Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/5F26F610012811EEA97F422EC4F9AE02.roa
File: 5F26F610012811EEA97F422EC4F9AE02.roa (raw, json)
Hash identifier: osScDwUy3jgD6klBPu6xg8Kitl13GTmb8Ul9qzY30Mo=
Subject key identifier: AA:54:18:67:09:22:4A:96:C7:C8:E3:55:FF:73:73:99:1B:CD:E2:12
Certificate issuer: /CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
Certificate serial: 1966
Authority key identifier: 3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/5F26F610012811EEA97F422EC4F9AE02.roa
Signing time: Fri 02 Jun 2023 09:32:20 +0000
ROA not before: Fri 02 Jun 2023 09:32:20 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 136958
IP address blocks: 157.122.208.0/21 maxlen: 21
157.122.224.0/21 maxlen: 21
157.255.0.0/18 maxlen: 18
157.255.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6502 (0x1966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
Validity
Not Before: Jun 2 09:32:20 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6479b724-de45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:16:f9:23:2e:58:fe:7e:24:ef:71:eb:f6:
58:13:f1:0f:7b:f3:86:cf:b3:fb:b8:5c:2d:ac:9c:
b4:2d:d7:a9:9a:f9:39:c9:8b:1d:1b:ad:f4:90:04:
14:d4:a3:55:61:ac:bf:d9:94:a8:d7:1d:13:a5:57:
6c:7a:b8:44:44:d9:0f:85:31:b0:b8:ae:93:d5:4d:
5f:7d:0b:58:93:64:6b:dd:dd:0c:9f:97:7a:c1:75:
2f:be:67:2c:2d:5b:02:81:42:46:a7:53:8b:f3:b4:
83:6b:5b:a2:2f:b6:46:8c:10:b9:37:3e:78:27:65:
3e:4b:c2:7b:60:2d:61:d8:e0:6e:29:54:77:9b:b3:
00:8a:8c:c1:9c:01:59:b4:2c:d4:7d:bf:62:d4:4e:
3d:1a:1c:e1:f0:94:bb:16:a5:bf:7a:7e:c4:b5:c2:
69:f9:c8:c2:b5:c4:87:d4:68:08:14:a6:de:05:75:
df:c6:0c:37:5c:fd:82:e3:25:43:e2:d9:75:95:55:
e6:d8:5c:c3:87:90:49:f4:32:90:60:66:1f:aa:ee:
39:32:e7:30:7c:5b:8b:be:e0:eb:bc:dc:56:63:8f:
a2:8a:eb:fa:19:40:f9:99:94:75:32:cf:88:b2:39:
a5:67:ed:f3:4a:c9:db:82:be:ae:7d:09:de:aa:e7:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:18:67:09:22:4A:96:C7:C8:E3:55:FF:73:73:99:1B:CD:E2:12
X509v3 Authority Key Identifier:
keyid:3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/5F26F610012811EEA97F422EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.122.208.0/21
157.122.224.0/21
157.255.0.0-157.255.79.255
Signature Algorithm: sha256WithRSAEncryption
ac:2e:63:67:8a:40:c1:01:5c:24:1c:3e:49:4d:38:60:10:ca:
d3:38:72:05:c0:24:d4:cb:ee:34:b2:4c:e7:39:59:aa:5d:e1:
0a:6d:4f:25:a6:f2:7d:20:84:2b:b1:db:f1:9e:c0:ef:74:70:
a1:c5:cd:af:6d:b6:81:05:5d:bd:b9:e3:7d:b1:4a:55:cd:01:
7f:af:47:38:fc:24:ea:ff:61:56:0b:a2:56:33:e1:13:c4:c1:
d1:5d:60:01:ec:8a:52:21:a0:6e:9f:a3:de:51:df:34:6b:bc:
2f:ff:b6:7f:fc:05:76:a8:4a:de:b7:a9:b9:0b:da:6b:af:e4:
63:27:0d:4c:02:37:dc:3c:92:d8:a7:2a:56:25:b5:52:c7:5a:
62:9f:36:2d:2c:25:cd:d4:b6:4f:10:1b:3c:1b:ac:ad:c6:a9:
a6:fe:6b:77:7c:77:af:ab:5d:5f:b8:10:3c:0b:05:84:ed:0e:
f5:6d:f8:56:a7:5b:56:6f:e9:ab:15:d6:ce:97:12:d4:e0:88:
01:a5:12:52:d7:66:22:8d:bf:13:66:86:04:44:73:8c:cf:f5:
0e:70:a8:9e:a5:a9:c8:cf:25:9b:b9:5d:3b:c8:64:ea:80:45:
d4:31:72:22:78:42:0f:f7:47:68:9c:38:ab:1f:27:85:3c:61:
65:35:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org