Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/10C34112CFED11ECA4798D14C4F9AE02.roa
File: 10C34112CFED11ECA4798D14C4F9AE02.roa (raw, json)
Hash identifier: 25rR1amU9ID4sFCvyCVaT0kavz2+YRi14FW5yARJ8AE=
Subject key identifier: EE:D1:D0:5E:EB:41:8A:93:4B:79:91:B1:E6:84:AA:A2:05:C8:B0:53
Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial: 0758
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/10C34112CFED11ECA4798D14C4F9AE02.roa
Signing time: Fri 14 Apr 2023 22:39:33 +0000
ROA not before: Fri 14 Apr 2023 22:39:33 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 398791
IP address blocks: 2407:1c00:6200::/40 maxlen: 40
2407:1c00:6300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Validity
Not Before: Apr 14 22:39:33 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6439d625-16ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:5d:9b:2e:b8:0c:3d:24:4d:81:81:98:3d:
c5:dc:d2:bd:0c:5b:cc:5f:61:b6:04:ff:d1:4d:a9:
b3:1a:a4:21:fa:8c:fc:a1:b1:51:24:7b:ae:37:77:
a1:59:aa:b2:09:21:ef:30:36:0d:4d:0c:b3:96:d3:
c0:7e:b2:8d:90:eb:a1:3e:48:4b:de:6e:5d:be:90:
5f:ed:3e:f3:f6:10:a5:46:27:d4:c3:a1:b7:1b:22:
b2:a5:22:a1:9c:47:67:f6:b4:59:0d:ff:a4:4e:58:
48:4a:b1:d4:37:ca:18:dc:5d:b9:5d:71:93:46:06:
dc:af:af:c6:ee:1e:ae:b4:6f:ed:ab:1d:d3:f7:9e:
cf:31:9e:3a:8d:d5:2b:f7:8a:e7:98:ea:68:ea:f0:
54:3a:a7:1b:bc:8a:74:5f:1f:99:ae:c0:b6:8a:dc:
82:27:68:52:fb:3e:47:b3:ec:78:11:0c:2b:32:e1:
cf:1b:f9:b9:3c:92:1e:6a:50:d2:a0:83:5a:70:47:
0b:0e:59:d0:e1:41:f5:3f:73:dd:1a:5c:cc:21:7a:
8c:51:4a:56:26:ef:3c:6c:d5:20:61:c3:08:6a:e6:
5f:ed:2a:16:67:12:1e:6b:7c:25:12:f3:76:b2:b3:
08:5d:46:47:4f:8a:09:01:bd:a6:be:b3:86:e6:5f:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:D0:5E:EB:41:8A:93:4B:79:91:B1:E6:84:AA:A2:05:C8:B0:53
X509v3 Authority Key Identifier:
keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/10C34112CFED11ECA4798D14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:1c00:6200::/39
Signature Algorithm: sha256WithRSAEncryption
03:9a:17:5f:83:33:d6:e2:1d:40:e9:41:23:7e:17:8d:8c:dc:
ef:a5:e8:8f:28:2f:3c:ba:0f:59:51:e7:d3:b6:81:4d:a6:76:
57:1e:88:cb:ed:e5:67:ca:7e:64:3d:0c:c2:c4:8b:bc:8d:f1:
6a:80:b3:78:0f:e2:a2:8b:25:8d:24:b1:d6:5b:2e:85:13:93:
9b:73:7b:0c:c8:fc:1a:49:52:f5:ef:cf:59:2f:01:38:09:8b:
a5:24:a6:6b:4a:fc:a7:2d:45:f8:11:b7:8e:b9:f5:69:26:b9:
8c:9d:cc:3a:00:69:4a:cd:38:9c:20:c9:20:9e:b2:70:8b:0e:
dd:c4:4e:f6:eb:07:4b:c3:e0:59:71:97:ae:eb:0b:5a:dd:cf:
d2:27:19:05:8f:3d:e2:37:b7:38:64:8c:52:80:c8:e8:62:af:
d1:d0:74:72:a5:01:d3:58:3f:8f:ca:79:f4:2f:ed:0b:91:58:
45:bf:c7:94:5f:b1:9d:88:f3:08:ff:92:cb:a9:18:3f:6f:44:
d7:e0:bc:54:48:92:8d:e4:c6:fb:64:c0:0d:d2:41:a9:1d:b7:
57:f3:c7:5d:c2:78:00:23:64:24:d4:1b:68:ce:9f:90:ed:dc:
b4:01:b0:54:93:f2:85:ad:40:1e:a9:ab:72:01:e2:70:f3:b3:
2e:12:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org