Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/3240616A717A11EDA4585E37C4F9AE02.roa
File: 3240616A717A11EDA4585E37C4F9AE02.roa (raw, json)
Hash identifier: 3v2e9nCNJBNt13rMDkb6fa1vpVyVJZdxoJCMK3I/FIc=
Subject key identifier: D6:33:4A:47:54:48:99:BA:00:1B:28:0F:DF:7E:8E:9C:5E:BA:E3:C5
Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial: D6
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/3240616A717A11EDA4585E37C4F9AE02.roa
Signing time: Thu 01 Dec 2022 13:15:16 +0000
ROA not before: Thu 01 Dec 2022 13:15:16 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 133542
IP address blocks: 2001:df0:f340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Validity
Not Before: Dec 1 13:15:16 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6388a8e4-e933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:e9:65:1a:95:2c:94:a5:8c:dc:17:59:26:
aa:06:5a:28:f0:44:31:2c:74:a2:5e:fa:4a:f9:03:
97:9a:53:53:46:87:3a:08:39:d7:07:9a:0e:1a:90:
1a:06:dd:07:49:e7:20:b4:3a:c7:09:33:b6:a1:d0:
2b:72:74:48:c9:a5:c3:0c:51:ea:b3:ba:cf:6e:ce:
9d:f6:1f:d6:a3:27:6a:50:9f:72:36:6a:97:2a:ad:
6d:12:6b:10:d8:f3:57:d7:24:ce:4e:26:54:7b:ab:
df:d8:5a:71:c8:2b:4b:49:b6:1c:15:7d:29:b4:ad:
8c:9f:14:32:cf:12:3c:cc:c8:9b:3a:e8:49:e1:19:
54:fb:fc:71:24:e9:6e:9d:ff:d1:1d:81:36:d5:a1:
01:cb:d5:2e:db:9a:aa:f2:70:f7:1e:3b:e9:ad:7b:
d2:69:e8:a5:29:b4:3d:2f:26:c0:f8:46:bf:59:1d:
00:85:36:b3:9b:d4:c7:f8:cf:cf:bc:03:14:98:b7:
04:e5:a2:3f:86:12:e4:b3:0f:3e:09:fd:28:3b:2b:
21:88:b7:17:c4:0e:1b:67:bc:7b:5a:ad:7a:1e:59:
74:3d:21:7a:be:01:6a:f4:80:21:b5:7b:d9:04:7b:
62:8d:7d:07:e0:aa:e7:61:69:dc:ac:23:5d:51:90:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:4A:47:54:48:99:BA:00:1B:28:0F:DF:7E:8E:9C:5E:BA:E3:C5
X509v3 Authority Key Identifier:
keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/3240616A717A11EDA4585E37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:f340::/48
Signature Algorithm: sha256WithRSAEncryption
22:e8:ce:53:70:8d:09:cd:5a:f5:80:c8:a4:07:4a:03:a8:22:
fc:e1:23:73:9f:b5:45:08:4a:a3:a5:df:c6:1a:6e:26:26:50:
a2:95:3e:15:69:cf:ec:4e:fa:99:ea:6c:cf:9a:82:c7:e3:32:
70:8a:cc:90:6a:bb:81:76:9a:3d:eb:83:cb:94:2d:12:86:4d:
ba:25:81:d2:39:da:0a:89:43:b1:d5:13:ea:fe:8d:28:bf:1b:
3c:2f:65:28:7d:8e:db:58:1a:63:c6:e7:ad:ac:1e:24:16:3f:
e9:3d:2e:f9:4e:e6:12:44:da:6d:d3:5b:c8:25:f2:1c:12:67:
ae:f8:ae:d2:32:ba:15:a8:2f:a9:fd:76:9d:7c:c3:f7:1d:ae:
d1:1c:e2:ef:2a:4f:45:39:57:6f:14:25:46:01:66:e0:9d:57:
5a:95:17:88:5a:a6:f1:b9:fc:71:7e:66:37:6c:e1:0d:74:2e:
ef:77:e1:61:4a:5a:22:91:fa:5c:10:21:36:e5:77:90:eb:eb:
80:a8:bc:a6:27:35:3e:47:77:84:e3:21:b9:dc:8f:7b:8b:b4:
9f:d2:11:d8:3c:30:f6:f2:7c:60:69:45:16:7a:ec:55:b6:3a:
53:b4:fb:e4:41:25:55:4c:7a:3e:4b:7c:b0:76:cd:1c:ba:1d:
2b:52:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org