Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
File: 0BE50A78AD0911ED8435065FC4F9AE02.roa (raw, json)
Hash identifier: WIgY2bxPpY120w6o7bczX/229kSwaGMb6uX8I+zWQhY=
Subject key identifier: 0D:03:5E:9A:FC:A3:35:10:52:CD:1A:DE:96:B8:B7:7E:17:2D:DC:32
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: D9
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
Signing time: Wed 15 Feb 2023 08:36:23 +0000
ROA not before: Wed 15 Feb 2023 08:36:22 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 150006
IP address blocks: 2400:9ce0:5000::/36 maxlen: 36
2400:9ce0:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Feb 15 08:36:22 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=63ec9986-1521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:82:69:ba:10:0f:8e:84:08:ac:08:39:a6:fb:
1d:3a:a3:4e:c5:14:ce:23:9c:01:d9:22:a8:01:3b:
ce:7f:18:dd:16:b8:98:ba:44:51:2f:05:99:c8:d8:
4e:82:4f:77:c8:0e:cd:28:4c:ed:1d:60:75:b9:32:
82:33:2b:c9:ef:83:74:e5:be:a2:cd:d2:f1:e6:d8:
9f:10:dd:7c:2e:59:e6:c3:6a:c0:96:91:04:78:a4:
e7:55:13:b5:2b:64:72:54:ee:7b:ae:18:44:f1:e9:
2d:ea:68:dd:a0:b0:4b:fe:06:85:91:05:ef:fd:65:
5c:f8:22:86:d9:82:24:5e:09:a7:1c:6f:2e:23:28:
48:bb:9d:29:fc:33:50:31:60:ee:0b:ea:b9:cc:1a:
38:ca:fb:5a:05:c3:cb:99:12:f3:ab:f4:11:73:cc:
c8:ec:81:26:59:12:2a:06:e7:33:ae:71:f6:e0:7e:
3a:bb:22:1b:be:f9:cd:b2:7b:14:a8:3f:99:ff:77:
9b:b1:ab:42:79:de:8f:10:46:38:e3:9a:3d:0c:68:
82:5b:e0:72:e5:5a:3f:f0:c9:96:f6:0b:ca:19:5b:
05:00:6a:f2:9f:28:8f:e8:b7:eb:8e:ab:df:5e:96:
04:06:a0:9f:0d:87:32:66:74:11:c9:9d:35:2c:ea:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:5E:9A:FC:A3:35:10:52:CD:1A:DE:96:B8:B7:7E:17:2D:DC:32
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/0BE50A78AD0911ED8435065FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:9ce0:5000::-2400:9ce0:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:2a:32:6f:fc:52:c2:d0:44:13:96:17:59:23:bd:96:39:ce:
b5:45:d0:a4:af:2d:8d:2b:a1:ae:eb:d5:c4:50:2b:07:51:df:
22:85:2a:f1:98:57:c3:c4:d6:cb:10:59:03:bb:18:f2:99:be:
be:d0:f0:20:3c:82:2b:04:27:f4:fa:78:df:dc:c8:74:18:8f:
9c:28:44:14:3e:71:a7:4c:dd:b7:df:60:eb:3f:18:49:13:16:
41:41:6d:c9:49:78:57:ba:79:6b:ef:be:39:f4:64:a6:3b:cb:
97:e6:ea:cc:c1:3c:b1:00:16:b6:e0:d7:d7:a1:9b:5b:1c:af:
0b:39:eb:c3:75:34:51:c5:ae:b3:c7:21:fd:f9:72:5f:ce:33:
1d:f2:df:64:b4:5c:43:a1:e8:d8:cb:d9:64:ae:a4:93:23:d1:
1f:4a:14:65:71:f8:b2:4a:d7:2c:7b:7f:99:49:8a:23:33:79:
4d:e3:b6:3d:69:5e:bc:58:4b:f5:3c:e1:2f:26:72:77:63:5f:
0d:33:13:ad:e8:c7:65:7a:31:a5:e4:38:af:84:62:73:65:b7:
4c:34:c3:75:20:e1:e8:69:83:d0:ed:93:5b:ff:90:5c:45:50:
12:20:9d:4e:8a:f5:8c:96:b8:eb:5b:54:34:7a:fc:06:92:40:
c9:8c:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org