Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DFE6D57E905111EDB353F4CAF1222468.roa
File: DFE6D57E905111EDB353F4CAF1222468.roa (raw, json)
Hash identifier: uiVcvpzuusK06Vrl/vWKb3mAr1sN3C0Trfh3fTXY/bk=
Subject key identifier: 1E:C3:F6:83:B4:D3:ED:23:6C:B3:7E:4A:D0:A7:0F:18:2F:4B:64:70
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0938
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DFE6D57E905111EDB353F4CAF1222468.roa
Signing time: Mon 09 Jan 2023 19:14:44 +0000
ROA not before: Mon 09 Jan 2023 19:14:38 +0000
ROA not after: Wed 03 Jan 2024 19:14:38 +0000
asID: 327790
IP address blocks: 161.123.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 9 19:14:38 2023 GMT
Not After : Jan 3 19:14:38 2024 GMT
Subject: CN=63bc67a4-7708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:8f:da:2e:4b:ac:cf:58:36:09:2f:59:e2:
08:8f:9b:64:6e:9f:00:c0:59:cb:7d:cc:33:80:74:
bc:6c:93:e3:24:07:d2:14:d8:bd:2a:cc:fa:d9:00:
18:9c:d1:a3:4f:32:13:07:b8:d4:80:aa:9d:a6:99:
e9:4e:74:9b:e1:40:04:cb:39:5b:be:95:68:09:0f:
64:85:3c:95:b3:83:69:db:ee:0c:92:1a:4e:70:6c:
06:ee:4d:30:6e:07:ba:56:17:51:d3:3a:6c:43:5e:
f5:08:c4:51:40:7b:d7:25:8c:a5:b9:b4:22:07:59:
95:75:76:7e:3a:12:3f:21:45:13:3b:ef:15:dd:a3:
e3:b3:a6:21:e4:87:76:fc:9e:f1:53:35:4f:c8:91:
58:cf:e9:bc:67:4a:b7:e5:5d:34:e1:a0:6d:b6:e4:
55:67:0a:46:07:f5:93:85:d1:18:1c:ab:a9:a3:0f:
b6:08:e1:d6:50:1d:48:87:04:7b:a0:52:55:ff:fd:
23:d0:db:e0:46:c2:cb:d9:df:a6:fe:ae:0e:ab:62:
3d:3e:37:ee:97:46:76:cc:d3:fc:ee:99:78:42:3e:
77:e6:5b:ba:04:88:04:a2:cc:d5:a5:69:9f:13:93:
1e:35:90:03:7b:cd:5e:da:fe:18:a2:d7:05:f5:93:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:F6:83:B4:D3:ED:23:6C:B3:7E:4A:D0:A7:0F:18:2F:4B:64:70
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DFE6D57E905111EDB353F4CAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.152.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f8:4e:16:46:9b:68:8a:1f:5f:22:ec:fd:db:b7:6e:8c:6b:
37:f8:7f:93:ad:1c:b0:58:e8:e7:2f:4d:c9:47:35:9d:ef:d2:
d6:60:74:da:3b:57:2e:4a:8f:74:50:f6:6e:34:34:71:11:19:
c3:a5:83:9f:3d:46:a9:7c:b1:e9:33:43:a0:63:0d:f7:86:85:
1c:7f:57:72:22:33:f0:71:72:25:0a:29:a4:01:59:62:46:f2:
4a:a4:e5:7d:73:dd:a2:e0:69:52:83:67:1a:31:3d:17:75:62:
73:0b:04:23:29:1b:cc:9e:e3:96:61:2c:a9:76:9b:44:c2:20:
48:0f:05:04:eb:eb:2f:f1:e7:46:9c:d4:6b:b2:1b:a3:e8:a3:
02:7a:eb:85:cb:f8:88:49:ef:3f:21:dc:b9:21:e1:d4:01:26:
66:11:49:a6:ff:83:72:a9:c3:6e:f0:a1:e6:ff:40:6b:ba:da:
58:a3:a6:8a:48:9b:ae:0a:d1:56:c6:ba:a2:8e:00:a4:51:e6:
f5:4f:00:30:09:04:f8:74:b7:d4:eb:1b:fb:ad:64:2c:ab:3d:
cb:59:49:36:fb:94:ad:67:e3:c5:83:6a:5e:f3:2d:c4:00:d3:
fc:8b:5b:9e:a7:de:ab:c5:c8:57:8c:9d:e6:08:81:56:9c:f1:
1d:fe:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org