Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/3DCEC32C1A0F11EDA22AC83BC4F9AE02.roa
File: 3DCEC32C1A0F11EDA22AC83BC4F9AE02.roa (raw, json)
Hash identifier: ITEiSTdZyQXmPlMp9xyYCrO/vE4IFYgbSEnLrtA3BSY=
Subject key identifier: 5A:7A:C4:42:5F:30:4E:87:A8:D7:7A:71:FD:33:DF:61:C7:B4:6B:77
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 32EF
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/3DCEC32C1A0F11EDA22AC83BC4F9AE02.roa
Signing time: Fri 12 Aug 2022 07:20:28 +0000
ROA not before: Fri 12 Aug 2022 07:20:28 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 1239
IP address blocks: 175.29.232.0/21 maxlen: 24
175.29.240.0/21 maxlen: 24
175.29.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13039 (0x32ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Aug 12 07:20:28 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62f5ff3c-eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:17:2d:ef:87:63:db:20:77:ac:ce:e5:43:
08:18:77:57:ca:ad:c9:31:91:52:22:a8:5a:1b:a4:
1d:11:4e:50:8a:4d:60:50:e0:10:59:a9:f1:a3:bd:
6b:f0:16:f5:c5:7f:f6:98:ed:76:21:d3:90:c3:ab:
c0:46:00:64:d7:55:94:52:52:06:8e:5b:cc:7b:7d:
5a:c2:fc:eb:92:e8:30:99:02:d9:bf:9a:e9:c8:99:
86:39:f0:19:7b:5c:12:ed:2c:46:99:a5:3e:02:97:
89:50:4d:03:38:5b:09:cf:ab:49:aa:27:04:90:04:
1b:ce:50:01:3d:61:9e:6c:8f:1e:c4:a7:d0:2b:b0:
44:19:fe:04:4a:b2:da:ee:68:89:49:39:bf:d4:f6:
24:f4:6d:de:d9:fa:d8:8f:82:32:b2:a8:b5:8a:9d:
98:fa:d8:1a:12:c7:17:2a:1e:62:2f:e1:17:cb:90:
25:ef:ec:c1:f8:e3:88:24:b4:47:70:e7:d4:b9:cb:
21:2d:8e:cf:bb:35:1b:87:75:94:fc:82:c2:d3:81:
65:3b:90:df:c7:38:c4:fe:86:a8:87:b7:ae:6a:b0:
9a:cd:91:a7:35:46:be:aa:2f:54:eb:93:6c:12:67:
fd:23:11:cd:7b:57:67:ec:14:89:0d:06:63:fd:be:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:C4:42:5F:30:4E:87:A8:D7:7A:71:FD:33:DF:61:C7:B4:6B:77
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/3DCEC32C1A0F11EDA22AC83BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.232.0-175.29.255.255
Signature Algorithm: sha256WithRSAEncryption
58:2a:ee:ed:6e:2a:d6:45:90:05:eb:78:3f:51:2f:48:50:e0:
5e:9a:b6:cb:f5:b2:1f:fc:5f:2f:c8:93:1b:cd:ff:b4:0d:b5:
78:c9:58:99:04:14:b3:f4:71:59:20:25:19:e7:69:33:5a:82:
14:66:87:ce:03:11:0e:72:14:04:ee:c5:34:9d:dc:b3:e4:68:
3d:ea:a9:72:65:30:51:7f:b1:70:16:9b:10:68:15:19:93:cb:
d7:b5:11:84:13:28:ce:ec:7f:c0:6c:f6:82:31:e4:f4:82:45:
81:d9:44:53:4e:3c:bc:c1:69:1e:c9:e6:45:0e:84:21:45:e5:
2d:15:44:6f:cd:05:4f:a1:0f:33:7b:e2:08:c7:55:d6:cf:86:
6f:42:d2:70:41:1b:8c:d1:a1:b3:e4:b1:0a:02:71:fb:6e:8f:
5a:b3:92:ed:a9:ea:7e:21:3f:79:1c:78:6a:bd:58:21:e6:4b:
7c:df:58:88:52:65:4a:0c:ae:25:05:3a:79:85:0a:f9:60:45:
18:6a:dc:92:91:09:64:09:eb:10:55:54:6b:63:93:a7:9d:a8:
71:50:f5:bf:9f:98:57:d1:f9:f0:39:4f:4e:4d:7e:ee:0c:a9:
ee:70:fa:5f:65:23:93:f6:39:09:aa:e9:aa:13:f9:9b:00:09:
99:a3:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-ams.rpki-client.org