Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/163E698A754E11ED98BF8629C4F9AE02.roa
File: 163E698A754E11ED98BF8629C4F9AE02.roa (raw, json)
Hash identifier: TsQBOp2T9WzrxwGAqqOFENxWXTMptALFecm/isszVTs=
Subject key identifier: A8:64:9B:7E:E2:E4:17:A7:9D:6A:94:82:19:AE:F7:1C:49:24:8C:2C
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 07D2
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/163E698A754E11ED98BF8629C4F9AE02.roa
Signing time: Tue 06 Dec 2022 10:09:36 +0000
ROA not before: Tue 06 Dec 2022 10:09:36 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 142300
IP address blocks: 125.62.88.0/24 maxlen: 24
125.62.89.0/24 maxlen: 24
125.62.90.0/24 maxlen: 24
125.62.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Dec 6 10:09:36 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=638f14e0-e53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:d7:13:7a:e6:ca:be:cb:8b:46:b2:4f:90:
26:23:4c:b7:d3:78:52:3f:33:3f:04:d6:32:6e:57:
fe:94:8f:1e:cc:67:68:aa:70:8d:ab:a7:3a:03:0f:
cb:55:6a:6b:cf:03:aa:26:90:15:ae:2a:d6:cf:58:
b0:80:94:a9:73:77:b6:5c:bf:82:bb:86:f0:36:e4:
0a:e1:68:ca:59:7d:8e:e9:ae:10:1f:1d:fd:60:81:
c7:a5:38:9c:d8:f4:10:cb:7c:15:b4:87:f8:08:eb:
52:bf:0f:0f:bf:e2:93:25:62:3b:b0:8b:02:a9:ce:
53:08:14:b7:cf:b9:b5:64:20:f5:dd:07:65:83:78:
4e:d0:a6:f8:a2:6d:f1:21:1b:55:57:1c:f4:6d:c5:
6d:ec:68:15:af:a1:76:97:c7:ec:df:46:ac:52:56:
e7:a8:26:d8:f6:70:d6:fe:9c:73:cf:86:d6:dc:38:
3b:27:7e:85:6e:20:3d:9c:9b:c5:fd:38:99:ee:4a:
f8:e0:9c:4f:a9:12:b7:be:08:de:49:60:c1:ff:05:
c6:8f:0a:34:c7:50:8d:4a:d6:6a:a1:4e:84:49:4a:
e5:6f:d4:b8:e8:68:d6:30:6d:9b:b0:61:1a:b5:3b:
d7:c8:26:21:1e:f8:be:74:b3:bb:bb:9b:32:34:d2:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:9B:7E:E2:E4:17:A7:9D:6A:94:82:19:AE:F7:1C:49:24:8C:2C
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/163E698A754E11ED98BF8629C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.88.0/22
Signature Algorithm: sha256WithRSAEncryption
34:af:e7:ee:61:9c:f8:0a:e5:16:eb:8d:bc:16:6e:11:e9:50:
cb:bd:51:99:79:cb:57:b5:16:18:a9:a2:12:d3:ef:11:7c:2f:
9f:b8:ee:71:d0:f8:e8:68:66:53:0a:cf:f3:eb:eb:f7:e3:3b:
62:d3:8c:e6:54:22:c4:0e:12:6d:ff:ee:3f:10:d5:d2:f2:19:
df:d9:3a:3a:16:66:ad:45:52:69:11:7a:d7:1f:fe:f7:2b:9f:
ef:0a:d0:54:34:0f:e2:bb:22:de:ac:ae:ef:ce:80:a4:29:ab:
ff:d0:66:35:9a:55:a1:e8:cb:4f:c6:9c:6e:b0:60:f0:34:cc:
ea:e5:95:07:bb:6f:82:ea:09:0b:51:4b:d2:66:ca:20:cc:61:
3e:0d:75:e4:15:4b:94:ae:e4:4b:41:11:42:e4:04:fc:a2:1e:
1f:cd:9a:6b:a9:f5:9a:a8:f6:03:c8:9b:ae:03:1a:d1:72:bd:
42:65:96:92:05:5a:51:2f:0d:06:7a:84:82:6f:13:28:33:0a:
61:4d:c7:a9:38:99:68:a0:ff:d7:ea:5f:72:04:a5:f2:59:d1:
f1:b2:bd:8e:4b:d1:d8:39:72:47:89:41:c7:25:23:d4:ec:97:
40:4a:29:f4:40:c1:da:6b:77:79:20:26:d7:78:fd:af:52:d4:
9b:15:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org