Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/4C1B7CD8E7D611ECB3E05318C4F9AE02.roa
File: 4C1B7CD8E7D611ECB3E05318C4F9AE02.roa (raw, json)
Hash identifier: TV/FxX8wSoMCx37X5r6KAbDwfBGXeiXnQ0YZHyP4RWE=
Subject key identifier: 82:20:0F:0A:EE:6A:07:DE:D7:C8:76:E3:87:D9:AE:A1:EB:15:AC:E2
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 0EE7
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/4C1B7CD8E7D611ECB3E05318C4F9AE02.roa
Signing time: Thu 09 Jun 2022 09:26:53 +0000
ROA not before: Thu 09 Jun 2022 09:26:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9902
IP address blocks: 167.179.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3815 (0xee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Jun 9 09:26:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a1bcdd-0a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:b1:5b:f1:97:36:ec:48:2a:db:f5:8a:e0:
30:84:7d:78:77:fa:1b:f2:d0:bd:9d:c0:3e:7b:91:
61:1e:9c:2a:c5:20:8f:fe:ab:71:33:7a:b4:65:bf:
2c:f0:09:83:d0:ed:1e:b9:95:f8:9e:d9:62:9f:17:
be:b1:68:ba:bb:ed:9b:2a:d5:b5:d1:96:5a:f0:27:
70:c5:61:7f:01:3a:11:f4:3b:aa:68:04:65:1f:5b:
0b:4f:5a:ee:e0:77:91:a3:a4:2a:37:e6:25:98:e7:
de:6b:86:7e:c7:e9:b4:ba:c8:fc:25:96:06:10:8d:
9b:1b:c4:69:46:18:10:d3:c2:7c:91:13:19:c0:fe:
34:4b:57:90:32:09:43:3c:ae:6c:96:1d:45:43:ab:
65:2a:6d:9d:4b:b2:7e:a3:b0:30:a6:3a:9f:06:37:
46:61:a0:5d:dc:e5:b5:f7:ee:8b:af:cf:ac:50:82:
21:f3:2e:f4:a4:fe:89:90:f0:02:5b:4e:05:16:fa:
43:b5:fd:12:0c:fb:04:b7:84:9d:a7:73:99:a8:ff:
82:ce:b5:bb:98:b4:46:b1:a0:7a:5e:c7:6b:0a:2c:
20:ef:7d:d9:99:d5:5c:85:8e:e3:21:b3:cc:7c:b6:
a2:91:fa:b0:68:db:a3:8f:de:fb:b4:22:ef:87:24:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:20:0F:0A:EE:6A:07:DE:D7:C8:76:E3:87:D9:AE:A1:EB:15:AC:E2
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/4C1B7CD8E7D611ECB3E05318C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.179.60.0/24
Signature Algorithm: sha256WithRSAEncryption
51:df:5b:4b:43:23:eb:25:5c:f8:0a:aa:4b:f8:53:d7:23:62:
09:7a:11:9e:e2:4c:e8:5c:b5:36:3d:48:07:81:46:38:80:9a:
a0:53:c7:fe:0d:00:15:d7:e0:9b:82:f5:1d:1e:75:5e:c5:f3:
87:c9:dd:37:8c:8d:18:01:a7:ff:98:4f:be:a4:5a:c2:26:50:
bf:fc:65:8d:fa:08:c9:3b:e0:80:49:25:27:56:67:0e:a1:30:
3b:af:ad:3e:71:a8:f8:e9:fb:59:fa:25:f6:c5:e4:f0:f8:c2:
37:3a:24:4b:ab:06:17:8f:43:91:59:f2:c5:de:5d:4e:58:74:
2e:eb:e3:a5:a1:24:aa:40:21:34:82:77:e9:ab:9d:13:0a:66:
18:e0:83:e2:4f:c2:62:2d:22:01:5f:b7:06:dd:b9:48:54:f3:
4b:00:6d:9c:87:5a:ee:3b:1c:d5:20:5e:b5:bd:6d:c9:91:26:
1d:9e:0e:94:95:b9:1b:7a:7a:04:41:ae:21:b2:83:64:6d:b9:
6c:53:58:7b:84:80:d5:cc:be:1c:02:8f:1f:b0:72:97:82:dc:
8f:77:56:0a:a8:e3:be:fb:68:49:62:6c:75:87:18:87:4d:fb:
5b:0a:b8:d8:e0:97:b0:4e:b6:80:7a:de:59:a8:77:b2:4b:cf:
5a:0d:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org