Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/5E535A7C589211EA872AE786C4F9AE02.roa
File: 5E535A7C589211EA872AE786C4F9AE02.roa (raw, json)
Hash identifier: sEgvRCappIw+BxUNMpvuAFjBWSBCKWcHFj+XZWobqUw=
Subject key identifier: 1E:DB:B3:BA:AD:98:BC:0D:63:B6:82:95:2A:94:17:2A:51:1F:B7:0C
Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Certificate serial: 2F11
Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/5E535A7C589211EA872AE786C4F9AE02.roa
Signing time: Tue 29 Jun 2021 15:10:54 +0000
ROA not before: Tue 29 Jun 2021 15:10:54 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 45871
IP address blocks: 180.94.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12049 (0x2f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB
Validity
Not Before: Jun 29 15:10:54 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60db37fe-9fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:20:ea:04:b0:1e:13:b6:a6:2c:fb:c1:96:
04:aa:e1:d5:6e:12:6e:f6:65:f5:99:76:33:5f:48:
30:fe:c4:aa:54:cd:21:f7:59:7a:92:6a:95:64:3e:
19:d9:3d:d9:57:0f:d5:05:f9:13:ba:fb:50:46:49:
aa:f0:3c:dc:05:71:59:4e:12:44:f6:d1:e1:c1:0e:
c8:15:fd:88:33:60:c2:95:e2:a5:42:b8:1a:a2:95:
5e:ee:68:f5:37:fd:97:f0:fd:7d:7f:9b:99:d7:db:
9c:2b:db:15:c2:7a:63:32:52:eb:c0:72:14:6a:76:
d2:a8:a5:08:d0:b7:43:44:d8:eb:ca:98:fc:82:cc:
12:83:2b:39:3f:4b:3d:03:43:a0:ec:23:13:61:2d:
d6:ca:3e:60:9e:8d:eb:85:94:0f:2b:b4:a2:6f:93:
2e:12:40:3e:25:64:0d:7e:dc:ab:cd:33:14:af:c8:
67:9c:d7:b3:71:ea:35:e7:8f:60:4b:a5:e2:40:19:
c4:d6:59:27:2b:45:a2:87:10:41:f0:83:1b:fa:2b:
9b:94:dd:b2:3a:36:1c:8d:1f:76:20:8b:1c:1d:a2:
58:1e:5a:f1:49:ed:df:7a:4a:06:a3:ee:af:16:73:
7e:5b:12:a2:a2:40:cf:cf:be:ef:4a:0c:cf:96:62:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:B3:BA:AD:98:BC:0D:63:B6:82:95:2A:94:17:2A:51:1F:B7:0C
X509v3 Authority Key Identifier:
keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/5E535A7C589211EA872AE786C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.232.0/22
Signature Algorithm: sha256WithRSAEncryption
84:ca:db:3d:54:10:2d:67:76:91:8b:19:ba:44:a0:5a:c8:83:
c0:50:c7:2d:6a:54:1b:90:10:c2:a8:e9:07:f4:ab:3d:fe:d8:
76:1d:f7:71:9b:3b:8d:ec:e8:cd:bc:05:12:11:85:cc:96:00:
9c:eb:4f:99:57:09:94:a5:e0:8a:5e:da:04:74:be:84:52:ba:
f9:5f:29:5b:4f:1a:df:c5:64:eb:19:20:72:61:8d:13:6d:b5:
17:4b:53:b0:31:05:6c:0d:2c:11:54:b0:0d:c0:73:b9:f0:e2:
53:6d:8b:14:3f:8f:8e:f9:a8:8e:54:b2:1d:81:dd:47:f3:7b:
78:da:a2:4f:a2:e0:40:65:fe:78:ec:56:cd:d8:08:c5:04:d8:
3d:26:35:f5:64:ae:e6:09:82:7f:b7:b5:96:cd:22:99:23:68:
f0:13:82:f4:77:7e:ad:03:49:ee:0d:1f:35:0f:bd:8e:a5:ec:
a4:0d:77:e7:00:49:87:da:2b:43:37:bc:0c:3b:01:82:92:fe:
d6:5a:0e:07:67:24:86:96:7a:84:e3:ba:d6:f6:b4:90:61:9a:
0f:b4:55:a1:c4:c6:26:cd:34:d6:6c:bb:06:d9:05:bc:2b:32:
a5:79:fe:bc:c8:49:8e:80:f1:af:70:d9:f1:a6:f6:aa:22:f0:
d9:be:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:48 2024 by rpki-client on console-ams.rpki-client.org