Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DD415674132311ED84EFCD51C4F9AE02.roa
File: DD415674132311ED84EFCD51C4F9AE02.roa (raw, json)
Hash identifier: omg4WiQ/vvSgzFsSqwuYGtAOUowP6oJ0g7zzgggaSUI=
Subject key identifier: 7C:82:3E:11:30:EB:D7:49:2F:56:14:B8:14:F1:F6:60:38:CB:DC:55
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 32D8
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DD415674132311ED84EFCD51C4F9AE02.roa
Signing time: Wed 03 Aug 2022 14:40:26 +0000
ROA not before: Wed 03 Aug 2022 14:40:26 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 996
IP address blocks: 175.29.112.0/21 maxlen: 21
175.29.128.0/21 maxlen: 21
175.29.200.0/21 maxlen: 21
175.29.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13016 (0x32d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Aug 3 14:40:26 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62ea88d9-4dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:0e:36:57:cd:0e:64:bc:d6:3b:e4:67:ae:
d1:21:41:56:e2:fa:d2:61:38:53:4d:59:76:a3:b4:
15:bb:4d:9c:e9:e3:16:29:4d:ef:35:5c:7a:47:96:
bf:b2:2d:4d:81:1d:6c:62:a2:64:f4:72:6b:e8:53:
62:fe:78:99:9e:d5:24:1a:de:01:25:bb:d8:23:f3:
1f:6e:0a:e7:d9:30:eb:60:4c:d5:4b:0e:21:d2:d1:
29:98:0e:64:ba:69:dd:e5:56:57:d5:81:63:cd:1f:
bd:a2:bd:f8:ed:9b:16:97:d4:cb:3b:b5:d7:51:16:
b3:e4:b8:0d:b9:f7:88:f4:7f:77:a4:89:5b:6e:47:
b3:85:9e:60:95:96:c7:26:1b:9a:bc:09:dc:fd:15:
ce:15:70:63:d0:74:f3:3c:8c:50:48:89:6f:fb:32:
69:aa:8c:ae:a5:65:57:2f:8c:61:bf:6f:05:de:63:
03:7f:cd:53:48:98:1d:40:82:eb:af:35:2d:d5:ba:
60:e0:a9:ab:34:ba:72:81:ec:27:ea:74:22:c1:52:
f7:1d:db:3e:89:d2:80:45:c0:9c:ee:57:a8:13:95:
fb:ab:7b:12:82:43:43:18:2c:46:9f:e4:24:66:a5:
44:50:7c:fc:0a:4b:eb:db:02:be:c9:4a:7b:f4:42:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:3E:11:30:EB:D7:49:2F:56:14:B8:14:F1:F6:60:38:CB:DC:55
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/DD415674132311ED84EFCD51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.112.0/21
175.29.128.0/21
175.29.200.0/21
175.29.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:10:a9:eb:3e:a2:fa:3a:2e:60:b1:74:94:bb:6c:a0:7f:cd:
1b:0b:d3:c3:08:ad:fb:b1:e5:81:5f:a6:e3:75:25:07:cc:5c:
24:5a:5e:0a:84:9d:5e:c5:a3:af:94:ad:22:c8:99:cd:de:6c:
04:51:2a:dc:79:ab:85:44:12:21:78:ce:ad:69:a4:e9:e9:54:
0c:9d:76:80:24:56:cf:c9:91:fb:90:1f:9e:93:7a:7d:14:08:
12:0f:c2:67:38:57:15:b5:25:0e:03:72:60:4a:b2:ed:75:1e:
49:b4:5c:75:66:5b:02:fc:35:d6:00:d6:f0:35:8a:1f:38:f3:
58:90:88:a5:63:53:d7:a5:48:ba:0b:5f:c0:74:ee:36:00:27:
8c:c1:f0:48:4e:0d:af:52:cb:b2:81:c4:56:d9:17:cd:56:2e:
45:ed:4f:2f:b4:e3:79:fb:9d:77:4d:a2:3b:e6:0e:0a:15:72:
72:61:07:5e:3b:fd:eb:7a:e2:d5:02:e6:55:6b:b1:16:18:8e:
c2:19:09:10:dd:cb:0e:86:1a:19:8a:f9:d8:66:9e:4e:18:2a:
57:66:e4:c0:41:f2:18:1f:eb:1c:ba:85:e7:2f:66:24:8c:2f:
99:61:01:25:72:f1:ff:c9:1a:9f:48:51:4c:ba:67:60:29:2b:
f8:39:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-ams.rpki-client.org