Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/3171DDF4D36F11EBB46E4E78C4F9AE02.roa
File: 3171DDF4D36F11EBB46E4E78C4F9AE02.roa (raw, json)
Hash identifier: eb8sZrLp62LluIY5/jUV5N6PfTqe5KMVuULNHwu26aw=
Subject key identifier: 17:7C:B9:2C:03:71:A8:5A:48:A8:68:80:08:52:66:FB:D5:41:22:1F
Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Certificate serial: 03
Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/3171DDF4D36F11EBB46E4E78C4F9AE02.roa
Signing time: Tue 22 Jun 2021 15:33:29 +0000
ROA not before: Tue 22 Jun 2021 15:33:29 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 38438
IP address blocks: 203.55.208.0/24 maxlen: 24
203.55.210.0/24 maxlen: 24
203.55.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6
Validity
Not Before: Jun 22 15:33:29 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60d202c9-9c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:99:83:2a:ec:22:28:18:67:71:c5:2a:2c:
ad:bc:f5:1c:2f:bf:c6:67:f4:62:10:86:14:b6:6f:
df:e9:c2:33:5d:cc:22:66:3a:0a:f2:0b:59:7c:a3:
f0:1e:84:93:73:0e:ca:15:46:cc:41:b0:2c:7d:f8:
58:ff:d3:db:a3:f9:6e:88:ff:48:3a:17:e1:72:31:
6c:2b:44:aa:13:4f:b0:d1:a6:f1:cd:1a:c8:c3:9d:
6e:8d:05:bb:77:44:67:db:33:2b:f9:dc:b2:3a:f7:
a3:5b:91:1c:87:b9:df:dc:b8:75:d9:5e:3d:21:38:
32:56:02:d1:16:e8:31:29:e4:39:d7:b2:6f:9a:fb:
b3:d0:90:53:f5:57:ba:3c:15:20:d2:f0:74:85:35:
a5:52:12:1f:89:c0:48:d9:b0:7f:a6:af:25:f6:ce:
72:62:61:7c:77:45:f7:3b:a6:94:10:74:eb:b2:0a:
cb:e3:5a:8a:4e:bd:ee:43:b1:a7:bd:4f:b6:83:e5:
10:7e:d2:4a:0b:70:f6:0f:69:f4:19:d9:27:15:bc:
f3:4a:7d:ac:f5:ca:07:d8:bb:bf:c9:6e:f9:da:27:
d1:d6:c1:64:f6:63:79:a3:38:34:ea:d4:0a:ec:8c:
d4:49:2e:62:be:f8:e7:4c:ba:89:73:f7:a1:7e:3f:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:B9:2C:03:71:A8:5A:48:A8:68:80:08:52:66:FB:D5:41:22:1F
X509v3 Authority Key Identifier:
keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/3171DDF4D36F11EBB46E4E78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.55.208.0/24
203.55.210.0/23
Signature Algorithm: sha256WithRSAEncryption
69:4a:42:ee:e2:64:9e:70:50:29:7a:95:bd:12:23:0f:fc:32:
a0:78:76:6f:8a:58:14:6a:93:05:ed:6c:91:b1:06:18:63:d1:
d3:9e:27:dc:4d:f9:a2:e9:fd:bd:7a:84:f4:8c:ac:c1:41:24:
f8:74:2e:77:1a:fe:05:46:cc:17:9f:e4:11:3b:2d:3a:82:e9:
fd:2d:e0:39:c0:d9:e4:1d:ef:b8:20:e9:80:80:59:d4:8f:05:
9b:35:dd:ec:d0:5e:70:f7:b6:5a:11:31:d7:bc:c3:af:95:83:
a9:86:26:2f:75:8d:94:bf:52:2f:f6:b9:49:23:40:68:81:ae:
15:31:2c:03:8f:2b:44:89:b6:93:e8:24:d3:99:d2:32:b9:83:
45:77:84:94:f9:dc:19:69:36:4c:03:fb:bc:4c:1b:08:e3:df:
27:2c:ee:bd:03:59:29:bc:85:15:fe:da:0c:6a:e6:ec:d9:6d:
1a:8f:03:e9:dd:8d:4b:24:d8:e5:44:d4:5c:29:72:71:6e:f9:
43:1d:07:79:95:21:a8:a7:af:19:4e:f6:21:54:ca:6b:89:ad:
8d:6c:10:0f:3d:ac:5c:53:19:49:11:d4:d8:e0:e9:4d:40:ac:
5b:82:6c:88:14:16:4f:3a:58:10:a7:d7:d8:a6:1c:02:36:2d:
c8:1a:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org