Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/B512C8B2E0D411ECB6C0B01CC4F9AE02.roa
File: B512C8B2E0D411ECB6C0B01CC4F9AE02.roa (raw, json)
Hash identifier: 3RzRfIfAWA4oxNh21xAiWNXqpKRHDTaIcl1GZaRrE30=
Subject key identifier: AC:E8:24:ED:4C:A9:22:3B:6E:78:2C:B1:A5:7A:F2:AE:CD:0B:CA:9C
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 0606
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/B512C8B2E0D411ECB6C0B01CC4F9AE02.roa
Signing time: Tue 16 Aug 2022 11:19:45 +0000
ROA not before: Tue 16 Aug 2022 11:19:45 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 136778
IP address blocks: 45.125.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Validity
Not Before: Aug 16 11:19:45 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fb7d51-e2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:1b:2d:96:c8:8c:02:de:fa:32:89:e7:37:
7a:e6:5a:22:30:de:06:79:d4:61:7c:9e:75:67:31:
8f:12:52:1c:c8:23:d9:2b:7f:e1:73:ca:38:82:65:
e9:3f:c7:56:a2:bf:02:c7:07:3e:33:45:52:48:85:
ca:4a:bd:ec:b5:34:5a:85:a9:5e:d6:50:e0:a4:f7:
15:25:41:78:d3:58:16:9c:99:5c:e4:6e:1e:43:22:
f7:39:29:dd:34:af:8a:a5:8a:29:c9:34:cc:dd:e6:
92:1c:ed:46:92:a9:f2:bf:9f:0c:9d:74:da:de:bd:
b1:02:2f:65:4c:d0:60:25:1f:14:ed:57:5d:72:98:
2f:36:3f:95:2e:74:11:e6:87:85:8c:b4:36:1e:1a:
db:50:5e:c5:72:74:cc:70:f3:c0:4a:2f:c6:a2:38:
4a:b0:e4:44:28:d9:05:70:7c:c1:cb:2f:e4:19:f1:
00:6c:72:b7:e2:86:4b:98:d3:8d:19:d3:47:ae:5c:
01:a9:50:a9:b1:08:64:74:ee:e3:22:e2:11:7b:6e:
8d:2f:f1:d8:10:02:1b:c1:50:4b:70:dc:43:aa:41:
cb:c3:85:84:e2:71:fe:74:5e:c7:54:96:50:de:9e:
f7:8a:2e:c4:8e:b5:1f:7d:b5:5b:6c:32:21:06:1a:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:24:ED:4C:A9:22:3B:6E:78:2C:B1:A5:7A:F2:AE:CD:0B:CA:9C
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/B512C8B2E0D411ECB6C0B01CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.51.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:df:d6:04:5e:b2:9a:4d:72:ca:a6:c8:1b:bd:cb:53:51:06:
57:1b:fe:7b:dd:87:6a:7c:0d:a4:cf:1c:6f:19:fb:ad:84:0d:
3e:22:8f:1a:d0:7a:82:9d:d0:80:10:e7:fa:25:ea:76:e4:55:
42:88:ac:04:3f:20:d3:3e:28:fc:41:12:23:f4:36:a8:bf:4e:
20:f5:0b:d5:7a:6b:19:71:5d:97:21:4b:6b:05:c7:f1:61:cf:
a8:85:5c:8d:3a:5e:33:79:b8:69:10:c3:8e:2a:89:f1:c5:1c:
d6:70:50:42:de:fd:66:3e:9c:3d:01:b1:06:ce:3d:c0:31:cf:
d7:88:77:89:bd:4b:a4:cc:f7:db:f7:84:2e:a3:cf:f0:6e:c6:
cd:29:f1:5a:1a:7f:0b:72:28:5c:b4:c5:6a:c4:7d:c5:55:97:
c6:e4:cd:7c:22:b5:dd:a8:fd:4d:d4:25:51:c5:a2:ed:e9:b8:
46:6e:f7:36:35:74:19:d4:4d:6f:31:d6:44:8c:32:6d:88:73:
dc:c6:fb:f0:3c:43:7f:63:db:2f:4e:fb:e3:01:5c:1e:8a:d2:
41:eb:77:20:70:15:8b:dc:d5:19:26:4d:7f:69:ab:0d:d1:cc:
f7:bf:58:fd:cd:f2:cc:79:2a:a9:d8:85:fa:f9:36:a2:18:21:
ea:15:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org