Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CC04D08208111EEA9CB4C0FC4F9AE02.roa
File: 6CC04D08208111EEA9CB4C0FC4F9AE02.roa (raw, json)
Hash identifier: 5YO5smvG73nvBbTAyVpqN9NdSIHg6H0jDHKRMwkykB0=
Subject key identifier: 2F:B2:25:50:ED:85:7B:1D:E4:B5:94:D8:4E:A5:D6:8F:79:31:F2:BF
Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial: 0751
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CC04D08208111EEA9CB4C0FC4F9AE02.roa
Signing time: Wed 12 Jul 2023 06:57:54 +0000
ROA not before: Wed 12 Jul 2023 06:57:54 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 57455
IP address blocks: 2400:5180::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Validity
Not Before: Jul 12 06:57:54 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64ae4ef2-4128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:5b:f2:2f:99:3b:35:9b:3c:15:bb:09:3d:
76:8f:e6:e5:42:9d:ee:16:26:8c:b7:4c:23:f2:e4:
24:c8:28:93:b8:bc:23:f1:94:96:24:27:0e:2c:38:
18:96:0b:f5:c3:81:2d:80:96:c1:9e:ea:7d:a9:5a:
3d:f0:b4:4c:f3:28:ae:20:f6:90:77:90:83:41:63:
e3:4a:23:b4:41:a1:fb:e5:c7:20:aa:56:73:16:0e:
e5:33:ea:4d:96:c8:97:ce:24:70:c8:85:98:cb:9d:
84:5d:f6:fc:c9:cd:93:34:2b:89:14:d7:ef:87:5f:
cb:9a:fa:90:6c:72:2a:4b:25:73:12:2d:d2:88:52:
54:59:fc:f1:33:cf:70:03:9a:ab:31:21:7a:ff:50:
d2:89:a5:1f:46:a3:33:42:e3:45:64:5e:e9:e7:b8:
50:f3:c9:e3:e8:fa:6c:9c:a8:50:c2:d8:3c:e6:e8:
98:84:30:5e:cd:87:53:3c:74:3e:a3:1b:b6:b1:41:
99:8c:12:6f:5f:4b:80:8c:c1:76:c8:4f:9e:b5:63:
41:35:2b:a0:71:01:9e:9b:4a:81:42:46:bd:3f:63:
30:63:8d:64:69:4b:5f:30:3f:d9:91:77:f9:7d:49:
66:ab:a7:43:f5:b7:33:8c:cc:29:53:cb:6a:83:53:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:25:50:ED:85:7B:1D:E4:B5:94:D8:4E:A5:D6:8F:79:31:F2:BF
X509v3 Authority Key Identifier:
keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/6CC04D08208111EEA9CB4C0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5180::/33
Signature Algorithm: sha256WithRSAEncryption
15:c6:d5:5e:51:cf:c2:73:de:d7:56:47:d6:5f:c9:98:aa:66:
a7:b2:69:24:a3:f7:4b:d1:e7:8a:08:05:17:c1:9d:db:09:ba:
3f:8b:90:aa:1b:ff:23:cf:b1:05:fe:b4:33:39:6a:bc:56:01:
a9:43:b8:5f:4f:0c:1a:97:24:b5:fb:aa:cb:8f:09:c1:c2:cd:
72:07:61:e5:5a:2c:5b:ef:62:ba:4f:c9:9f:3a:9d:65:79:1d:
00:df:16:45:2d:a9:57:38:69:be:cf:41:00:cd:c4:31:8e:5f:
5d:93:a1:be:3f:8e:07:c9:41:f0:47:21:79:cd:ed:86:a2:d3:
e9:c9:d4:39:c8:7c:b3:51:4b:a8:ca:0f:9f:7a:0b:5a:20:2e:
ed:0d:d1:9a:9e:ba:0c:25:e9:ca:a0:ef:07:9e:53:a6:21:82:
59:34:f5:fa:48:4e:52:d3:e5:42:ca:8b:54:f3:4c:ad:90:6c:
54:53:f4:ed:e3:61:54:fd:ff:b6:a7:29:60:a2:c5:85:b6:ac:
01:5f:97:a0:74:16:60:1d:01:9a:be:48:0a:9d:e9:25:75:4b:
f7:3d:f4:1f:51:7e:7d:43:1f:06:08:97:48:71:2f:07:fe:3c:
c0:fe:fc:4a:0e:8e:33:85:93:59:a6:4d:4d:ce:40:cd:10:98:
ef:c1:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org