Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9AE72284E37A11EA84A20810C4F9AE02.roa
File: 9AE72284E37A11EA84A20810C4F9AE02.roa (raw, json)
Hash identifier: T9fhFnb9c3GL1JS8oim3JqoxqonpVQO8KbNxeZDomj4=
Subject key identifier: 85:80:93:6E:E8:75:13:D8:6A:B1:4B:2D:D5:F8:77:9F:CA:AA:85:8C
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 099A
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9AE72284E37A11EA84A20810C4F9AE02.roa
Signing time: Fri 24 Dec 2021 15:10:34 +0000
ROA not before: Fri 24 Dec 2021 15:10:34 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 133378
IP address blocks: 185.175.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Dec 24 15:10:34 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61c5e2ea-544d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:e5:cc:67:69:32:26:f1:d8:e0:95:a1:ad:
f8:a6:77:51:4f:33:1a:88:fd:1b:80:3e:04:70:e5:
9d:74:8a:44:b9:1b:dd:d9:96:0e:07:c5:98:33:12:
46:29:a8:bb:ee:c0:92:5e:96:1b:c2:10:e8:90:95:
5a:a4:2e:72:77:2b:cd:84:11:91:57:10:72:ca:9d:
48:74:4d:2d:4c:04:76:9e:e1:0a:bc:27:e2:9a:f3:
ea:cd:de:82:72:70:24:1c:49:99:04:50:bc:53:3a:
b9:55:14:ce:be:60:c7:16:cd:5e:1a:90:9c:f4:be:
82:54:27:63:03:3f:c2:d1:b2:c4:78:46:3b:8d:77:
3a:1c:a0:0a:91:77:5e:af:e0:93:bc:c5:f9:7a:86:
29:44:6b:a9:c7:a1:45:16:9d:68:8f:64:11:5b:77:
e9:01:5d:1c:ec:04:ae:99:e4:f8:d6:fd:3c:38:15:
c6:9c:50:3a:0e:37:6f:fe:05:b9:9c:75:98:01:19:
58:18:c4:27:bf:58:b7:eb:d6:c7:da:44:0d:c8:0b:
b0:0b:4a:03:4e:a0:f7:64:99:5f:7e:75:a6:5f:fd:
6d:14:8e:eb:ab:11:38:a3:40:7c:52:aa:87:70:53:
e5:da:1c:7c:b4:74:b0:53:3e:a7:59:71:5f:89:04:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:80:93:6E:E8:75:13:D8:6A:B1:4B:2D:D5:F8:77:9F:CA:AA:85:8C
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/9AE72284E37A11EA84A20810C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.175.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a5:a1:d7:dd:f2:32:fc:04:d7:f5:2e:94:a9:05:a8:86:80:
e7:a5:4c:8d:d5:9d:98:16:c3:f3:ef:af:c0:de:c9:7b:8d:f3:
1a:a7:e4:10:cc:52:63:91:32:51:7a:6b:96:b7:85:d1:b8:cc:
2f:e7:03:c1:49:a8:f5:63:03:f0:52:d2:e2:0f:10:dd:18:d1:
17:eb:c1:f0:b7:f5:a3:9c:0d:60:94:d1:c2:7e:dd:04:37:06:
42:ad:a8:50:5b:dc:6b:a8:2f:7d:ad:ac:80:0f:a6:ec:fe:00:
5f:99:51:ff:f4:77:ff:75:01:06:fa:b0:0f:4d:da:a7:c6:a4:
77:80:b4:80:85:b3:91:c5:f1:3e:32:bd:a1:92:a6:0a:65:0c:
0b:64:c5:0c:06:2b:eb:4e:f3:2b:08:e7:2b:f1:64:6e:b4:32:
fb:c7:db:d0:17:15:6d:3b:f8:50:10:fd:3c:8e:1a:b2:8d:67:
72:68:08:6e:fa:e9:3f:36:5d:4e:e6:3b:5a:07:fe:dd:15:fc:
4c:b9:d0:a1:a0:23:fd:bc:c2:c6:06:65:7c:8f:1a:02:70:05:
27:71:46:9c:da:52:88:31:5b:2b:83:25:40:e2:54:12:a9:44:
8e:b4:1c:fe:fa:d4:8b:3e:85:fa:06:b9:61:9f:00:44:32:0a:
1e:4b:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org