Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/04E74320567611EC98373B5BC4F9AE02.roa
File: 04E74320567611EC98373B5BC4F9AE02.roa (raw, json)
Hash identifier: Zp+IdfOM6W1HG3I6vk7pJk3vTx/Jb4xIB92dDxIGf0A=
Subject key identifier: 81:3F:17:66:FC:8F:2C:52:69:E2:2E:8B:A8:CF:69:EE:CC:E0:22:2F
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 1E
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/04E74320567611EC98373B5BC4F9AE02.roa
Signing time: Mon 06 Dec 2021 09:22:23 +0000
ROA not before: Mon 06 Dec 2021 09:22:23 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 210542
IP address blocks: 103.177.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Dec 6 09:22:23 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61add64f-1129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:d3:c0:56:84:f1:2d:5a:29:9d:0c:3b:21:
b9:17:cc:b8:cb:ea:01:7f:e4:e8:6b:82:38:b9:6c:
69:58:3d:bf:0c:65:4c:c7:bf:81:ad:be:86:82:ad:
89:a8:c6:89:06:ce:3b:92:1c:92:db:ad:f3:58:0f:
89:c1:af:b2:51:01:0b:f8:7b:51:36:bb:5a:bd:2b:
2b:a6:d7:e8:b5:a1:22:f5:c5:d4:4d:bc:bd:e3:d3:
e8:04:c8:e9:3e:51:72:6d:0f:24:6e:d1:80:fa:f0:
38:97:e3:84:79:ab:2f:74:01:a1:f6:64:c2:5d:ad:
44:77:5a:fc:7a:6e:13:8c:85:ee:f2:56:4e:1e:08:
2c:98:c5:13:74:db:94:82:50:06:bb:29:5f:60:e3:
d4:8b:53:6e:c7:89:fc:1e:7a:20:be:a6:e6:13:c4:
4f:9a:36:e8:9e:51:6b:38:80:5e:e1:d6:b9:3c:e0:
da:2c:15:76:75:52:fd:64:0d:23:be:8d:28:8d:45:
5f:4d:b7:35:1b:90:e1:01:6f:22:c6:20:c6:84:12:
6e:23:a2:f5:33:23:e4:cd:e8:34:af:c4:3f:18:a3:
98:41:97:7f:b7:ee:ea:8c:6a:c9:9e:1e:66:88:31:
bc:c8:ad:60:3f:bb:c8:1d:db:13:69:b3:26:ed:53:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:17:66:FC:8F:2C:52:69:E2:2E:8B:A8:CF:69:EE:CC:E0:22:2F
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/04E74320567611EC98373B5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f7:12:e8:3f:c8:b0:f8:36:47:b4:b7:70:94:cc:4b:b6:00:
48:6f:c3:cf:c2:1e:9c:9a:17:4d:c4:89:1b:6c:f3:45:71:5b:
b1:a7:7a:f9:ff:89:e5:12:af:34:eb:f1:d8:97:68:a3:1b:e5:
c3:86:81:f0:d1:41:e9:9b:34:84:02:b9:31:54:99:31:06:4e:
bc:c5:51:e1:45:21:2a:e9:24:19:e4:23:72:50:b2:d7:c8:c8:
f0:5a:7a:46:cd:ad:58:a0:73:ed:68:ca:94:d0:b2:9d:38:40:
3a:cb:b0:44:a1:f9:9d:50:41:e9:49:d8:1c:ff:38:c3:3d:96:
41:d6:c4:6f:de:2e:36:d2:8b:13:c5:47:13:91:54:7c:a0:12:
db:72:d5:3d:94:c0:b1:7d:ff:9c:36:8b:6b:fa:3c:5c:d2:db:
25:d5:7a:fb:51:00:af:db:9b:4d:44:8c:03:d4:7d:91:8f:e3:
b3:f3:5d:aa:82:7f:67:06:5d:46:8f:6d:dd:e1:c5:52:8c:fe:
ab:8f:d7:ba:9f:61:74:08:21:70:b5:8c:37:bf:4d:47:47:30:
6f:c9:97:e6:9f:f6:b8:f3:a1:49:07:55:92:0d:c7:5a:dd:9d:
ee:b9:33:f4:76:34:0f:07:59:8d:2c:17:45:3d:04:6f:a7:43:
c6:35:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org