Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0ECD306C68EA11EC82990257C4F9AE02.roa
File: 0ECD306C68EA11EC82990257C4F9AE02.roa (raw, json)
Hash identifier: LeLCssA5PvQBLpWPfYVgnXfVfHUdSMR+wHLOFJl+YGs=
Subject key identifier: C9:EA:5D:EA:0B:EC:6A:44:2A:F6:E6:D0:5A:0B:9E:33:CD:06:53:20
Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial: 01CE
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0ECD306C68EA11EC82990257C4F9AE02.roa
Signing time: Fri 01 Jul 2022 23:09:29 +0000
ROA not before: Fri 01 Jul 2022 23:09:29 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 36492
IP address blocks: 206.83.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Validity
Not Before: Jul 1 23:09:29 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62bf7ea9-ceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:6a:58:32:15:4a:ba:2c:ba:07:e0:42:92:
23:8f:f3:4f:b3:b9:5a:0d:6d:fb:4d:f2:81:ad:2f:
e4:2e:e7:d4:b2:71:7f:6a:fc:ba:15:77:8c:cc:17:
b8:34:69:7c:30:4f:0e:e5:86:65:41:d1:15:e8:8b:
d8:7d:cf:16:11:1c:fa:58:25:86:4a:e4:1d:19:02:
b9:ff:9e:8a:28:5c:e8:ed:e6:b6:af:fb:c0:a7:20:
3c:10:bc:73:42:66:49:3f:48:b1:ff:e6:81:7f:ce:
23:c8:e1:2a:ec:68:3e:74:b3:d8:b1:99:0b:2f:6c:
81:8e:f2:ce:c9:72:97:d1:20:ea:fd:2a:c8:cb:51:
33:1d:87:d9:fc:78:9c:33:cd:2e:75:92:b0:44:59:
14:71:49:aa:e0:19:10:bd:c6:a6:25:db:de:61:91:
aa:56:6e:5f:6b:75:a8:46:86:a1:65:df:ff:9d:fe:
a4:fd:1a:62:4f:a1:58:b5:4f:6a:22:9b:c3:1a:6e:
dc:96:77:ec:8e:7f:a2:82:e4:47:9d:c9:cf:bb:7a:
15:1c:92:47:c2:d8:94:bd:b3:05:cc:05:ce:e6:c6:
4a:30:22:b1:0e:f0:1c:d1:fc:9a:1a:e3:32:5e:dc:
eb:cd:ed:70:90:17:57:5e:fe:49:1c:92:dd:43:16:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:5D:EA:0B:EC:6A:44:2A:F6:E6:D0:5A:0B:9E:33:CD:06:53:20
X509v3 Authority Key Identifier:
keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0ECD306C68EA11EC82990257C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
206.83.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b8:7f:bc:fe:eb:cc:16:ca:70:cf:18:6e:68:9c:be:27:cf:
91:b9:fe:d8:17:9c:61:dd:ae:b3:d6:03:93:80:9c:62:99:43:
8f:87:9f:bf:a1:ef:ae:e3:b6:fc:a1:11:b6:fa:c8:38:19:e9:
e6:ff:75:13:6f:6f:70:f1:0a:46:0d:81:73:7c:d4:23:f5:94:
9b:9b:e7:d6:1c:3f:1d:53:4f:38:3d:29:67:38:d2:33:20:7c:
26:d0:19:6c:31:35:bc:8b:bd:15:9b:0b:14:6d:d5:48:3c:e2:
a7:0c:bb:27:90:e2:96:9a:7b:0b:99:d7:e9:f8:d7:7d:37:48:
84:38:cc:a0:27:e4:b4:8e:c1:dd:11:7e:88:c8:31:a5:fe:9b:
f7:e8:10:2e:71:79:c4:8e:ad:50:a3:03:e2:f6:42:9b:88:b2:
f5:46:cb:06:97:92:56:50:ce:72:19:bb:4b:99:4a:ec:00:88:
0c:58:a8:c6:f6:23:1e:f5:28:15:9f:91:7a:44:7c:e7:4a:6b:
2b:5a:9b:5a:be:c5:1e:66:bc:b4:11:f6:d4:2b:a2:ad:6a:8b:
3a:84:10:78:b4:9c:2d:36:ce:99:b7:c1:d2:53:50:f3:1e:80:
cf:46:9d:ae:1d:ae:78:8e:20:49:f6:57:50:03:6b:92:a5:11:
af:1b:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org