Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
File: 37D48B30F65C11ED84ECEF0AC4F9AE02.roa (raw, json)
Hash identifier: qRRAtYjF/vUelTw0czOTs8pT76drNslh1xpXFhOmOic=
Subject key identifier: 94:FD:52:DF:FA:74:4D:54:F0:6E:2F:7A:24:19:5B:CB:33:20:0C:3B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0B95
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
Signing time: Fri 19 May 2023 15:45:45 +0000
ROA not before: Fri 19 May 2023 15:45:45 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 142127
IP address blocks: 180.178.184.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
223.29.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2965 (0xb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 19 15:45:45 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=646799a9-56cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:69:88:2f:ed:c3:95:4d:ee:9b:81:22:00:
65:45:d3:90:24:18:83:d8:f2:59:39:37:11:12:ff:
db:51:d7:31:88:28:a8:76:99:dc:33:40:78:b9:9e:
51:67:c5:a7:60:fe:98:53:98:dc:85:01:1b:42:68:
d6:1e:07:1a:b4:9b:3c:96:b4:08:0d:a2:ec:77:56:
39:91:fc:53:14:d8:23:12:cb:42:8f:44:dd:1c:24:
49:25:7c:13:68:14:f5:a8:17:f3:99:3c:b6:35:fd:
ea:23:77:2a:5d:c8:db:9f:b9:8e:44:47:07:c6:55:
30:b3:1c:f3:26:99:6f:20:41:30:db:e2:73:e4:6c:
d1:95:85:14:1a:35:a6:1f:a9:b4:cf:5b:ac:c1:c5:
2d:48:a0:82:67:1c:a5:71:48:8c:bd:9c:18:f8:92:
2c:99:c3:55:35:0f:78:e3:6d:5a:a2:6b:06:cd:8d:
69:61:3d:1a:fa:80:61:44:f9:a2:d1:a6:1e:81:6c:
64:95:c0:20:4a:40:d4:5e:fb:1c:93:f3:b8:20:bb:
d7:8a:88:74:66:ff:99:5c:f7:4f:71:61:9b:94:f2:
52:33:05:d1:21:d5:9c:e3:5f:56:ac:84:66:32:be:
6e:f4:a0:c0:e7:a0:68:32:c9:51:1c:7f:97:9a:9d:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FD:52:DF:FA:74:4D:54:F0:6E:2F:7A:24:19:5B:CB:33:20:0C:3B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/37D48B30F65C11ED84ECEF0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.184.0/24
180.178.186.0/24
223.29.224.0/24
Signature Algorithm: sha256WithRSAEncryption
00:53:e4:65:9a:b0:23:09:c7:bc:21:ee:63:6e:66:54:99:7b:
97:1b:d3:73:5a:ef:95:7a:6a:81:8d:91:96:31:f1:8b:5f:a0:
09:17:be:e3:79:13:21:6f:51:04:93:f7:f6:89:56:e1:05:a5:
24:c4:84:e2:b1:31:6e:5d:b9:3d:d7:de:41:66:d1:5d:a6:03:
0e:cd:0c:66:87:34:72:35:fa:8a:f5:00:31:91:a3:6a:72:be:
fb:c8:c0:25:41:64:4d:80:05:39:81:fb:98:11:5b:89:b6:e1:
e7:9a:55:77:33:82:37:04:3f:4f:eb:2c:a7:ab:36:20:a5:42:
46:45:36:ae:04:85:d6:c1:3d:f9:7c:47:7b:63:3c:3b:3f:5d:
7e:2a:58:f3:03:9d:62:00:7c:c9:1d:c9:16:cd:cf:97:96:35:
9c:f6:28:50:85:67:c5:13:4a:d5:ba:91:6f:fb:0d:3f:8a:8d:
34:d4:22:c4:44:e6:28:dc:0a:0f:a5:35:3c:85:80:7e:75:0e:
bc:d0:0f:e8:6e:79:f6:a6:91:ab:e5:50:41:36:a3:b7:ed:fb:
cc:32:44:09:36:80:bd:70:44:3f:ce:e5:28:a1:2c:83:62:d9:
61:f8:98:5c:79:a7:2c:39:83:6e:cb:f2:a8:2b:a0:4d:83:4c:
45:6c:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org