Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/650A245CB5C411EEB9178E45C4F9AE02.roa
File: 650A245CB5C411EEB9178E45C4F9AE02.roa (raw, json)
Hash identifier: +i3JoA7P6e9wIGpo1zes0Gxbl9ppTTfSqS2UNJvke+M=
Subject key identifier: E6:D6:A4:3B:E2:A7:D3:25:D1:B4:01:87:A5:F2:A2:2C:4B:F8:4B:B3
Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial: 02
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/650A245CB5C411EEB9178E45C4F9AE02.roa
Signing time: Thu 18 Jan 2024 05:42:41 +0000
ROA not before: Thu 18 Jan 2024 05:42:41 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 10103
IP address blocks: 203.175.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Validity
Not Before: Jan 18 05:42:41 2024 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65a8ba51-2bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:64:82:26:d4:2a:3e:ab:e1:1e:4a:92:67:
08:e2:ee:ef:74:5d:32:0c:83:87:f9:a1:b4:9e:ee:
73:c7:e4:c3:ac:1a:39:47:8e:b3:f9:ee:ff:67:a7:
69:1f:1e:b1:ff:b5:51:6c:95:08:d1:df:d8:21:8f:
75:ee:16:fc:9c:af:c7:72:9d:53:32:a5:2e:90:b4:
b3:cc:86:4e:06:22:e5:34:78:6e:27:ff:c2:a5:08:
18:86:31:9a:2f:3c:20:fd:3b:3b:f9:8d:4b:a5:16:
a4:58:da:da:d4:2e:75:c0:47:09:c0:20:00:b0:e4:
e2:db:66:83:ef:49:aa:4a:7c:0e:82:59:56:8a:03:
d8:0c:e6:28:34:a8:e3:3f:bb:42:f0:34:86:77:f5:
1c:24:d6:8f:db:8d:f9:f1:93:e6:3e:4b:66:14:dd:
3f:43:f2:ec:9f:3e:d6:b6:94:24:e6:bb:21:84:ef:
63:0f:96:f0:a8:20:f4:9e:b6:d0:b0:3a:18:38:af:
eb:c8:00:60:13:fe:c6:c5:9d:29:29:be:60:c4:90:
d6:a6:7e:36:a6:a1:50:04:c8:6b:fb:10:53:d2:c6:
11:84:28:19:36:dc:a0:59:57:4d:09:d2:32:c4:7a:
55:20:d3:e6:dc:c7:5e:9b:41:d0:b5:13:4d:14:2e:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:A4:3B:E2:A7:D3:25:D1:B4:01:87:A5:F2:A2:2C:4B:F8:4B:B3
X509v3 Authority Key Identifier:
keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/650A245CB5C411EEB9178E45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b0:2e:29:76:49:6b:0c:bd:3e:f8:e6:92:4b:41:62:c2:9f:
15:cf:35:3c:f3:ce:ec:14:df:f8:0d:70:d8:53:86:6a:f0:a7:
dc:02:de:67:eb:d5:fe:b8:63:c2:d5:39:1e:13:bf:45:e5:7c:
ef:18:f8:be:6b:ba:df:d7:64:18:da:49:23:b9:7e:1b:54:ab:
57:6c:23:23:9d:32:b8:b5:b1:ac:09:b4:c6:83:5b:ff:1f:90:
dd:c6:5e:9c:6a:4c:33:9a:97:9b:40:81:25:84:21:2f:d5:41:
cc:77:ed:7d:76:78:73:7d:fe:e9:f6:6f:4c:2b:40:f1:b0:5e:
cd:4e:a3:5a:b3:36:1e:7f:24:8d:25:f2:70:10:a0:a3:62:b4:
e1:97:d9:59:e9:3b:a8:6c:0f:f3:77:80:61:db:e9:ea:bc:37:
7c:b7:8d:17:01:80:76:11:20:6d:76:d5:05:59:c0:35:40:51:
63:19:ee:b2:76:ab:ec:f9:d5:e0:11:74:e3:e3:c1:02:77:86:
3d:1c:77:ec:d3:cb:0f:a1:d2:e3:2b:5a:3d:70:38:71:15:03:
8d:6f:ce:8a:13:5d:7b:a7:df:c3:fd:f8:be:8c:78:bc:23:31:
44:26:1a:0d:3e:3d:3c:1b:56:f1:fb:df:4b:e1:cb:cf:0e:bc:
fb:3a:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org