Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/6ECA527C6DB211EA8AEE644BC4F9AE02.roa
File: 6ECA527C6DB211EA8AEE644BC4F9AE02.roa (raw, json)
Hash identifier: VVheik22jLMUrXFXElXVpmR2rOD1T3iPm0G7koRuohM=
Subject key identifier: 46:2E:6F:2E:B9:3D:45:87:27:4F:FB:49:99:7C:8A:60:01:8C:BB:D9
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0DE4
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/6ECA527C6DB211EA8AEE644BC4F9AE02.roa
Signing time: Wed 03 Aug 2022 19:05:51 +0000
ROA not before: Wed 03 Aug 2022 19:05:51 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 140362
IP address blocks: 2404:f4c0:f580::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 3 19:05:51 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62eac70f-68a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:8d:c0:01:09:0a:7e:d9:48:81:5f:8a:6a:
49:dd:51:00:45:6e:51:24:3c:b3:05:95:6f:b6:d1:
89:ab:c7:c1:21:da:1c:9f:31:45:98:f3:bd:8a:7b:
f6:7d:78:29:21:d4:dd:98:88:a4:fc:5f:95:ab:29:
e2:0a:66:5f:ab:39:7f:fd:05:41:3a:22:e7:20:41:
4a:58:ad:8a:b3:14:57:e1:01:38:ff:aa:c4:62:98:
7d:f2:83:f7:ac:14:06:6e:04:10:36:7c:c9:33:52:
68:ae:27:1e:95:0f:6e:8e:de:88:c8:ab:c8:cd:a2:
4f:f9:49:c4:9d:66:83:3d:6f:ab:6c:74:7d:fe:8b:
77:c8:0c:ea:69:c8:64:1c:1f:82:e9:b2:d8:26:4f:
ce:36:dd:51:8c:d2:f9:4f:8d:9f:5c:71:d7:c7:21:
4d:77:1f:68:3c:b1:8d:2d:61:7c:d8:96:0a:d1:a9:
bb:d5:f7:71:3f:65:0f:a9:cd:2d:68:c3:6a:f2:9a:
51:38:aa:f0:9f:b3:65:35:1d:cc:21:80:48:3a:6c:
43:0a:a3:90:40:1d:40:8a:25:13:4e:34:85:4d:75:
38:d3:48:07:1c:44:1e:57:0a:36:2b:23:c9:c1:61:
a0:8a:81:45:2e:c4:44:2c:dd:81:04:31:89:15:58:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:6F:2E:B9:3D:45:87:27:4F:FB:49:99:7C:8A:60:01:8C:BB:D9
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/6ECA527C6DB211EA8AEE644BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f580::/44
Signature Algorithm: sha256WithRSAEncryption
7a:9d:38:c6:3c:05:47:bd:4a:33:a7:10:e8:54:81:ab:26:51:
c7:2b:eb:54:93:8d:83:0c:01:20:f9:35:1d:d2:db:ea:28:c3:
f2:52:2f:71:2e:cf:e7:2e:45:68:1a:e3:6e:8b:0c:ba:ed:47:
b8:2a:0b:4b:ac:e4:07:e8:09:2e:28:a7:ab:0a:0a:6e:5a:e6:
ef:c3:3c:e6:cc:40:7d:0c:a7:df:32:2a:5a:45:d6:12:1e:1c:
2b:ac:92:00:61:fd:a9:29:e2:22:ce:b3:b6:38:0d:d5:1c:0e:
43:1b:d1:86:31:16:2b:ef:f2:e0:4c:20:e5:f4:16:89:f8:71:
d5:f1:a9:32:b1:6c:c8:78:a6:6f:ce:b1:3c:b7:e4:db:27:fa:
12:26:75:52:e0:b7:d2:75:3a:30:af:96:7a:d9:ec:7f:e9:56:
f2:6e:45:66:54:9f:b4:21:bb:a1:69:16:84:3b:68:b2:39:8d:
e6:df:b4:ba:65:85:43:72:d5:62:71:87:1e:fd:21:81:f3:c0:
81:c9:86:5f:55:b5:67:6f:94:b5:04:9f:29:7f:0b:1d:ea:52:
35:d9:28:50:97:f2:d4:3b:ca:dc:7c:40:94:bc:f7:6b:d1:aa:
f9:fa:f9:0e:15:52:1b:e9:2b:fd:4e:3d:d5:fb:5d:74:b1:13:
f1:b6:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org