Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DC6AFDAEE5DD11ECB531FA97F1222468.roa
File: DC6AFDAEE5DD11ECB531FA97F1222468.roa (raw, json)
Hash identifier: reoczmpNI7lL+fW+xNF7f0LzXlNLAa8RiZL1SOxpqo0=
Subject key identifier: DF:E4:88:DA:E3:AA:58:8C:7B:BD:22:9E:FC:81:A3:3E:FB:2E:9A:19
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0701
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DC6AFDAEE5DD11ECB531FA97F1222468.roa
Signing time: Mon 06 Jun 2022 21:15:59 +0000
ROA not before: Mon 06 Jun 2022 21:15:56 +0000
ROA not after: Tue 06 Jun 2023 21:15:56 +0000
asID: 203999
IP address blocks: 161.123.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:15:56 2022 GMT
Not After : Jun 6 21:15:56 2023 GMT
Subject: CN=629e6e8f-eadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:57:df:84:b9:ca:f9:22:aa:29:9a:52:5f:
69:b3:73:b9:fb:a5:97:9b:15:5f:71:7e:7e:c2:eb:
d4:d0:bf:4d:05:ef:88:05:75:83:e4:65:00:6e:9b:
25:b1:c7:35:8b:8d:c8:8b:52:dd:f5:2c:4d:11:4f:
af:bf:47:c5:b6:81:5b:d6:6b:74:44:31:86:b6:ab:
0a:7f:ca:46:4a:8a:71:32:99:05:f4:00:42:4a:f9:
b3:08:b6:bb:aa:b7:cf:0c:b1:84:fa:9a:23:1b:18:
52:73:52:a3:9f:39:43:5e:8d:ce:7e:6d:ea:79:e3:
ae:96:f6:2d:c8:a0:a0:4e:72:81:28:1b:57:8d:d2:
1d:51:04:af:e0:92:23:30:8c:2f:01:c2:05:1f:8b:
ae:d7:22:d2:b3:19:06:97:36:1b:f3:7f:11:e3:7c:
65:4a:5c:ec:c1:a6:07:a6:be:ae:09:8e:37:73:8d:
08:b1:a2:cd:c9:25:d3:05:23:29:00:42:36:1e:03:
0a:6d:27:5c:cf:40:af:c9:4a:25:5f:96:3b:3c:b3:
a8:e7:62:5f:b6:c4:8f:4b:98:90:b7:d2:db:f5:b3:
6f:ea:21:bd:c4:d6:8c:3a:16:7c:2c:de:05:e0:83:
d5:79:22:b3:85:65:c6:76:d7:fa:bc:49:f7:25:35:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:88:DA:E3:AA:58:8C:7B:BD:22:9E:FC:81:A3:3E:FB:2E:9A:19
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DC6AFDAEE5DD11ECB531FA97F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.12.0/24
Signature Algorithm: sha256WithRSAEncryption
31:55:de:e8:43:df:b2:81:3c:c0:6f:40:0c:36:3e:2c:f0:70:
d0:14:33:f7:d3:1c:f7:c6:33:47:df:05:ea:f1:33:94:4b:c3:
65:1f:92:4b:88:01:10:f4:f7:47:81:d0:24:11:33:09:4b:6b:
f0:de:ef:f1:5f:a9:95:9b:45:39:fd:49:2b:f2:66:7c:63:6b:
19:8a:25:62:8b:90:96:57:c5:06:43:0f:bf:6c:0c:1d:99:0b:
34:7b:70:3c:fd:86:6a:42:5a:bb:3a:96:89:e2:fa:a3:9f:c3:
dd:6b:12:7a:66:56:9d:c3:20:27:73:e5:ed:43:3b:a8:f6:75:
a3:66:a3:13:e0:9c:7b:3d:9b:60:29:b0:82:c4:14:55:d6:6f:
43:e1:77:a5:a2:55:99:02:57:50:ab:1e:7f:e1:f9:c7:67:4a:
8f:22:2f:98:c6:8d:5f:54:4d:31:11:2b:9f:d3:98:2d:60:c8:
a0:ad:e9:d7:76:0e:62:4b:06:56:a2:e0:12:d8:fc:e7:c6:d6:
45:b0:7c:bd:9a:a8:4e:8a:d2:7e:16:48:4b:70:2c:2d:02:23:
dc:3f:91:c3:be:e9:8b:7f:70:fb:28:a3:a4:49:f3:c0:a1:6b:
2d:00:bd:18:41:2f:9b:5b:44:22:f5:d8:41:92:b5:3e:30:ec:
06:f1:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org