Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D20F1B22919711ED83B78DD4F1222468.roa
File: D20F1B22919711ED83B78DD4F1222468.roa (raw, json)
Hash identifier: OEob/J6CoJgVdo/A9NalxdberUJJWb+ryAUlrAo56sY=
Subject key identifier: 3A:2E:48:3B:26:4C:0E:29:37:56:2D:32:F9:3F:1C:1F:D8:0E:55:7E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0948
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D20F1B22919711ED83B78DD4F1222468.roa
Signing time: Wed 11 Jan 2023 10:07:57 +0000
ROA not before: Wed 11 Jan 2023 10:07:53 +0000
ROA not after: Thu 11 Jan 2024 10:07:53 +0000
asID: 133499
IP address blocks: 161.123.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:07:53 2023 GMT
Not After : Jan 11 10:07:53 2024 GMT
Subject: CN=63be8a7d-b392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:19:a3:c1:e2:17:ad:2b:4c:7b:a9:41:dc:
4c:d3:91:c9:fc:82:91:9d:80:70:4a:19:38:29:ad:
58:57:ff:8d:ac:fb:8c:84:5f:cd:2d:29:b9:8f:ae:
27:73:56:86:b7:83:26:39:83:fd:97:82:10:00:0b:
88:8d:05:96:a9:75:26:b2:00:2a:d5:3b:52:39:07:
ac:4f:2f:c6:bb:8d:fb:44:ac:3d:17:e7:f6:96:95:
e6:03:30:3d:57:bf:91:8b:65:c0:2c:dd:98:c2:ac:
39:04:37:46:48:25:23:2c:15:fb:89:d4:77:4d:78:
43:18:6c:66:4d:62:2d:96:8d:7e:64:cd:5f:77:99:
cb:d4:64:8a:eb:fe:78:6e:1d:52:e8:21:26:30:4d:
0b:27:95:30:14:a6:f0:b5:a0:a2:bf:d4:83:ea:23:
93:06:ce:32:90:ae:4b:b2:aa:60:13:fe:5c:63:69:
33:76:b7:f5:22:c7:be:4a:86:b3:64:01:c6:ae:76:
59:03:79:be:cf:1f:83:14:c2:f3:4c:f2:78:a3:ec:
fb:fb:10:23:3c:1c:79:4f:d4:b0:b6:8a:bc:28:67:
d7:40:88:3f:75:b7:32:e0:94:58:89:ce:b6:e8:8a:
70:b1:05:01:ba:20:54:d8:c5:7e:f1:07:26:3c:9f:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:48:3B:26:4C:0E:29:37:56:2D:32:F9:3F:1C:1F:D8:0E:55:7E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D20F1B22919711ED83B78DD4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.148.0/23
Signature Algorithm: sha256WithRSAEncryption
59:b8:32:93:a6:f2:26:f4:cd:3c:24:38:34:a0:e4:b7:6c:28:
39:59:92:76:5b:85:98:e5:c8:06:a4:38:ea:11:5b:02:8d:e2:
9e:28:f7:94:d4:85:ec:4f:d8:4d:11:61:14:b6:e8:ca:ac:57:
c7:4b:45:77:ae:62:32:ff:a8:a6:ee:90:9d:0a:ff:40:91:aa:
46:34:de:68:23:4d:c1:cf:04:53:09:fd:4b:08:4a:4f:aa:f7:
ae:61:98:b1:8b:e9:9c:51:0b:73:16:6f:19:76:28:a7:4b:de:
c9:9d:cf:b7:a4:ce:06:e1:c2:81:a0:65:eb:34:84:8a:34:f2:
37:cf:fa:fc:a4:4a:dc:50:e5:f9:c5:8d:fe:92:0b:3c:b1:51:
a0:f5:26:a7:1d:e5:42:c3:51:10:dc:a8:19:a7:8a:58:b1:74:
55:45:1d:3d:85:94:c3:3a:e8:37:01:e1:13:88:52:47:98:b1:
c2:c9:af:8f:e7:49:81:56:67:72:fc:b4:70:b6:56:7a:fb:6f:
82:90:db:fe:12:ee:ad:40:57:b4:3b:2e:cd:66:b0:47:e6:a7:
88:85:b0:b1:ee:f3:67:8a:c2:51:ae:be:2e:72:7b:17:d0:d5:
c5:28:d1:04:47:21:cd:21:ed:e8:fe:ca:b6:b8:e2:0f:40:73:
96:da:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org