Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6E54170CBFA711ED8463C430C4F9AE02.roa
File: 6E54170CBFA711ED8463C430C4F9AE02.roa (raw, json)
Hash identifier: oOerxfAb2w/1nExtzJoXD6iYajaGn+dCc/IZYH4zKCo=
Subject key identifier: DE:E9:83:B6:37:53:75:2B:4A:D4:29:B7:FE:AC:4E:CD:C6:42:49:03
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 94
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6E54170CBFA711ED8463C430C4F9AE02.roa
Signing time: Wed 12 Apr 2023 22:25:55 +0000
ROA not before: Wed 12 Apr 2023 22:25:55 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 49999
IP address blocks: 218.33.64.0/22 maxlen: 24
218.33.104.0/22 maxlen: 24
218.33.108.0/22 maxlen: 24
218.33.112.0/22 maxlen: 24
218.33.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Apr 12 22:25:55 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64372ff2-d610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:a2:e2:71:4e:b5:96:d0:74:33:5c:0a:96:
3a:a0:5d:8c:8c:ae:1a:99:fc:67:bb:f3:5f:db:9c:
26:85:0b:1d:26:18:91:de:29:86:8c:20:65:a6:17:
2c:7b:c4:ae:7f:fe:81:64:25:06:7f:cb:4b:d2:4a:
50:1b:36:dd:b6:3e:33:01:7a:c7:b4:47:27:23:e8:
96:6d:78:fc:29:1b:ce:ce:c7:f6:d3:2e:eb:0d:eb:
48:85:62:9a:e2:69:d8:ee:da:6f:c8:2e:00:b8:a7:
3d:c8:59:02:fa:b2:ee:4b:cd:c0:ce:27:73:ec:8a:
14:0f:f5:7b:3a:d1:f0:f0:3f:c4:35:34:45:8e:07:
7e:eb:e4:aa:6d:97:ba:3b:98:c1:80:68:5a:21:66:
6e:6b:41:13:16:31:df:0f:4b:f3:ce:75:da:4c:5c:
c3:a1:59:ee:63:a1:ad:11:03:a7:9a:c3:b0:c9:66:
30:45:65:37:ef:2e:8f:60:03:10:69:e5:50:df:c1:
20:1e:88:2e:00:7a:f3:f3:65:93:d8:61:e7:64:0a:
25:23:55:06:b8:57:0b:1d:bf:9d:56:74:f7:6e:31:
1b:6a:af:88:6d:2e:8b:13:af:e4:a9:67:5b:a8:2c:
ba:3f:84:3f:59:a8:71:2a:35:40:51:6e:2f:b7:92:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:83:B6:37:53:75:2B:4A:D4:29:B7:FE:AC:4E:CD:C6:42:49:03
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6E54170CBFA711ED8463C430C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.64.0/22
218.33.104.0-218.33.119.255
Signature Algorithm: sha256WithRSAEncryption
05:32:d9:b1:35:41:78:c8:60:7b:ef:3a:3f:33:2e:58:b8:77:
26:5a:ab:fa:a8:c4:50:13:f0:a1:f6:cb:dc:91:1b:d3:ae:e0:
1b:9c:4d:d5:8f:15:ff:6b:1c:99:b3:68:db:32:e7:07:9d:99:
fe:a3:28:c0:91:b7:04:41:1c:88:b8:be:0c:68:32:41:22:6c:
87:b1:1a:b1:b0:bd:e3:ac:ef:8b:a6:20:43:32:e1:64:45:ec:
34:84:87:3d:ae:27:da:79:f0:04:f5:37:cb:9b:c7:22:0b:39:
9b:52:69:50:f1:1c:63:9a:0e:67:5c:f6:4a:9f:87:1d:45:d2:
76:24:de:38:ac:e5:b8:d9:81:3a:53:a0:bb:66:c7:71:e2:04:
fb:06:d0:54:e3:9e:ce:15:ff:64:bf:5c:2e:a2:b9:2d:5f:cb:
05:10:93:14:bc:cc:e7:2a:8f:6b:a5:13:70:32:77:5c:24:46:
c2:48:1d:7c:ec:41:18:76:db:cc:b3:4a:31:e6:c1:d0:60:2d:
61:e8:07:bc:ef:89:be:0e:29:98:97:e4:20:13:63:f5:26:cf:
11:fa:f4:ef:28:0a:e6:ec:74:92:5e:01:ce:d6:d5:31:d6:85:
39:a5:bb:56:1c:fd:01:9c:25:6c:62:0f:61:59:14:79:3b:94:
05:09:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org