Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/BF46C632A62B11EC8DEAB736C4F9AE02.roa
File: BF46C632A62B11EC8DEAB736C4F9AE02.roa (raw, json)
Hash identifier: zEqXEF8Hh7/7r/NnX8D9G8lD1sS++6h7fk+8Ty5DHC4=
Subject key identifier: 4B:A4:75:E2:C0:20:89:D5:85:0D:77:CA:8E:98:DF:7C:19:21:14:BB
Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Certificate serial: 94
Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/BF46C632A62B11EC8DEAB736C4F9AE02.roa
Signing time: Thu 17 Mar 2022 20:13:34 +0000
ROA not before: Thu 17 Mar 2022 20:13:34 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 136395
IP address blocks: 103.179.54.0/23 maxlen: 23
103.179.54.0/24 maxlen: 24
103.179.55.0/24 maxlen: 24
2001:df0:48c0::/48 maxlen: 50
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Validity
Not Before: Mar 17 20:13:34 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6233966e-ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:b9:c2:36:d0:18:0b:cb:f3:fa:98:5b:24:
84:43:a1:34:dc:39:11:df:c1:db:c8:71:b7:4d:79:
9f:1b:1e:e7:a3:9b:12:86:0f:a6:65:d4:9f:cf:51:
92:b1:41:9c:69:a6:46:cf:21:e1:7b:93:ad:28:6c:
b4:c2:a4:75:31:45:dc:ee:41:5a:bb:57:95:6a:d9:
03:ec:28:4d:3d:85:52:3a:c6:e5:c3:5e:cf:ba:a7:
24:c2:b1:c9:8e:22:cd:d7:f2:e4:81:af:09:c2:59:
d4:09:bf:29:a5:a8:7a:68:b4:08:be:71:2b:7c:3b:
60:9e:32:5e:f2:ca:8e:d4:38:e9:88:92:9b:94:db:
ca:e1:79:5c:75:a9:b2:c1:49:da:1f:b3:75:7a:14:
c2:9f:dc:54:a3:47:b7:f6:b6:fd:ec:28:e7:96:5d:
de:1d:2a:a1:23:c3:22:5c:91:94:14:01:91:f8:62:
fc:73:75:40:90:4e:57:ce:59:66:e7:de:88:d2:c7:
13:09:07:df:7a:48:86:ec:09:3f:4a:98:af:08:01:
a5:ee:d4:ba:c2:c0:a8:75:da:ba:f5:44:1c:03:58:
cc:3f:07:f5:c1:79:22:66:90:d0:5b:12:bf:ff:79:
fa:85:e7:36:42:0c:24:8b:c0:76:15:c5:40:81:46:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:75:E2:C0:20:89:D5:85:0D:77:CA:8E:98:DF:7C:19:21:14:BB
X509v3 Authority Key Identifier:
keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/BF46C632A62B11EC8DEAB736C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.54.0/23
IPv6:
2001:df0:48c0::/48
Signature Algorithm: sha256WithRSAEncryption
55:7a:f7:3e:67:a7:fa:bc:60:c8:e3:4a:1c:b9:92:2b:ec:d9:
db:5c:80:b0:4e:4d:2d:b6:22:34:73:da:69:53:20:a5:0d:6a:
ce:3e:b9:63:c2:3d:e8:6f:d3:88:00:f8:60:2f:03:84:26:6c:
97:ef:9f:de:02:a7:c9:73:a2:6a:1d:48:ec:d6:9e:d5:6b:0b:
d2:33:cd:f4:4e:6b:e0:8c:80:4a:1e:df:81:7f:4c:24:e6:b6:
73:55:8f:06:6e:44:e0:f3:d3:86:81:78:af:32:8d:0b:35:a9:
c5:1c:85:3c:1c:20:1f:b6:4c:55:b0:2e:2a:0c:d0:31:1b:cc:
25:80:d6:23:64:9b:73:ab:40:d9:d5:a1:23:48:da:67:ee:10:
17:e5:58:6b:7d:69:1e:68:33:ab:79:e6:b1:bf:28:ed:b5:19:
f3:dc:05:67:f2:5d:26:89:bc:fc:80:2e:ee:89:a5:b7:09:90:
54:e6:47:58:0f:f3:ca:58:e5:b0:34:93:17:da:7c:df:01:45:
d4:87:e8:49:93:70:f2:ce:ec:fd:36:38:b9:80:b2:65:74:af:
fd:aa:e4:4f:24:ae:5d:c9:f3:6d:d9:eb:6b:2e:e2:57:27:a1:
8b:e1:63:5a:37:f7:2f:53:3a:ac:33:72:cd:b4:cb:fa:c4:16:
9a:ff:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org