79:
ba:89:aa:07:83:d2:1e:32:54:be:56:2e:28:e9:aa:34:22:3b:
64:27:96:83:d7:c8:bb:86:95:e0:f9:f5:03:c8:d9:53:56:bd:
0c:f8:19:4d:c2:26:28:13:df:b2:34:21:b8:80:96:75:fe:36:
1d:57:d4:e5:33:b9:7f:d4:a5:95:41:11:49:a9:92:df:5c:e4:
3f:5f:8a:ef:b2:a5:d0:4e:60:a5:dd:f0:6d:ad:b1:11:c4:45:
88:33:9c:63:08:c5:eb:f9:54:3b:79:fb:46:f1:41:78:8c:25:
77:43:7f:1c:37:3f:20:0e:b8:51:1b:c2:0c:43:1b:77:fb:1e:
38:4f:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org