Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D8436DC07DF411ECB24D34C45A40D577.roa
File: D8436DC07DF411ECB24D34C45A40D577.roa (raw, json)
Hash identifier: i4bFH0LRZr/6st1PWFdnoPfUfr2FwroCqEfEhDOb6w4=
Subject key identifier: 69:52:63:FE:D9:F9:9C:41:03:88:73:FE:2E:40:87:99:26:06:CC:91
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 04FE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D8436DC07DF411ECB24D34C45A40D577.roa
Signing time: Tue 25 Jan 2022 15:38:30 +0000
ROA not before: Tue 25 Jan 2022 15:38:26 +0000
ROA not after: Wed 25 Jan 2023 15:38:26 +0000
asID: 327790
IP address blocks: 161.123.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 15:38:26 2022 GMT
Not After : Jan 25 15:38:26 2023 GMT
Subject: CN=61f01975-c56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:9e:63:35:51:16:38:dd:9c:c6:6b:d5:f1:
28:ce:21:dc:3c:9f:fd:97:43:ba:72:43:df:02:9d:
45:d1:9d:2a:b1:8c:35:ca:84:73:34:e6:56:fc:01:
27:af:9e:9b:ed:93:9e:59:bb:2a:2f:e7:12:9e:30:
21:2a:85:99:2a:70:fa:16:62:91:ce:ea:2b:00:56:
c2:c5:ee:d3:7d:d2:73:36:f0:76:9e:05:2f:8e:db:
2d:01:28:a2:19:5f:9d:64:d5:4d:d0:5b:3a:d1:1a:
2c:98:9d:77:3b:2b:57:0a:bb:fa:6a:df:00:19:a1:
49:3a:57:21:d5:56:70:76:d9:65:89:22:ba:7d:4f:
bd:63:f2:96:53:b1:a1:13:e0:7a:9c:05:b6:07:2f:
44:d7:2d:7b:46:20:7f:88:42:b4:41:e0:79:77:11:
16:8d:08:46:c7:a8:16:1a:05:93:cc:be:12:20:a7:
6c:b2:74:81:cb:db:34:01:cd:05:77:e9:b3:a2:28:
49:12:31:d3:dd:39:3d:14:e0:e9:b6:00:0b:41:45:
6f:de:a2:7a:8a:54:4f:44:2b:de:a0:2f:1b:a9:ba:
66:4d:5f:b7:6a:e3:94:ba:21:7f:ec:d6:9d:ef:27:
4f:d7:d7:0a:64:41:1f:5b:b3:e2:c1:79:e8:c1:14:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:63:FE:D9:F9:9C:41:03:88:73:FE:2E:40:87:99:26:06:CC:91
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D8436DC07DF411ECB24D34C45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:2a:ac:76:ea:21:2c:98:e3:68:8a:d1:17:7b:57:0f:30:3b:
c3:f5:96:8d:88:1a:68:c7:92:16:ca:87:a1:75:e2:98:57:9e:
70:c2:10:7d:3b:70:f1:aa:6f:8f:c4:45:dd:dd:8a:80:b2:dd:
c7:8d:81:0b:6f:b7:c2:10:b6:16:f8:2c:8d:02:b4:05:3d:d9:
dd:58:fe:d5:a8:6c:e5:b4:be:2f:27:ae:93:fc:30:c1:2e:cf:
ef:b4:31:09:c5:73:b4:95:78:bb:af:b4:21:ac:de:bd:3f:b8:
c1:18:9a:22:e8:16:b4:df:57:1c:6e:60:f4:8f:f1:0b:ed:56:
43:77:17:28:82:12:9f:83:22:26:2a:05:db:4a:e2:f3:8b:dd:
9f:77:35:9e:61:35:10:14:2b:68:2e:9c:7f:df:3b:6c:1e:a5:
15:42:96:7c:a3:9b:34:5d:79:a7:ab:d9:3f:f7:d9:7f:fb:b0:
50:18:2a:08:ec:0e:0c:bc:4d:58:b0:3c:cf:3d:19:2d:18:92:
14:b7:a6:8d:e8:70:61:25:06:db:1d:29:7d:3d:b7:81:3b:a0:
10:cc:05:07:3e:2f:94:03:44:72:3e:25:d8:75:66:3c:07:95:
85:f4:e0:cf:83:8f:ff:59:c5:2a:0f:e0:ef:82:a2:70:02:8d:
80:28:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org