Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/70550A28F47911EDAB508B20C4F9AE02.roa
File: 70550A28F47911EDAB508B20C4F9AE02.roa (raw, json)
Hash identifier: M3V6j5b6CLZA/mVLFPSNDetxvBMd1XvWZcmbYYhbbyM=
Subject key identifier: 3C:33:CF:4E:8C:71:63:A0:60:E4:5B:1C:BA:36:D1:03:C3:94:4D:EB
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 04F4
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/70550A28F47911EDAB508B20C4F9AE02.roa
Signing time: Wed 17 May 2023 06:09:54 +0000
ROA not before: Wed 17 May 2023 06:09:54 +0000
ROA not after: Mon 28 Aug 2023 00:00:00 +0000
asID: 45820
IP address blocks: 14.194.0.0/18 maxlen: 24
14.194.64.0/18 maxlen: 24
14.194.128.0/18 maxlen: 24
49.200.0.0/14 maxlen: 14
49.249.0.0/17 maxlen: 24
49.249.128.0/18 maxlen: 24
182.156.0.0/18 maxlen: 22
182.156.0.0/22 maxlen: 24
182.156.4.0/23 maxlen: 24
182.156.8.0/21 maxlen: 24
182.156.16.0/22 maxlen: 24
182.156.20.0/24 maxlen: 24
182.156.21.0/24 maxlen: 24
182.156.22.0/23 maxlen: 24
182.156.24.0/21 maxlen: 24
182.156.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: May 17 06:09:54 2023 GMT
Not After : Aug 28 00:00:00 2023 GMT
Subject: CN=64646fb1-2f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:29:d4:90:f7:b2:ed:f1:cd:65:1e:4f:98:
60:e4:35:1d:ad:0a:32:62:73:3c:e2:0c:e1:27:f1:
06:8b:b5:2c:9b:a3:9b:86:d4:58:cd:be:3c:19:22:
d4:3b:57:ea:55:fe:de:9a:6b:53:de:b2:b3:c3:57:
bf:26:6d:95:40:b9:04:ef:14:76:47:ee:74:37:f7:
8c:1e:3f:a6:22:22:c2:a6:04:99:f2:75:47:a7:0f:
95:37:34:26:35:32:a2:ae:08:45:85:84:32:d2:60:
6d:bd:36:6e:ec:f9:20:a1:b4:10:41:48:58:0f:a0:
58:fd:b9:76:09:95:1f:bf:24:16:d5:9d:06:7a:7d:
e0:60:c2:fa:7e:25:5c:e4:34:86:ff:fa:3f:8a:da:
ae:72:c8:67:bd:c2:9f:e6:88:55:f0:bf:7b:5c:7c:
e8:62:cc:5a:dd:46:57:4f:e7:63:44:7d:97:f9:ae:
68:fc:d6:a1:6c:f5:a0:2a:e3:b2:cc:37:7a:f3:af:
85:45:e6:9c:80:05:ec:0c:92:a2:6f:71:45:ed:d5:
6a:08:a1:75:43:be:37:18:f7:d8:e2:a6:95:40:ec:
38:73:11:e8:d7:cd:80:1d:66:9a:34:ec:23:ad:08:
2a:b6:b2:c4:06:e6:82:6c:ba:11:68:fb:be:62:fb:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:CF:4E:8C:71:63:A0:60:E4:5B:1C:BA:36:D1:03:C3:94:4D:EB
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/70550A28F47911EDAB508B20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.194.0.0-14.194.191.255
49.200.0.0/14
49.249.0.0-49.249.191.255
182.156.0.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:14:63:c4:38:d4:67:56:57:f3:01:7b:85:02:55:21:db:74:
15:ca:d8:62:c8:ae:fd:cb:4b:96:fb:41:65:9e:04:06:35:4c:
c8:08:06:ba:b9:7a:69:2b:0d:c8:40:f6:fe:42:7c:ea:2c:ca:
85:08:c0:7c:fc:56:04:24:c5:9a:39:41:d5:1f:35:3b:98:cf:
bc:01:a3:96:62:2f:43:ae:99:70:aa:29:3a:89:22:99:88:21:
77:7d:a2:21:8b:83:c8:47:3e:bf:05:8f:69:dc:0c:2e:6e:56:
4b:55:6a:be:96:0c:de:b6:d0:dd:47:c6:7c:4f:c3:5c:e9:3f:
c5:27:f3:d9:a7:85:21:d3:f0:47:fd:b9:59:5e:0b:ba:d3:cb:
2f:b8:72:39:10:ec:88:7e:2c:29:39:6a:28:cc:85:dc:06:92:
c9:ed:21:1e:49:31:07:00:d2:34:b5:06:d5:4c:5c:0d:1d:2c:
b4:28:ac:1a:7b:b7:43:d9:d0:94:b9:bc:5d:04:a4:21:15:0f:
48:a1:a4:1b:1a:19:dc:ce:ff:95:ea:2c:a0:a3:06:cc:63:91:
21:99:6d:10:d5:7c:2b:85:aa:84:e4:39:50:ca:3e:a6:7b:1a:
f9:40:9c:94:51:00:12:ee:c1:4b:1d:b2:20:25:be:79:50:a7:
94:95:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org