Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FD9E51EAB03311ECB64238DD5A40D577.roa
File: FD9E51EAB03311ECB64238DD5A40D577.roa (raw, json)
Hash identifier: 4fZRKwWxc8KKq4HYAYqBhPQxYBnaCNo5PktrCYPjre4=
Subject key identifier: 0A:21:74:F1:8E:97:92:2E:F7:E2:40:78:0D:23:51:66:F4:0A:FB:2A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 063B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FD9E51EAB03311ECB64238DD5A40D577.roa
Signing time: Wed 30 Mar 2022 14:16:29 +0000
ROA not before: Wed 30 Mar 2022 14:16:25 +0000
ROA not after: Thu 30 Mar 2023 14:16:25 +0000
asID: 327790
IP address blocks: 161.123.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 30 14:16:25 2022 GMT
Not After : Mar 30 14:16:25 2023 GMT
Subject: CN=6244663d-d72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:21:ee:33:40:ca:8c:73:75:a6:0d:db:c2:
d1:66:c4:77:2d:06:5a:31:5f:26:24:46:19:bb:22:
31:b5:f0:e1:33:91:98:db:53:f2:45:77:f3:17:b3:
0f:8d:86:13:6b:e6:4a:40:df:45:2a:5b:a6:df:c3:
e8:57:09:cb:07:b5:8a:c5:3c:64:7f:fe:ff:4a:61:
b3:71:bc:6e:42:40:5f:44:f0:98:3f:b4:10:49:4c:
0b:43:0a:f2:74:0d:5b:f7:da:40:c4:a4:d6:ae:60:
ec:c7:5f:58:20:32:b6:66:a2:bf:b2:46:c7:e8:e1:
b2:af:9d:89:86:82:e6:ff:83:e0:50:c0:19:8f:fc:
ac:ee:ee:f3:da:50:d9:8c:5c:22:f8:c4:11:69:b2:
29:e8:84:3a:23:99:3e:18:6e:33:9e:b4:2e:e3:b7:
5f:b8:cd:06:75:51:a8:34:ad:23:c0:24:5a:25:56:
77:5e:5b:a2:33:db:75:6d:07:d2:af:a5:66:5a:87:
ca:92:5b:70:3c:23:fc:df:f1:12:f4:1d:f0:06:f3:
05:6f:71:b9:ee:71:20:91:31:1d:17:b3:ed:c8:45:
f0:e7:a0:49:cc:75:3c:d8:43:a9:6e:73:2d:7c:1f:
b8:fb:a8:2d:eb:ed:57:72:56:26:8e:36:69:a9:be:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:21:74:F1:8E:97:92:2E:F7:E2:40:78:0D:23:51:66:F4:0A:FB:2A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FD9E51EAB03311ECB64238DD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ae:44:c8:03:35:a9:a9:1e:71:02:fc:94:21:5c:c2:d3:9f:
7a:2d:ce:a4:21:72:d3:60:fd:3d:a8:c5:00:7d:c1:8b:ac:c0:
5b:d9:66:82:a3:ab:46:9a:0f:85:fd:42:af:89:f2:3e:af:f4:
83:dd:7a:2b:a4:3d:b2:a3:cc:af:46:04:a3:13:ac:ef:b7:40:
cd:c9:00:50:ef:ba:4c:24:b1:b2:75:79:f2:bd:7e:53:6f:13:
c9:7a:2b:ca:be:f7:72:db:d9:99:30:82:c3:79:9a:c0:9b:f9:
d2:ec:10:8c:5e:0c:94:f2:34:cd:5f:39:35:e0:8a:c4:c1:1f:
66:1f:f0:0b:c1:4b:cb:13:06:84:3f:8a:53:86:7b:a8:8f:13:
18:a2:1a:79:f5:54:d3:ba:a4:0c:d1:41:cf:52:bc:32:db:2c:
42:b2:87:24:83:58:12:56:9f:76:46:a1:63:e7:08:e9:35:39:
5b:85:23:6c:0f:ed:9b:a2:70:82:0e:f4:6a:d3:3d:d7:fd:14:
37:ec:2c:1f:f1:3b:b6:3b:db:0f:94:14:e9:fa:35:b6:b2:59:
34:40:31:fc:d4:ee:64:5a:c1:26:4a:c6:4a:b2:f0:39:f6:2c:
d8:6e:03:3e:c8:9c:3f:7d:54:13:a1:db:e1:19:11:d8:03:12:
32:0f:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org