Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/339E59F4EC0911ED8D2A6F70C4F9AE02.roa
File: 339E59F4EC0911ED8D2A6F70C4F9AE02.roa (raw, json)
Hash identifier: YBT7VcinzXkBP1pVh8uqUVjsySBoMISxKqO75RmMNss=
Subject key identifier: A6:98:49:1B:B2:24:93:80:1B:5A:50:61:9A:BE:07:8C:ED:F9:7D:F1
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 5F
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/339E59F4EC0911ED8D2A6F70C4F9AE02.roa
Signing time: Sat 06 May 2023 12:26:18 +0000
ROA not before: Sat 06 May 2023 12:26:18 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 136461
IP address blocks: 2001:df2:3dc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: May 6 12:26:18 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6456476a-8bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:58:b4:7f:26:63:a8:27:83:b2:17:a0:87:
41:87:92:f9:c0:3c:91:73:87:2e:67:bc:41:2d:05:
80:71:ad:2e:cf:19:52:7f:e0:fa:6a:71:26:7b:42:
3e:1a:e0:02:33:3e:7c:90:3e:db:d1:39:1a:0f:12:
9b:34:26:51:73:f7:be:10:16:1a:3a:8b:0b:67:6a:
ad:f2:0b:d1:ca:8b:8f:ab:c7:47:4b:f1:45:40:ad:
26:e6:60:7d:c5:10:fa:ef:74:4c:c4:31:71:3d:08:
d9:fe:20:5a:77:d5:80:b0:54:ea:d5:a2:4a:bd:82:
05:1f:e2:3e:46:e5:c8:00:62:df:25:0e:68:a2:d4:
cc:99:6b:ca:53:b9:6b:3b:52:0c:90:ff:a9:d3:76:
ab:6a:ce:fc:3a:e9:e2:86:a5:04:8f:43:b7:10:72:
3e:74:3b:5d:90:f2:57:ca:bd:0d:97:92:29:98:39:
53:9b:51:10:da:90:9c:87:fa:b9:7d:62:91:92:eb:
1f:75:02:14:d2:db:67:02:36:1c:8b:81:5c:d4:df:
53:64:66:18:fa:95:d1:c0:e9:ee:4f:8b:c7:79:26:
0a:6a:d7:b3:68:f6:2d:9b:53:fe:fe:f3:14:eb:e8:
fc:60:eb:73:83:68:60:85:a0:43:d6:87:eb:5e:08:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:49:1B:B2:24:93:80:1B:5A:50:61:9A:BE:07:8C:ED:F9:7D:F1
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/339E59F4EC0911ED8D2A6F70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:3dc0::/48
Signature Algorithm: sha256WithRSAEncryption
84:83:87:e6:1c:47:9e:b3:c5:c9:5c:09:24:c4:54:5d:ef:b9:
e6:c6:74:da:c9:20:72:b0:86:c7:0c:35:44:59:ea:60:61:ea:
9a:a8:6b:f3:9e:6c:72:4a:35:e4:f2:94:f7:0c:a9:ed:d9:63:
0d:6c:de:ef:ad:33:fe:9f:bd:a9:4f:81:fc:0d:02:cb:7f:c5:
49:5f:d8:96:c5:fe:2c:af:8f:62:0b:05:ff:ca:0f:5d:ae:6f:
a6:f9:75:61:ae:54:96:71:15:48:f6:b1:ee:06:89:4c:a0:46:
c2:34:14:aa:77:18:51:13:55:b3:23:a1:7d:64:48:6d:2e:02:
66:e5:94:37:da:37:cd:2b:15:64:2c:c5:0a:51:2e:a2:fe:5d:
86:6c:d2:71:07:c8:9d:6b:fa:c9:64:bd:37:91:20:d9:d1:78:
8e:c3:63:d8:0d:f7:ed:ea:65:3e:e8:5a:f3:87:46:cd:75:3a:
a0:46:55:93:ef:44:b9:cc:be:ca:e8:59:69:35:a3:ee:46:6d:
74:a4:ab:24:3c:55:6a:ca:52:20:51:7e:9b:3a:ff:55:c4:22:
4c:49:e6:62:7a:fc:0c:a6:d9:bf:58:d3:76:22:03:0e:8d:b5:
96:f7:22:3f:ec:9b:40:5e:6a:1e:79:26:46:5f:dc:92:97:cc:
03:81:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:46 2024 by rpki-client on console-ams.rpki-client.org