Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CDF869E2551711EDA9F4E555C4F9AE02.roa
File: CDF869E2551711EDA9F4E555C4F9AE02.roa (raw, json)
Hash identifier: xFZkP56APg4TdyJ3T3I+s25l08mqyJtPetGe7Y1TNe0=
Subject key identifier: 58:B7:C9:17:4B:23:5F:88:89:2D:D9:51:6A:66:DC:D3:4B:3F:24:F9
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 337F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CDF869E2551711EDA9F4E555C4F9AE02.roa
Signing time: Wed 26 Oct 2022 10:20:25 +0000
ROA not before: Wed 26 Oct 2022 10:20:25 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 139879
IP address blocks: 175.29.200.0/22 maxlen: 24
175.29.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13183 (0x337f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 26 10:20:25 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635909e8-8afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:38:a3:40:9d:d0:8b:6a:c5:40:5b:b0:6d:
06:3a:32:cb:ff:91:f7:0a:f0:cb:e7:d2:1c:18:34:
de:67:86:53:f6:59:af:67:e6:5e:bb:b4:2f:c9:a0:
34:84:1c:61:4c:ca:3d:1e:fe:59:79:9e:85:70:45:
86:53:08:f6:69:e7:03:b2:a1:d8:b3:51:9f:f1:e3:
f0:5c:1a:bb:9b:17:46:09:a7:79:fe:b4:3a:15:56:
58:fb:7a:08:17:ba:6f:be:6a:45:f9:3c:50:fe:33:
ba:76:e3:d8:ff:fe:6c:73:70:dc:7c:bc:3f:45:26:
9a:ec:20:82:d7:e7:46:f4:7f:8b:7a:5f:6a:c5:0c:
8c:a4:14:06:42:2b:7d:8f:23:ef:a8:28:b2:45:cf:
59:eb:ba:d1:3e:a2:6c:1e:0c:d3:7a:62:80:b8:d4:
d0:ad:7a:69:95:20:02:d3:ac:1d:84:55:7c:7e:29:
34:51:a1:33:55:56:31:a9:3e:95:b9:c0:21:6a:e1:
6f:a5:e1:90:ca:fd:91:6d:f4:85:b3:d6:b7:fc:a2:
b8:30:c2:47:3b:32:ba:56:a8:89:a2:a6:ba:9b:5f:
bf:09:30:77:4c:91:10:4d:ec:14:7b:24:4e:9c:8a:
b6:c7:72:34:64:9e:58:55:55:87:fa:61:4f:f8:b0:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:C9:17:4B:23:5F:88:89:2D:D9:51:6A:66:DC:D3:4B:3F:24:F9
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CDF869E2551711EDA9F4E555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.200.0/21
Signature Algorithm: sha256WithRSAEncryption
64:40:9f:1d:df:00:11:7b:1b:59:b8:20:65:d4:b1:33:d3:3d:
11:6a:68:0c:a4:98:34:e5:44:da:5b:c8:17:72:c8:73:ee:b8:
39:39:43:0b:fc:19:01:14:2b:df:30:3b:63:d9:40:9a:38:2c:
b4:9b:01:f8:1e:fd:76:2c:ae:d5:b9:fd:db:d5:b7:3f:2e:a2:
cc:4c:08:7c:8b:0d:71:f5:55:1a:8f:2c:29:23:a6:ff:a0:19:
83:13:0d:e2:d9:a4:75:1a:2c:f1:db:6e:fb:e1:8c:ec:34:7c:
6f:fa:38:7a:94:19:3b:e5:45:26:17:2e:36:c0:f5:0d:d4:95:
4b:ec:73:55:b1:d1:01:4e:a8:bb:80:17:f8:ab:73:d1:b2:f7:
40:d0:25:91:41:58:03:e1:79:24:44:42:ed:a1:66:15:14:a9:
ae:8e:90:a0:62:63:8c:45:0e:5e:f1:8e:88:f0:6c:21:b0:85:
cf:09:90:6c:4e:e7:82:ed:c9:db:79:f5:a0:44:71:8e:3b:e6:
50:9f:ce:b4:cd:18:68:47:50:e9:93:ab:75:e3:37:3f:a2:f4:
45:a7:b2:57:d8:cf:f9:66:f9:67:b0:e8:50:29:78:d9:59:3c:
31:03:52:00:d5:0c:c5:6a:28:1f:02:9c:8e:50:74:fe:47:5f:
a6:03:71:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org