Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/892655F8BD1611EB9D94C464C4F9AE02.roa
File: 892655F8BD1611EB9D94C464C4F9AE02.roa (raw, json)
Hash identifier: VC1SwcKT1nRUY0sVbka91Mcar7/4HZfWZj5cIqlLc+U=
Subject key identifier: 7A:E4:91:03:16:63:C3:8D:DA:53:D6:55:E5:79:3F:2B:AC:9C:1B:EB
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 0DA8
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/892655F8BD1611EB9D94C464C4F9AE02.roa
Signing time: Tue 25 May 2021 06:23:21 +0000
ROA not before: Tue 25 May 2021 06:23:21 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 10103
IP address blocks: 14.192.49.0/24 maxlen: 24
14.192.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3496 (0xda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: May 25 06:23:21 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60ac97d9-9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:6a:a1:2e:7a:b1:a2:eb:f4:76:5c:a4:96:
1d:50:06:3f:5f:cd:4b:8d:79:57:69:9d:76:dd:71:
00:a5:02:0d:24:65:6b:39:14:93:07:b4:1f:73:9e:
04:52:53:64:2e:db:7e:53:f9:37:ed:17:aa:73:2e:
e3:a7:ad:84:33:4b:78:02:dd:c5:03:8b:4e:65:ca:
24:cc:e2:ed:05:4c:f6:bc:74:f0:76:10:82:45:87:
40:de:c9:fc:75:61:eb:6b:d9:08:6b:65:15:18:a4:
55:08:dc:c8:fd:7d:95:b7:71:d3:b6:ac:90:62:56:
be:ce:79:f3:cb:bf:ad:5d:01:33:a8:50:f6:19:7a:
c0:fe:d1:8f:30:3d:c0:c5:4e:88:13:ca:c6:09:2f:
5a:c0:11:e9:a3:a7:c8:4a:de:d3:ec:5e:ac:8f:e6:
51:79:a3:b7:92:fb:83:88:e4:23:b6:bd:f7:e3:e8:
91:39:0f:a7:b6:08:6d:f1:20:23:33:18:56:cb:47:
d9:5d:42:3e:56:da:e3:f2:9a:46:cb:33:1c:08:38:
dc:5d:db:44:1f:11:60:6d:5c:61:9d:2e:94:ad:33:
f9:aa:c4:eb:04:52:66:0a:e5:b8:3e:7c:5d:4c:70:
f9:a9:c1:58:7a:b9:1d:8e:71:4d:f9:98:0f:87:85:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:91:03:16:63:C3:8D:DA:53:D6:55:E5:79:3F:2B:AC:9C:1B:EB
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/892655F8BD1611EB9D94C464C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.49.0/24
14.192.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1d:84:a9:13:93:ef:83:c7:46:95:d0:27:bb:be:85:4d:26:
9a:e9:3e:a0:6c:30:ef:ea:0e:b3:44:a3:4f:48:eb:5e:c9:33:
c2:3d:64:cf:08:11:77:32:88:5b:80:d1:09:0e:e2:0c:3d:94:
34:31:21:a3:7f:b5:5f:79:b9:db:86:4c:51:82:98:8e:c6:02:
d4:46:a5:08:32:c8:78:c8:c9:08:98:09:e8:4d:53:15:13:4c:
02:a9:7f:62:18:a8:89:55:35:17:34:1d:37:4c:a6:05:8d:ef:
99:49:34:fd:1e:ec:a8:19:16:df:09:14:96:15:ff:6c:2c:d8:
56:2a:b6:80:90:e6:41:5f:41:29:09:cf:16:ee:30:89:7c:60:
09:5c:e4:24:9b:76:51:74:96:61:d2:f3:63:e3:47:80:c2:6a:
ec:f2:5e:bc:16:62:5f:cd:18:d5:dc:d0:d4:e1:5e:6e:06:85:
34:33:ed:b5:e9:4f:bc:10:e0:97:55:16:db:4e:f4:5b:27:c2:
56:14:b2:0f:ef:24:c2:62:a2:94:6b:69:d8:45:d5:27:71:b8:
9f:3a:9d:f0:e6:92:64:a8:a5:10:9d:7e:d4:29:b7:fa:3d:0d:
2a:6f:bb:3e:6c:77:ce:ee:f5:1c:63:13:8d:4a:6e:38:62:4a:
3e:98:a8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org