Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/A509655456D911ED8CF1D669C4F9AE02.roa
File: A509655456D911ED8CF1D669C4F9AE02.roa (raw, json)
Hash identifier: VXiNrVabx8vwCdehNzylLt1Ir5jZxdQvSk4nFk8dsY0=
Subject key identifier: 87:9B:AA:14:F1:24:E6:95:5D:FF:C1:B3:A9:7F:B2:CC:98:98:C1:A6
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 338D
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/A509655456D911ED8CF1D669C4F9AE02.roa
Signing time: Fri 28 Oct 2022 16:00:29 +0000
ROA not before: Fri 28 Oct 2022 16:00:29 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 139879
IP address blocks: 175.29.200.0/22 maxlen: 24
175.29.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13197 (0x338d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 28 16:00:29 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635bfc9d-c9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:e7:55:82:57:e9:03:dd:7d:49:3f:40:c6:
22:0e:20:b0:91:0e:de:a4:67:4f:6d:c6:a7:c4:e3:
62:80:ce:7f:0a:23:10:b6:1f:15:6e:f7:d0:a3:ba:
86:0f:f9:55:34:9b:54:52:fe:16:e0:45:41:f3:6b:
33:5e:cd:38:79:fe:10:e4:bf:04:43:93:de:f7:8c:
a2:c8:3c:e3:99:a1:f9:09:17:1b:81:78:5c:19:2f:
19:c7:26:ec:71:f8:54:8f:31:85:61:ec:40:99:47:
30:d2:6d:35:f0:87:ff:58:49:82:33:72:f7:af:90:
a8:7f:61:b8:a5:70:b1:17:0f:f4:9f:b3:30:9e:b2:
07:1b:d9:55:59:2a:c3:8c:f7:28:27:7d:46:e6:34:
d6:f8:34:4a:74:0d:a5:e9:eb:04:17:34:0a:71:d3:
de:83:e4:0f:94:ea:9e:92:42:48:1e:2d:c5:aa:8f:
60:ee:59:2b:41:83:ab:ae:07:6b:c0:d2:24:57:41:
3c:e9:d0:63:8f:b5:8e:c3:24:0c:11:c9:0a:e2:a9:
42:ae:bb:8d:50:d7:ee:22:be:16:8a:f0:8a:50:00:
81:6a:69:4a:ea:f8:30:2f:d8:5a:09:dd:03:37:08:
8b:df:b9:c8:e1:ad:cf:d0:b9:ea:90:26:38:3e:b1:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:AA:14:F1:24:E6:95:5D:FF:C1:B3:A9:7F:B2:CC:98:98:C1:A6
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/A509655456D911ED8CF1D669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.200.0/21
Signature Algorithm: sha256WithRSAEncryption
22:18:83:69:73:d1:5c:a4:46:29:b5:a7:30:9b:8e:a3:69:1a:
04:86:2c:60:e1:43:0b:39:f3:76:93:f5:fa:06:4a:d0:2e:d6:
c6:37:7a:b8:96:3e:2a:fb:43:08:f3:4c:7f:51:a8:c2:67:62:
76:de:fb:d3:33:f1:d2:1f:25:fa:33:33:37:a9:5c:ce:3c:b4:
eb:94:38:1e:c5:ab:3e:3e:9f:fb:63:2d:7a:c0:ce:04:88:c0:
6c:c5:71:8c:a5:e8:55:ee:a3:86:3d:2e:49:f7:8e:db:97:08:
4f:4c:58:78:e4:0f:6e:b1:e3:46:e6:cc:23:ff:b2:c9:7b:5a:
80:74:07:42:60:44:f9:11:9c:c8:66:a1:54:57:18:e8:fd:52:
25:bf:f7:68:37:96:7e:93:18:13:72:12:cf:73:f5:cc:ab:08:
a2:4d:55:25:e0:34:07:88:23:cd:4a:e5:91:57:bd:18:cc:6f:
2a:0e:30:59:a0:85:2e:85:b6:e3:73:d4:53:62:28:2b:3d:52:
90:5e:3f:a7:4b:d9:8e:a1:8d:30:1e:89:2b:58:41:b3:64:c5:
f8:bd:23:bb:49:33:10:11:64:53:38:ba:36:97:ee:e2:93:80:
33:87:a4:70:cd:29:64:d6:19:60:64:55:c7:7d:57:ea:b3:dc:
79:9c:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org