Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/83000EF0629311EABCEC5B34C4F9AE02.roa
File: 83000EF0629311EABCEC5B34C4F9AE02.roa (raw, json)
Hash identifier: vKcbrslO5fKi2SaIWx2GYc2F/1EnpJEJCEhOKslKGxs=
Subject key identifier: 20:69:39:46:FB:91:5A:E3:11:20:BE:B3:53:BB:3E:16:F6:CB:0A:A0
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 05D1
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/83000EF0629311EABCEC5B34C4F9AE02.roa
Signing time: Tue 21 Sep 2021 10:08:22 +0000
ROA not before: Tue 21 Sep 2021 10:08:22 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 136750
IP address blocks: 223.119.52.0/24 maxlen: 24
223.121.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Sep 21 10:08:22 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6149af16-6dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:08:b5:1b:5b:ed:db:b7:5f:04:73:04:e8:
3a:e6:b9:32:ef:c9:f4:88:97:c7:3c:8f:40:7b:6e:
48:ee:97:2b:18:57:cc:76:09:1f:7c:ba:ec:ef:a7:
b5:26:46:87:83:e6:d9:2b:ae:f7:9a:72:82:d8:1d:
a1:4c:53:0f:31:e4:49:ea:8f:18:20:a7:ca:95:6c:
34:a6:2a:d5:f1:01:0d:0b:e8:4e:77:84:30:a2:23:
11:f2:be:70:df:c9:70:e9:20:2f:56:ca:3a:6e:3c:
c8:8d:f0:2e:4b:2b:06:ca:f9:03:ae:c0:f0:6c:e7:
67:78:e5:4b:5b:72:e6:a2:63:4f:9f:11:e0:8b:f2:
12:45:95:3f:c6:f0:e6:2c:95:be:35:1e:41:e8:59:
d6:94:65:0e:1f:f5:6d:df:b1:41:9e:51:e5:20:cf:
71:8b:cc:fd:61:a2:7a:41:23:9b:66:0e:6b:06:5e:
34:18:ab:62:58:00:0f:d7:f5:83:49:45:be:cd:c8:
d7:79:ff:fe:69:9a:c1:1b:91:7c:9f:db:96:9a:11:
cc:b9:5c:f3:08:c0:b8:34:1c:a8:58:05:43:b3:91:
e1:28:d2:a5:03:14:bd:8b:44:3b:70:f3:d4:e5:b5:
da:79:4d:1c:73:70:88:c5:b8:1a:64:93:80:e7:5b:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:39:46:FB:91:5A:E3:11:20:BE:B3:53:BB:3E:16:F6:CB:0A:A0
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/83000EF0629311EABCEC5B34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.119.52.0/24
223.121.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b5:da:83:0b:08:54:db:df:aa:b8:cd:e5:6a:63:4a:9b:ad:
d0:4a:48:0a:6d:b5:2a:63:53:39:f0:7c:98:b8:35:2c:61:ec:
60:6a:ef:3a:64:8a:3a:7d:9e:bb:e8:d1:34:02:1b:e4:82:20:
f4:8b:ef:d6:a7:5d:51:42:3f:30:af:a9:30:92:df:f5:19:fb:
da:e2:c4:bb:c3:6f:06:e1:9e:be:81:2a:41:5b:2b:c5:6e:11:
6a:81:15:9a:fd:d4:40:8d:59:c3:a9:69:4c:0d:22:4e:df:dd:
d8:3b:2f:99:f8:64:5e:e2:98:29:6d:a2:83:65:a0:b9:23:82:
7c:24:40:bc:a2:21:6e:f8:9b:3e:e5:89:65:f5:54:bd:4f:38:
14:93:b7:08:85:71:36:dd:db:eb:60:10:b2:c1:9b:1a:30:04:
43:d9:6e:b0:6b:fa:ee:0a:b2:47:33:27:4b:ff:dc:42:07:63:
aa:05:6b:ef:e6:fb:df:df:55:84:00:1e:ac:f0:8e:42:aa:37:
e3:70:11:91:1c:b9:39:5c:a7:ba:e9:aa:69:0a:0a:19:48:f0:
6f:79:91:fb:ff:ff:76:ae:15:fa:8f:e4:1c:f7:a7:37:e1:1e:
ef:e5:22:f1:97:23:08:68:6e:79:6d:b8:51:27:31:c5:22:ca:
de:db:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:37 2024 by rpki-client on console-ams.rpki-client.org