Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/EBEDEAA242F011EB95624C5AC4F9AE02.roa
File: EBEDEAA242F011EB95624C5AC4F9AE02.roa (raw, json)
Hash identifier: 6JKUZ002SuqlzD0iujJswF7ndJE9PBplHm5I7dpMbuc=
Subject key identifier: 33:7E:A2:A8:18:B1:AA:B8:DC:AE:90:C0:47:7F:CD:AB:5C:5D:4B:1D
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 0337
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/EBEDEAA242F011EB95624C5AC4F9AE02.roa
Signing time: Wed 29 Dec 2021 00:39:47 +0000
ROA not before: Wed 29 Dec 2021 00:39:46 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139325
IP address blocks: 103.158.158.0/24 maxlen: 24
103.158.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: Dec 29 00:39:46 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61cbae52-2896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:42:c7:74:55:2d:29:e9:02:48:58:f7:5e:
73:34:d8:ab:ba:8e:b4:6d:59:76:7f:86:a4:25:1f:
23:3c:eb:bf:36:2c:a5:86:9d:98:d0:31:b7:d5:29:
e5:7e:25:00:60:0b:07:e5:cb:6e:23:8a:55:49:91:
f0:bd:ed:99:3d:a8:bc:7b:38:4c:72:25:eb:c2:ad:
a3:71:b0:7c:98:10:bc:32:08:aa:cc:f1:27:30:b8:
07:5b:89:70:c4:2b:5c:dd:db:4d:c4:12:6a:b0:04:
ef:32:69:ee:63:7c:5c:5d:80:bb:29:1a:3c:a1:17:
fa:a6:70:c1:86:c5:2a:e8:31:22:4d:eb:2f:f8:9a:
35:a1:28:5f:e8:00:1c:9a:d6:46:cb:62:7a:57:e0:
65:21:15:a4:aa:ee:ca:d9:07:08:6a:bc:f7:43:a5:
6d:ec:39:b0:bb:33:f4:b3:c0:d3:e5:c5:27:2f:18:
34:c9:97:7e:0e:b2:24:4b:37:dc:52:df:33:19:be:
66:e9:ef:b0:81:c4:60:11:92:1d:5d:68:2e:35:d1:
50:2e:f2:62:78:f4:ec:b2:19:8b:ae:69:be:b5:c0:
33:3a:48:ad:84:3b:c7:60:ee:f5:46:52:22:2a:27:
6e:4d:b4:2a:1a:7d:76:29:c4:ca:74:c0:69:36:61:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:A2:A8:18:B1:AA:B8:DC:AE:90:C0:47:7F:CD:AB:5C:5D:4B:1D
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/EBEDEAA242F011EB95624C5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.158.0/23
Signature Algorithm: sha256WithRSAEncryption
31:8c:32:0d:65:3b:86:c8:62:61:8f:ea:dc:42:89:aa:29:fc:
70:a8:99:42:4f:0e:5c:77:cb:40:c7:93:27:84:97:6d:af:2a:
05:cc:03:e3:92:f1:9f:06:19:85:c0:af:d5:da:c6:ea:e4:5c:
e0:46:a8:69:bf:e3:60:eb:98:60:1d:b2:3f:bc:f6:44:48:aa:
03:ff:ac:1e:bb:2d:9e:3c:fa:9a:15:76:b5:f1:25:cb:91:0a:
72:03:88:b6:f2:39:26:cd:c7:57:6d:4f:30:23:86:f7:d6:00:
6a:e5:33:2b:d5:ba:e4:02:c5:25:1c:d7:ee:6b:5c:29:67:f8:
49:31:ad:77:3a:3c:82:fd:bb:cc:5a:19:fa:4a:2b:0d:04:11:
00:c5:d0:46:94:7a:dc:c3:83:6d:9d:10:e5:b3:9e:15:1e:46:
c0:f5:13:37:c0:5d:2a:f0:b1:9f:d6:64:e1:91:3e:ee:86:d8:
51:4e:40:57:69:1e:99:b6:35:63:09:7d:2c:0d:83:d3:5b:6e:
fe:c2:9d:ff:a0:36:9a:c7:8f:e4:2a:a8:8e:f9:bf:e2:1c:79:
ec:08:c4:07:fb:7f:c2:c4:e6:ca:b6:b7:8b:e3:f5:26:16:ce:
2f:a1:b6:fb:a4:92:86:f6:30:84:d0:e9:4f:11:7b:2e:e2:5f:
a6:58:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org