Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/1049F11ECB5511ECA652C12DC4F9AE02.roa
File: 1049F11ECB5511ECA652C12DC4F9AE02.roa (raw, json)
Hash identifier: XUeKlc5e+o+df44OIdejcG3EmAOPWbzPglvfXE+TGes=
Subject key identifier: FE:B3:BB:4E:24:14:A5:C7:47:AE:AE:C2:D4:C4:D6:AA:5A:20:ED:E7
Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Certificate serial: 03B6
Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/1049F11ECB5511ECA652C12DC4F9AE02.roa
Signing time: Thu 26 May 2022 13:00:15 +0000
ROA not before: Thu 26 May 2022 13:00:15 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 36.255.196.0/24 maxlen: 24
36.255.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53
Validity
Not Before: May 26 13:00:15 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=628f79df-29f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:fa:d7:48:c5:22:2b:e2:4d:31:7e:35:f5:
c4:d3:77:86:73:0c:a6:0d:2f:a1:4d:81:fd:5b:7d:
35:76:43:22:30:83:fd:a3:ff:ea:ba:98:c1:f9:ff:
32:2a:cb:d9:e4:1f:39:ee:ba:bf:c8:69:22:6b:a6:
09:37:38:6a:16:d2:6d:3d:0a:bb:95:0c:08:d8:63:
03:58:52:31:af:ee:be:f6:26:a6:68:8a:b6:51:22:
89:43:a8:f2:ad:ef:db:ca:2a:98:9d:33:b1:1d:8a:
2d:f6:9d:5d:8f:0a:fa:b1:34:02:fc:19:9b:b5:9e:
de:cf:76:b2:ff:c3:75:6c:42:22:9a:f0:c0:e4:fd:
a3:9a:5a:62:6d:21:c7:dd:0c:34:60:8e:93:65:13:
7f:2a:73:56:7d:c1:3a:ac:70:53:78:70:ed:2b:a0:
25:a2:19:7b:0b:a7:e3:6d:55:97:bd:ec:c6:0d:8c:
3a:d8:98:7b:42:8d:f7:7e:bc:17:31:b9:c2:65:6e:
9c:ae:d3:b2:ed:57:97:8d:fd:95:67:1e:3b:6a:d4:
f6:2f:25:5e:e2:ec:e6:4f:34:fc:56:9c:93:0e:a8:
8d:89:3b:75:1f:dc:e8:d7:84:bd:66:a5:9f:bf:8b:
98:08:17:c2:c1:b6:9a:23:d3:b8:f7:76:7b:85:5c:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:BB:4E:24:14:A5:C7:47:AE:AE:C2:D4:C4:D6:AA:5A:20:ED:E7
X509v3 Authority Key Identifier:
keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/1049F11ECB5511ECA652C12DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.196.0/24
36.255.198.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:fd:50:23:93:64:6b:e3:8d:b8:4b:dd:31:70:c3:ff:98:85:
45:46:cb:fb:08:ae:22:20:e8:8a:52:24:c5:82:50:2d:2d:46:
71:a9:3b:6c:6c:e3:8b:93:ff:fd:8f:5f:e2:8d:b0:0a:51:5d:
8d:d7:96:2c:52:56:9a:5d:84:b8:23:ed:9d:8f:28:7a:b6:53:
a3:4a:55:67:93:4a:af:8b:18:e9:67:7d:ac:48:70:3f:17:88:
d4:cb:86:d3:3f:23:d4:81:60:8e:3b:04:3e:ad:df:73:0a:b1:
6f:e5:1d:5f:50:a3:8d:88:c5:08:0a:5f:49:7f:21:70:f2:7b:
14:66:e5:ea:97:12:f6:a6:33:9d:52:14:de:74:dc:2b:f8:69:
82:f4:7b:6d:e0:12:3a:ad:bf:39:d2:d8:d5:ab:a2:f0:f4:53:
b2:ef:aa:3a:3e:51:c2:89:7f:be:41:f3:8a:d9:a8:17:be:05:
f6:d1:60:f4:8b:e5:ee:5c:57:3f:5f:ac:99:f0:6c:07:73:7e:
37:7c:e1:99:d0:a6:75:67:d2:eb:e2:98:f3:3e:4a:ae:80:61:
a3:1b:71:b4:e5:cc:a8:63:34:d5:ff:cc:6b:52:1b:e4:45:91:
87:af:ee:ed:14:c9:b5:84:f0:f4:5e:3d:85:f4:3c:53:2f:db:
5a:e9:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org