Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/F851410E35CC11EAA2366620C4F9AE02.roa
File: F851410E35CC11EAA2366620C4F9AE02.roa (raw, json)
Hash identifier: 35EpiIXfrIfQg5MC4RUcVKh1XfHAFqUcdmxUQqA0DjQ=
Subject key identifier: BF:40:7B:95:26:69:A1:01:6A:FF:29:4C:EC:54:2D:0A:6E:F5:E0:5B
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1747
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/F851410E35CC11EAA2366620C4F9AE02.roa
Signing time: Tue 10 Jan 2023 17:34:07 +0000
ROA not before: Tue 10 Jan 2023 17:34:07 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9299
IP address blocks: 118.214.6.0/24 maxlen: 24
118.215.72.0/21 maxlen: 21
122.252.128.0/21 maxlen: 21
125.56.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5959 (0x1747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Jan 10 17:34:07 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63bda18f-8fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:67:05:7e:08:03:ab:71:3d:8b:2f:e6:1a:
1d:08:96:1a:8a:8d:8a:ef:a0:bd:20:c1:29:c8:7b:
c2:dc:91:11:7a:7a:73:2b:d4:55:ce:53:dc:ad:c8:
12:cb:e2:0e:96:90:c6:62:e6:49:d5:16:c6:20:84:
e3:7b:ec:8f:58:2b:6e:5c:ad:51:ba:58:d1:53:0b:
34:ef:0f:c1:1b:2f:3d:e1:4e:c6:56:dc:23:bf:ce:
08:36:cf:95:48:a9:1d:56:f4:ac:2d:54:ef:45:99:
b2:76:06:76:d1:ff:ad:1d:58:fa:6a:12:82:65:cd:
78:2a:10:24:58:7c:76:d6:2b:0b:f1:9e:8b:d4:32:
95:9c:f8:db:5c:2d:17:60:ef:23:5a:88:e4:13:1d:
f6:40:72:9b:99:f3:76:19:9e:a1:9f:9e:c4:ae:50:
ca:30:46:45:e0:98:02:0e:09:5e:37:0e:33:69:fa:
51:2a:89:79:49:fc:5f:f8:59:a7:cc:9f:91:aa:bb:
52:a5:08:79:b7:db:3c:31:84:6f:61:d8:bf:14:34:
fa:28:d4:1e:40:d4:2d:12:81:46:e6:01:15:38:ee:
2f:b0:2c:79:1d:4b:a5:a2:c2:84:70:8f:14:9d:10:
90:9d:81:c7:c3:21:b1:80:ca:01:c6:b3:e1:8b:5b:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:7B:95:26:69:A1:01:6A:FF:29:4C:EC:54:2D:0A:6E:F5:E0:5B
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/F851410E35CC11EAA2366620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.214.6.0/24
118.215.72.0/21
122.252.128.0/21
125.56.195.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d4:b5:77:04:5b:6a:ad:29:01:53:bc:9a:6e:83:0d:52:49:
85:d2:56:a7:1a:5b:56:67:da:62:46:61:a3:50:68:8a:a5:11:
15:f7:ec:ac:82:87:60:52:5b:7d:da:36:8b:b4:4f:24:dd:02:
bd:e2:9b:b4:d3:cc:88:cc:04:88:10:d5:3a:36:5c:c9:62:a2:
89:28:d4:ed:b3:bc:5f:98:f9:73:13:23:2a:99:9e:2a:f2:cb:
3e:e3:cd:6a:e0:ad:f6:1c:15:e7:bd:2c:c8:70:1f:4e:82:90:
76:94:ad:cb:c3:97:8b:0c:b2:42:9e:6f:56:8b:c9:cf:fb:aa:
42:a4:25:06:3c:4e:2b:27:ac:d4:e0:9d:20:7f:f4:a4:6f:cd:
49:fa:0e:64:e3:48:35:25:9a:d6:33:b9:f6:dd:45:ec:c8:13:
c2:66:49:10:f5:78:89:43:6a:48:91:49:a5:c1:80:7e:38:47:
ec:f3:92:18:2f:79:26:8f:94:56:a7:9a:92:45:83:98:07:61:
f1:72:4c:a1:64:96:b3:7f:d7:2d:03:ec:59:7d:46:6a:3f:6e:
9f:15:0e:5d:68:25:ac:33:ed:63:69:f2:7b:a3:2f:06:2b:cb:
00:f8:8d:95:1b:ce:d1:05:e2:19:e1:8e:79:5c:2f:8a:2c:12:
ae:dc:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org