Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E129B8D6877911EA9E28DF0BC4F9AE02.roa
File: E129B8D6877911EA9E28DF0BC4F9AE02.roa (raw, json)
Hash identifier: p5DdfuBFSM4S5A574+I57b55jlu9SwBBaOdIcFuZvT8=
Subject key identifier: CA:76:CD:EF:2E:EF:AF:2F:B2:DF:69:BC:4A:7F:A6:2F:1C:30:3E:15
Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial: 0845
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E129B8D6877911EA9E28DF0BC4F9AE02.roa
Signing time: Fri 01 Jul 2022 09:08:38 +0000
ROA not before: Fri 01 Jul 2022 09:08:38 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 136498
IP address blocks: 45.251.228.0/22 maxlen: 23
103.220.204.0/22 maxlen: 23
2407:5c80::/32 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Validity
Not Before: Jul 1 09:08:38 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62beb996-d060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:d8:84:90:7f:49:28:dc:b5:ca:1c:88:49:
6a:b0:eb:3a:9b:f8:4d:b0:e3:52:44:8d:7e:78:bf:
1f:c6:82:35:0c:20:01:02:a2:24:54:f3:92:96:11:
d6:33:2a:76:ba:89:97:9b:ce:8e:e9:d3:16:93:32:
14:04:71:8c:12:ba:53:cb:50:51:74:9c:ca:88:e9:
21:fb:73:82:c9:a2:c6:b2:30:51:47:b9:40:67:9d:
46:5e:be:04:ca:de:5d:2e:03:cb:ba:50:20:6e:a0:
02:56:80:f1:23:f6:9f:4d:28:d0:a3:89:4b:18:0d:
b8:5b:8b:66:43:ca:98:27:6b:34:40:9e:d3:2d:83:
72:47:a2:aa:10:78:94:31:ef:e5:a2:b0:67:71:0b:
e4:c5:f9:63:8b:ff:5a:a8:43:9f:43:33:08:75:36:
b3:ed:73:01:47:53:fc:ad:ed:98:12:aa:42:ed:52:
93:2b:7f:aa:4b:a0:48:f8:5c:7c:cf:8b:c9:c9:c3:
75:3d:65:30:d3:dc:dd:8f:df:a9:35:e1:93:7b:83:
eb:f3:7c:e3:08:1c:29:61:2d:52:8b:13:00:9c:8f:
a8:ff:87:7f:7f:70:c9:d2:9f:b6:09:ae:5f:f1:06:
fb:8c:87:c1:61:c1:7a:c8:44:e1:33:78:c6:2b:a5:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:CD:EF:2E:EF:AF:2F:B2:DF:69:BC:4A:7F:A6:2F:1C:30:3E:15
X509v3 Authority Key Identifier:
keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E129B8D6877911EA9E28DF0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.228.0/22
103.220.204.0/22
IPv6:
2407:5c80::/32
Signature Algorithm: sha256WithRSAEncryption
61:fe:95:e7:87:21:78:86:24:2c:7d:1d:e0:30:e0:aa:2e:a5:
80:22:cd:b6:e8:a0:e6:7f:45:77:0c:75:83:61:6f:79:68:93:
f5:89:3c:3b:4c:98:50:55:c3:50:ec:bc:ed:3d:f4:95:df:cf:
16:1a:b9:31:d2:ab:04:c3:0f:75:a7:f8:cb:68:2f:70:a4:3f:
14:4c:a0:eb:b1:8f:a3:96:23:3c:05:97:1e:1b:73:bb:1f:f4:
2e:39:62:bd:69:bf:79:9a:c4:60:2b:9a:d5:b1:71:ba:f9:e2:
d4:0e:66:4e:39:b7:68:e2:f7:0c:5e:e4:c4:06:dc:6d:b5:8b:
48:c4:05:fd:09:24:8a:b2:49:2b:44:ab:80:a9:fd:56:66:89:
95:75:8d:33:10:43:b9:e6:31:27:81:c3:67:85:6b:ea:fb:50:
4a:f2:a2:c7:20:a7:a8:41:63:ad:be:42:5c:54:b9:1b:ef:b8:
a5:07:45:1b:be:55:7c:5f:04:8c:68:ee:c4:d9:b1:26:ab:32:
de:50:c8:32:9a:54:60:79:ce:29:e6:d8:a4:6f:b7:a5:f0:cf:
42:ab:4a:59:67:65:9d:7a:bc:3b:2c:03:f7:f8:23:c9:f9:52:
f1:73:ba:46:a6:bb:3a:e5:44:17:c8:de:b0:33:a5:aa:a3:cf:
f5:f7:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org