Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/B27F7B64B95A11ECADCDE663C4F9AE02.roa
File: B27F7B64B95A11ECADCDE663C4F9AE02.roa (raw, json)
Hash identifier: ShmyptIJYu/YJph5/XxeT6tjBsRkuXX91+kIAi4svxA=
Subject key identifier: 6E:87:EE:B3:2F:EE:67:82:D7:6C:8E:05:A6:AA:1F:6B:D2:99:F4:70
Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Certificate serial: 1444
Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/B27F7B64B95A11ECADCDE663C4F9AE02.roa
Signing time: Mon 11 Apr 2022 05:46:14 +0000
ROA not before: Mon 11 Apr 2022 05:46:14 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 58715
IP address blocks: 182.54.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5188 (0x1444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8
Validity
Not Before: Apr 11 05:46:14 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=6253c0a5-bfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:d0:cb:0c:82:f5:6e:b1:87:c7:c3:70:22:
81:0f:58:1f:28:7a:7f:a1:36:94:35:1a:cf:2d:98:
b3:77:9e:c7:ec:98:c7:e9:8c:c6:d3:d8:7d:06:32:
e5:29:06:c6:73:5d:db:e3:72:d4:42:e9:4d:0a:43:
a5:12:a7:6b:bb:0a:2e:bd:d7:c2:31:0f:0f:30:a3:
d6:b2:70:5f:07:5d:77:df:db:83:07:18:ec:3a:78:
d6:03:10:4c:ba:5d:2a:fc:d6:bc:6e:95:02:0b:cf:
db:ef:83:00:0b:fc:24:fd:51:ac:17:70:c3:5d:e8:
61:16:27:e8:51:cd:80:2b:63:e7:56:f4:ba:cc:f3:
51:96:37:3d:78:63:fa:e1:53:63:15:c9:d1:2c:45:
99:f0:cd:84:11:09:a2:e3:e5:ef:50:7c:62:81:af:
fb:43:ed:ab:25:48:3e:87:fd:0f:27:31:f9:c5:32:
ae:a2:fe:81:14:05:03:4c:54:16:cb:15:da:f7:a3:
4f:84:8a:9f:4f:f0:31:ac:56:5e:29:50:5b:28:c2:
a4:2e:9f:7d:54:b5:3e:78:ca:ce:04:ad:1a:4a:e3:
34:4d:28:63:30:f3:fa:67:3f:2a:0c:4c:cd:3a:29:
a8:6f:66:75:70:03:31:83:a7:49:98:ea:bb:bd:73:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:EE:B3:2F:EE:67:82:D7:6C:8E:05:A6:AA:1F:6B:D2:99:F4:70
X509v3 Authority Key Identifier:
keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/B27F7B64B95A11ECADCDE663C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.54.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ae:7f:f5:dc:68:1f:5d:44:ad:58:f6:18:f7:fa:97:e7:ae:
9a:a8:1b:a0:e5:aa:ea:5f:fe:02:6d:d6:34:59:5f:8b:9f:02:
d1:66:96:d9:88:2c:24:79:2a:49:c3:85:63:d9:e3:d4:e4:5c:
74:01:8e:bf:b8:c9:55:49:0a:70:8f:a3:75:ff:25:88:ee:79:
b3:20:98:8a:ad:b6:bc:9c:a9:34:0e:ff:78:8d:6d:3c:2c:68:
cf:3b:47:39:6c:86:6d:bd:17:64:11:c1:7b:e1:43:b6:2e:81:
c4:57:e4:22:89:db:e8:be:c4:0d:4c:25:69:77:77:05:09:52:
c5:c3:bf:1e:29:50:07:6a:d2:57:4b:65:62:a7:42:05:02:62:
eb:0d:20:d3:ab:fc:b0:a6:34:12:4a:df:16:45:12:48:68:33:
25:eb:5b:c0:9b:20:fd:12:48:e8:22:68:24:8d:05:63:15:a2:
02:a8:b6:44:09:0c:01:1d:2f:34:3d:c9:3c:c5:b5:68:57:15:
a7:a0:bf:5e:02:43:f6:1d:58:e1:c3:92:a6:88:de:c7:e7:55:
80:6f:22:bf:40:da:38:c3:be:d3:40:ad:5d:28:cf:59:d9:17:
2f:44:0f:4f:01:d4:2a:85:b7:2a:77:60:61:0a:83:a7:9b:eb:
20:66:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org