Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/EAEC5CC6801D11ED8289C868C4F9AE02.roa
File: EAEC5CC6801D11ED8289C868C4F9AE02.roa (raw, json)
Hash identifier: DN7b8Z3oK2LIuSdLy/FfzKOTq2vsQ5STZ3RhjLX2KBo=
Subject key identifier: E1:B7:01:1F:A1:47:03:B1:0A:9E:FD:38:8F:63:FA:B7:A2:97:FE:FA
Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial: 02CF
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/EAEC5CC6801D11ED8289C868C4F9AE02.roa
Signing time: Tue 20 Dec 2022 04:22:31 +0000
ROA not before: Tue 20 Dec 2022 04:22:30 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 150671
IP address blocks: 103.174.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Validity
Not Before: Dec 20 04:22:30 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a13886-aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:1a:e5:e8:13:5d:ba:f0:fa:4c:bc:7c:67:
67:79:8a:3a:f4:db:99:ab:66:66:b5:7e:a2:de:f6:
34:c2:29:27:3f:e0:4a:a5:27:2c:8c:2f:86:a2:df:
27:16:74:55:90:c1:2b:58:24:50:aa:b7:a2:bb:f3:
56:5d:ac:20:fc:44:37:8d:be:ab:18:63:93:17:bf:
14:35:ff:40:2d:c7:eb:b0:4d:fb:35:50:97:47:98:
ee:9e:af:94:74:0a:20:0e:4c:d3:fe:14:f0:b4:d6:
a6:c5:5a:68:5c:55:8a:ee:97:ac:30:79:03:61:6b:
63:7a:ea:d9:6a:da:44:fa:fa:47:44:fc:dc:93:e3:
12:0e:a4:68:78:8a:5b:10:17:c5:0b:0a:f3:00:92:
7d:fd:7b:d0:43:f8:ee:d5:b9:4f:66:03:b4:93:af:
a3:0c:cf:68:76:50:7d:e2:cc:18:f1:7f:6c:e3:e3:
91:c0:76:78:a4:cc:3a:b6:81:c0:f4:c5:ac:63:76:
72:fb:2b:76:a4:86:2d:28:bd:f3:53:66:2c:a8:e6:
0c:bf:a2:64:8a:36:b1:32:72:2c:40:21:d1:8b:44:
26:29:dd:91:dd:05:61:73:bd:04:d8:37:db:73:84:
8d:2a:aa:b8:6f:5e:3e:b7:71:f4:97:07:99:d8:05:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B7:01:1F:A1:47:03:B1:0A:9E:FD:38:8F:63:FA:B7:A2:97:FE:FA
X509v3 Authority Key Identifier:
keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/EAEC5CC6801D11ED8289C868C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.194.0/24
Signature Algorithm: sha256WithRSAEncryption
43:81:fd:38:76:a6:99:77:1c:07:fb:c3:42:8e:c0:15:bd:f1:
19:5e:85:01:9e:27:ee:30:d5:89:f2:c6:1d:04:b2:1e:81:3f:
02:23:8f:1e:89:27:d7:fa:e3:71:23:d6:7f:5d:92:2a:5f:73:
f0:9f:0a:11:70:47:b6:b7:e4:b1:f5:20:b6:95:ba:f1:71:69:
23:56:ca:df:78:3a:91:1f:b0:ad:f4:ca:25:5d:fa:d8:05:2a:
e8:9a:89:bc:19:e9:f1:a0:ee:5a:32:b2:e9:18:b5:3b:a6:bc:
b8:64:f3:d4:14:e3:6c:59:29:58:ee:43:c4:29:8e:7c:e8:60:
72:0c:b9:62:93:ed:af:bf:5d:33:2e:7e:c8:69:4f:18:4b:b7:
41:33:b3:a2:c9:6c:7d:27:a2:37:f1:5a:e1:42:4b:38:b0:2a:
f7:6d:e2:92:7b:77:90:3e:08:98:b6:cd:5f:a7:f5:ea:1c:e7:
4f:3f:83:64:6d:c9:ae:29:47:6b:f2:1b:37:1b:cf:75:6f:51:
92:06:62:4e:1c:a1:72:9f:c4:82:5f:ae:94:17:19:e1:b6:33:
13:fe:32:73:3d:e5:d6:ef:76:d6:30:4d:7d:e9:94:cc:3b:e1:
61:dd:15:fd:b3:22:94:ad:6e:2b:84:33:66:c6:ad:55:51:1f:
1e:85:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org