Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/317251AA1F5811ECBEEBA411C4F9AE02.roa
File: 317251AA1F5811ECBEEBA411C4F9AE02.roa (raw, json)
Hash identifier: Vr2xESx4wRipUeS5hsOG6LyPZjiTlTafN6ufGuphfcY=
Subject key identifier: 8F:6D:6E:A3:C4:60:3F:E6:10:C4:EA:3C:16:C3:C0:58:9C:09:61:AD
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 317D
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/317251AA1F5811ECBEEBA411C4F9AE02.roa
Signing time: Thu 07 Apr 2022 03:20:20 +0000
ROA not before: Thu 07 Apr 2022 03:20:20 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 19905
IP address blocks: 165.21.74.0/24 maxlen: 24
165.21.93.0/24 maxlen: 24
165.21.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12669 (0x317d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Apr 7 03:20:20 2022 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=624e5874-d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:94:a6:d6:e3:d7:d4:8b:21:88:8e:53:43:
50:a6:27:88:f0:97:d3:c6:0a:6f:03:4b:43:1a:65:
5f:ad:d2:ae:65:fc:85:b4:c7:eb:a0:23:59:1b:24:
cc:f5:83:94:e8:72:5d:0c:92:94:af:cb:ca:e9:4e:
a4:a2:f6:70:12:a1:42:0b:12:54:19:c1:a0:0e:86:
3d:05:ac:6e:ce:ef:29:9b:55:b5:2e:ea:ab:98:5d:
81:c3:29:b5:3e:20:c2:11:e7:91:7b:88:a2:d7:b0:
c8:61:d2:42:6a:08:61:48:37:e1:7e:ba:84:9f:dd:
2a:2d:5d:38:2d:42:5b:05:ab:e0:2e:52:72:b0:97:
8e:83:66:b5:91:a3:fc:af:37:04:27:73:cf:a8:43:
f1:f7:71:38:02:f0:f3:fd:c9:58:87:2a:4b:db:2d:
3e:64:fd:0b:1c:42:f1:f8:64:41:40:53:d7:21:f9:
61:e7:81:4f:a1:a1:2a:c2:a9:32:7c:52:30:19:10:
7f:68:7f:1e:97:ee:46:6f:03:a2:b1:81:0e:fd:1a:
8b:62:9d:25:22:7a:2a:f2:8a:ad:dd:be:8e:14:5a:
d3:4f:6b:f8:06:65:b8:0d:85:73:7f:1b:28:db:75:
8d:d4:71:1d:69:4d:93:c5:72:00:2a:10:7e:df:44:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:6E:A3:C4:60:3F:E6:10:C4:EA:3C:16:C3:C0:58:9C:09:61:AD
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/317251AA1F5811ECBEEBA411C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.21.74.0/24
165.21.93.0-165.21.94.255
Signature Algorithm: sha256WithRSAEncryption
46:b2:a8:3e:ea:af:1b:d2:c4:d3:b6:b6:15:d6:27:be:c9:07:
d5:d9:82:a4:0f:6c:e1:2a:a9:16:47:6f:23:16:6e:5d:c4:84:
c9:4c:5e:79:80:50:65:18:87:0e:1b:9c:35:f5:70:a0:72:b6:
65:12:15:37:9b:bf:30:ca:cd:03:39:de:27:0f:a8:9e:b5:f5:
c1:96:b2:90:27:01:2b:a2:9f:c2:68:db:fa:ab:8d:3e:2e:79:
ac:f9:02:94:c3:50:78:9e:b5:22:28:0e:f7:ce:0b:67:ca:eb:
28:c4:83:83:f1:2a:bc:9c:2f:f1:d7:6c:9a:31:29:4e:b5:6f:
38:43:9e:c3:ae:cb:7f:8e:4b:60:25:43:aa:da:20:f8:27:87:
a1:35:bb:dd:22:c4:6b:3e:13:96:2d:e7:eb:d0:a0:a7:48:73:
83:7a:bd:91:51:70:68:b1:cf:46:96:91:95:31:a7:37:9a:af:
4e:d2:2a:ba:b6:30:7a:cd:b7:be:6b:33:70:b4:d9:e8:03:4d:
c2:84:a8:8e:3d:9b:78:0b:8e:f5:bf:40:e0:64:74:f5:7c:9f:
26:3a:13:cc:9f:bc:52:4a:7b:fa:a9:11:46:74:e7:5a:12:46:
d6:71:6c:a7:d7:0c:6a:3c:77:e0:55:6e:e2:d9:77:12:a9:86:
aa:46:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-fra.rpki-client.org