Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EEB3707CD75411ED98692C5AC4F9AE02.roa
File: EEB3707CD75411ED98692C5AC4F9AE02.roa (raw, json)
Hash identifier: r+R33PCZSexM7bnwSVIjjBvYVLAOJ6kPzJ1tJ1p323w=
Subject key identifier: 14:81:F3:84:27:1D:C7:69:E7:52:3A:E6:B7:C0:71:34:FC:B2:2D:68
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 4A
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EEB3707CD75411ED98692C5AC4F9AE02.roa
Signing time: Mon 10 Apr 2023 04:05:31 +0000
ROA not before: Mon 10 Apr 2023 04:05:31 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 209043
IP address blocks: 103.230.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Apr 10 04:05:31 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64338b0a-4264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:c9:c1:e9:2a:e4:f4:ff:05:93:61:72:af:
b1:73:51:72:ee:63:89:b2:fc:da:45:2c:4f:ec:f3:
18:bf:48:42:a4:17:2f:ce:de:fe:0f:1f:a4:d5:80:
48:41:28:f4:aa:dc:5f:1a:a7:a1:54:a1:7d:63:2b:
3e:ef:8c:d2:23:a2:2f:90:4f:05:55:52:54:00:0c:
5b:99:4f:24:6b:2c:2f:57:90:e3:d9:f4:6a:28:e7:
b8:d1:4f:2a:9e:c3:d1:4c:f7:f9:ea:6a:2c:9a:bb:
b4:aa:d7:e3:f2:c7:5b:0b:0a:c7:91:91:86:48:63:
29:da:fe:19:5e:ea:64:3c:a9:99:b5:3e:22:70:ba:
35:41:e5:2c:89:d4:bb:6d:74:2d:c2:b9:f4:c1:74:
ad:cc:f9:1f:5a:ac:69:e8:27:f0:48:0b:77:ba:d4:
2b:89:00:46:a0:e0:02:60:42:94:71:1b:9b:64:1a:
7e:a8:41:ff:c2:5d:b3:be:89:e1:74:9a:3a:70:10:
1c:e9:fa:12:0f:3b:ea:09:4d:84:b5:c8:f4:11:60:
52:fb:69:cc:8d:f7:3b:e0:e8:a6:2c:73:63:5b:62:
ce:ff:b8:35:cd:58:93:3f:10:eb:96:87:49:db:8d:
e5:a3:88:e2:6e:11:b7:3b:db:3d:e8:09:e4:6f:25:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:F3:84:27:1D:C7:69:E7:52:3A:E6:B7:C0:71:34:FC:B2:2D:68
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EEB3707CD75411ED98692C5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.8.0/24
Signature Algorithm: sha256WithRSAEncryption
82:48:f2:2a:02:0f:6a:20:d8:41:0c:85:9b:40:30:51:21:e0:
e1:c7:48:b6:2a:92:fb:1e:27:07:bb:4e:47:02:86:56:fa:e3:
87:00:31:a4:61:4e:36:56:88:b5:c5:4c:23:92:3e:6c:56:ce:
d0:19:a0:0a:54:bd:1f:58:7b:15:46:50:a9:10:0a:b6:14:26:
82:7b:c5:b3:51:a3:66:e6:9a:fc:a0:da:29:31:63:39:59:7e:
40:c3:bb:2e:f1:c8:65:35:93:a9:4a:46:93:8c:82:e7:ff:54:
94:86:b8:3c:d4:f2:64:48:8b:3a:72:15:83:e4:d5:d6:d1:4b:
5c:1e:ee:9f:c1:d7:0c:37:a0:3b:ff:cb:35:d0:44:b2:25:fc:
26:06:66:5a:b1:f8:21:e5:d9:ec:1d:dd:25:37:21:5a:eb:5b:
d6:af:b8:e4:99:02:1c:01:d9:59:4e:b4:e8:38:29:63:15:a0:
ce:85:89:4a:87:fe:ec:6a:79:9f:0a:35:83:94:b9:a8:db:92:
cb:49:25:02:a6:19:86:b2:d4:a6:a7:e0:13:0b:d3:dd:4d:8e:
0b:53:bf:39:6a:e4:34:14:ec:3a:03:f4:39:b1:d2:75:f9:ce:
e0:64:61:bf:d3:23:1e:a8:f1:f1:7b:da:04:7f:d7:23:09:03:
7e:f9:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org