Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/CECF8760E0E111ECBFF27B44C4F9AE02.roa
File: CECF8760E0E111ECBFF27B44C4F9AE02.roa (raw, json)
Hash identifier: D1RSR918XS8QMwkru2a+OsHY5xdZ0AQDAJHWFA3LT6c=
Subject key identifier: BB:3F:BA:E3:2C:75:8C:BB:3C:C4:B0:62:41:70:36:3D:A1:CB:15:A9
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 0108
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/CECF8760E0E111ECBFF27B44C4F9AE02.roa
Signing time: Mon 24 Oct 2022 18:34:06 +0000
ROA not before: Mon 24 Oct 2022 18:34:05 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 12888
IP address blocks: 168.153.3.0/24 maxlen: 24
168.153.4.0/24 maxlen: 24
168.153.5.0/24 maxlen: 24
168.153.6.0/24 maxlen: 24
168.153.7.0/24 maxlen: 24
168.153.8.0/24 maxlen: 24
168.153.106.0/24 maxlen: 24
168.153.107.0/24 maxlen: 24
168.153.108.0/24 maxlen: 24
168.153.109.0/24 maxlen: 24
168.153.110.0/24 maxlen: 24
168.153.111.0/24 maxlen: 24
168.153.144.0/24 maxlen: 24
168.153.145.0/24 maxlen: 24
168.153.146.0/24 maxlen: 24
168.153.160.0/24 maxlen: 24
168.153.161.0/24 maxlen: 24
168.153.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Oct 24 18:34:05 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6356da9d-7dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:09:e9:a7:8e:69:bf:d5:e6:47:bf:60:48:
fd:c5:fc:67:b9:55:ba:6a:ce:27:78:6f:96:c4:96:
88:1f:3b:88:8d:07:0d:2c:ea:88:43:8e:c5:20:fc:
8a:dd:3b:1c:7c:51:b9:f7:a3:13:4b:05:bc:2b:bb:
a2:d8:40:6e:c1:bf:f8:f8:94:da:2b:6b:9a:cf:09:
ec:ec:4b:7d:00:42:e0:c2:42:b3:51:97:ff:71:a3:
42:3f:51:a2:95:fc:7b:a5:e4:7e:6f:27:9c:4c:d7:
46:4e:0f:60:1b:d9:ed:c1:93:b8:fb:bb:9b:6b:69:
93:d0:27:23:be:e3:8e:81:11:44:b1:e4:0b:33:a6:
19:b9:1b:d7:91:f6:ac:90:8b:93:75:27:a2:c2:4b:
31:2e:42:01:4f:c0:5f:b3:89:3b:46:b4:bf:5e:ab:
f5:90:11:0c:47:9b:fa:e4:c0:e5:fa:cd:9d:d6:aa:
50:b5:e6:1c:25:9e:bc:ec:d9:33:ad:43:c7:54:fe:
35:e6:13:c2:8b:b6:cb:16:bc:3e:e6:b6:99:c2:21:
6d:28:bd:fd:ba:36:dd:a7:3f:3d:52:e4:98:38:30:
db:13:0b:17:b8:00:91:05:60:36:a0:69:76:07:bc:
56:09:e5:ea:27:96:7b:ad:89:11:57:7b:ce:65:ee:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:BA:E3:2C:75:8C:BB:3C:C4:B0:62:41:70:36:3D:A1:CB:15:A9
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/CECF8760E0E111ECBFF27B44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.153.3.0-168.153.8.255
168.153.106.0-168.153.111.255
168.153.144.0-168.153.146.255
168.153.160.0-168.153.162.255
Signature Algorithm: sha256WithRSAEncryption
64:32:a2:6a:68:74:10:b4:e1:d5:a8:ad:fa:28:90:b9:17:0a:
53:21:65:a4:dc:c2:d6:93:9b:0b:88:44:42:71:0d:48:23:e3:
67:b9:a1:b6:ec:bb:15:00:2c:2a:5c:0c:9e:47:41:75:0e:82:
b4:74:0d:8d:4c:8e:7f:6a:6e:bf:e4:6b:1a:a4:1a:7a:de:fc:
39:90:10:73:79:6f:3d:05:e6:70:45:2f:29:16:de:33:98:22:
f3:8f:64:7b:8d:82:26:5c:85:08:70:ed:18:d3:65:20:46:62:
50:7d:1a:ef:9f:46:2e:85:83:f0:9a:f7:37:09:35:1e:6f:78:
f1:ea:12:65:61:0c:75:34:c9:9f:aa:31:15:3f:f8:51:7d:da:
3f:06:c8:ad:33:c1:9a:9d:37:72:b1:b7:54:4b:de:70:7b:a5:
c8:78:f9:ef:df:bc:66:c4:ec:43:32:e3:81:ca:17:26:9c:5e:
bc:b6:4d:70:25:23:2d:60:e9:d7:1c:7c:2f:a7:5b:05:6c:d9:
d9:0b:fb:09:7a:79:2b:1b:0e:9a:70:6a:cd:4f:1b:5c:06:6f:
57:17:17:b3:7f:15:2f:8b:c2:29:71:6e:2f:03:1a:6b:18:45:
09:9a:80:0c:f3:41:8b:5a:c3:b5:4e:15:86:74:27:51:64:4b:
e9:66:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org