Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/2D9CB54A5E1011EE8840607FC4F9AE02.roa
File: 2D9CB54A5E1011EE8840607FC4F9AE02.roa (raw, json)
Hash identifier: lTxo7bPdLOaD2mxC4XWL5ydJFXM8ZPTeRARVgNJMA1I=
Subject key identifier: 38:85:E6:7B:17:D9:AC:D3:DF:31:07:AB:15:DC:BB:EE:DB:C2:82:2C
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0CEC
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/2D9CB54A5E1011EE8840607FC4F9AE02.roa
Signing time: Thu 28 Sep 2023 15:03:28 +0000
ROA not before: Thu 28 Sep 2023 15:03:28 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 133542
IP address blocks: 59.152.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3308 (0xcec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: Sep 28 15:03:28 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=651595bf-7979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:c3:e4:cb:da:a7:41:22:5b:71:61:82:24:
c6:90:b9:dc:99:98:e7:3e:fc:e9:70:82:71:fe:2a:
94:d7:ff:2b:39:5b:88:ee:47:a2:50:3e:40:02:54:
14:17:b5:4d:0a:53:cc:9e:25:53:64:90:28:ae:c4:
33:c7:e8:f1:80:8e:a4:dc:63:fa:e6:08:7f:44:da:
d6:c4:7e:b4:91:63:f4:32:a8:9d:25:b6:29:28:c4:
90:92:8f:fd:66:34:99:99:5c:dd:9b:a0:0d:b5:53:
5c:91:52:99:c4:d6:49:ac:80:94:1d:be:bc:f8:3e:
9d:8d:01:f6:f5:dd:c7:67:9b:71:8f:58:e2:be:27:
d2:37:ea:11:26:7d:b4:a5:93:ac:65:ea:01:4c:16:
79:6d:4f:0a:10:10:e2:5f:d4:77:84:08:91:af:a7:
7a:4e:b3:8b:a5:41:c3:44:9b:e3:75:6a:4b:93:16:
11:31:a4:cc:65:98:29:73:6a:5d:7f:28:3b:e3:3f:
96:49:15:95:ab:29:0b:60:5a:63:ff:5c:13:a6:29:
41:9d:fb:57:4c:2c:3a:02:42:8d:ee:83:9f:d7:37:
2d:26:5c:00:1e:eb:5c:9d:c1:c0:a9:aa:35:b4:ef:
fe:57:d3:15:aa:7e:db:b3:24:46:b0:27:f6:71:ce:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:E6:7B:17:D9:AC:D3:DF:31:07:AB:15:DC:BB:EE:DB:C2:82:2C
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/2D9CB54A5E1011EE8840607FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ff:a8:9c:75:0f:f6:6e:77:4f:27:01:25:27:76:d0:01:2d:
36:84:e3:bc:9f:31:52:08:37:53:09:cf:f1:f8:af:ca:f0:2d:
b6:4d:86:eb:73:d8:2d:c2:bd:c0:85:2a:9d:3a:69:b5:96:cf:
17:38:a3:b7:ec:cb:51:23:3f:e0:f4:53:bb:01:86:9d:9d:4d:
38:b4:c4:2d:bc:39:eb:9c:a0:75:a8:00:1d:c3:dc:1e:20:c7:
cb:bf:25:be:d4:8b:0a:30:14:ae:a5:15:fd:9c:c8:b2:df:24:
b2:26:6f:69:64:85:ac:48:71:7d:8b:fc:b8:2e:b4:74:a7:df:
ca:a7:dd:4f:95:24:17:1a:b5:9e:7b:e2:bc:d3:a3:50:68:fb:
32:c3:94:04:04:03:d3:2d:fb:ed:db:82:c1:fc:a7:59:3f:f4:
1b:be:a5:3c:4b:ac:5e:5c:b4:78:43:29:8f:7e:dd:34:fc:49:
e9:f3:c5:b0:59:18:c9:d8:a3:cd:97:36:ca:a6:1c:ce:73:41:
61:d3:69:f9:f2:f7:b6:2d:1d:e0:97:d1:e8:1f:1d:50:ca:54:
cd:d9:11:9d:64:3e:dc:54:e2:15:31:fc:ae:f7:e0:c9:5f:d9:
99:58:58:87:16:41:d6:79:89:81:73:1c:4b:a4:11:de:4c:6f:
cf:0d:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org