Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/B85EF7C4DF2D11EB95546923C4F9AE02.roa
File: B85EF7C4DF2D11EB95546923C4F9AE02.roa (raw, json)
Hash identifier: jlN2kUF1+YkOkbCW3P7XNN89IDPwxqxleyNwa3e2wB0=
Subject key identifier: 38:03:18:E6:A3:A1:8A:83:EA:A5:E1:40:1F:4C:FB:76:6F:39:18:F0
Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6
Certificate serial: 08F8
Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/B85EF7C4DF2D11EB95546923C4F9AE02.roa
Signing time: Wed 07 Jul 2021 14:15:03 +0000
ROA not before: Wed 07 Jul 2021 14:15:03 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 64271
IP address blocks: 2001:df0:c280::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6
Validity
Not Before: Jul 7 14:15:03 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=60e5b6e6-0c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:b3:65:a0:8f:80:b4:0d:83:42:01:2f:7f:
fe:05:b7:78:0c:23:f3:13:08:60:33:6d:12:56:fa:
00:aa:91:eb:7a:9c:8b:28:31:ab:1d:d0:43:76:b1:
4a:b5:25:c3:2c:27:bf:47:c5:33:04:cb:a1:a0:21:
d6:52:94:a8:23:a2:20:54:37:f4:18:3b:67:90:50:
8f:05:bd:5b:59:29:a6:1a:3f:57:d6:c5:10:d2:92:
e7:62:32:40:74:2d:2a:51:c2:c3:56:c2:43:07:2f:
ca:d1:a6:b8:95:18:78:6b:81:59:cd:41:df:4c:ec:
c1:11:b4:96:7e:11:5f:ee:12:49:da:c4:d8:56:1a:
6b:ad:8f:5c:0b:e0:db:36:92:b3:2f:95:f0:ed:a9:
2f:2a:7d:45:77:60:f8:82:9a:2f:c5:d7:f2:0d:8d:
76:d3:f0:a1:46:31:67:cf:7b:86:ae:9c:bb:2c:10:
af:78:b3:af:1f:88:8a:9f:c9:45:3a:6a:28:58:74:
ce:71:90:8a:f4:fa:eb:d4:91:47:f9:84:6d:6e:2f:
54:52:be:fb:61:c6:69:3a:08:27:a4:d7:0b:2a:21:
df:1b:d0:d3:76:d8:ac:df:d4:14:1a:a5:a8:85:77:
d6:92:24:4c:04:6b:e1:51:ae:07:14:f2:1a:d2:29:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:18:E6:A3:A1:8A:83:EA:A5:E1:40:1F:4C:FB:76:6F:39:18:F0
X509v3 Authority Key Identifier:
keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/B85EF7C4DF2D11EB95546923C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:c280::/48
Signature Algorithm: sha256WithRSAEncryption
9e:5f:6d:8b:bd:02:7f:e2:07:14:1e:c4:9d:3f:a5:b5:c4:9d:
ff:b7:57:2b:b2:d2:3e:eb:a6:53:fd:10:1c:59:61:c8:22:bb:
55:e1:3e:cf:7c:72:c5:ee:5e:37:55:05:bf:f3:fe:4d:a7:a3:
91:a2:58:d5:8c:1f:25:ce:d0:bf:c4:60:49:f3:01:52:74:98:
79:f3:4c:52:10:44:b7:34:a6:1f:71:ec:59:0a:e0:10:29:24:
26:8f:57:c0:1c:5e:e9:bd:9b:4f:dc:63:bd:b8:93:39:ac:45:
93:d7:ac:62:8a:0a:20:28:f5:04:67:67:c4:f3:4b:20:e2:5e:
26:02:89:b5:27:cf:da:52:a0:d7:f1:95:07:59:06:27:5c:93:
e2:ba:ea:65:fa:ef:7f:80:2c:d2:5e:0b:98:8e:b9:36:f0:fb:
20:c0:64:8f:51:b5:da:b5:03:65:71:43:92:17:ee:9a:9a:0e:
d8:6d:e7:d8:2a:05:67:3b:80:17:b4:1c:cb:d3:1e:9e:ea:82:
46:17:fa:d1:54:7e:e5:5b:ca:47:73:da:05:28:51:83:dd:de:
88:8a:d7:ae:3c:6b:b9:e2:15:fb:a6:c2:d6:4c:9c:7e:ea:ce:
4f:ff:5c:b1:6f:87:8e:0f:08:36:fa:b1:a0:03:ed:b8:50:61:
a0:8b:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org