Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/E9C0E1FC0DAD11EC81F31629C4F9AE02.roa
File: E9C0E1FC0DAD11EC81F31629C4F9AE02.roa (raw, json)
Hash identifier: Bn5rwj6gQLE4ELYRDX8f3Tkbutopo1IeBIc6HkN0JuE=
Subject key identifier: 3C:BF:6E:08:79:47:CB:9E:71:8C:9D:D5:0F:D8:BA:13:34:51:6B:05
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 05CB
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/E9C0E1FC0DAD11EC81F31629C4F9AE02.roa
Signing time: Tue 31 May 2022 22:22:05 +0000
ROA not before: Tue 31 May 2022 22:22:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56264
IP address blocks: 114.129.12.0/24 maxlen: 24
114.129.13.0/24 maxlen: 24
114.129.14.0/24 maxlen: 24
114.129.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Validity
Not Before: May 31 22:22:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6296950c-a5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:2c:f8:b8:58:0b:b3:0b:ec:43:48:e9:33:
35:ad:a2:61:d4:13:c2:a0:52:b1:b4:17:fa:05:cb:
dc:55:84:6a:4c:09:a7:a2:31:0d:22:8d:20:75:56:
c0:5e:1c:57:13:f6:15:0b:c6:c9:48:a8:94:c6:8a:
c6:19:6b:3c:a5:00:30:78:e9:36:56:9f:6b:c5:82:
ed:25:0a:fb:55:c8:68:95:e6:fc:b2:3e:19:63:d3:
b2:67:4f:77:7a:ad:ff:9b:0f:42:5d:3f:00:f8:02:
8b:2c:f9:99:56:2b:7d:cb:d5:d8:57:e1:cc:09:ee:
7f:49:9f:0d:cd:a6:8e:1d:60:e9:88:fa:0f:d0:07:
63:7a:a0:8e:d9:6f:d3:50:f0:53:7e:6a:b9:f5:4e:
e4:60:bb:8b:5b:00:01:47:6e:ae:8f:0c:93:ff:6d:
87:7d:f4:a3:f0:85:51:e9:b5:b9:8f:01:3a:99:87:
91:b8:ca:23:49:1a:d8:51:62:98:51:a9:3c:26:44:
d8:bc:f1:f3:97:81:86:ee:28:ce:7f:93:36:a1:4a:
82:62:c5:5d:62:2c:66:ae:6d:11:02:f3:6d:e6:e4:
7a:a9:e2:7a:7b:4b:e4:25:20:1d:31:4b:eb:70:b1:
7e:9a:32:67:29:de:5a:f5:b6:2c:a9:bf:4b:d5:f4:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:6E:08:79:47:CB:9E:71:8C:9D:D5:0F:D8:BA:13:34:51:6B:05
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/E9C0E1FC0DAD11EC81F31629C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:e8:8f:f8:86:3a:96:cc:ae:ac:c5:12:80:d1:51:e6:e7:73:
85:be:7a:05:3b:a1:83:f5:05:f5:03:ae:88:53:2c:44:50:be:
32:c5:21:8b:2f:fa:1d:e9:5c:d8:7c:b2:52:83:c2:84:0d:4e:
aa:67:fd:16:60:51:47:4a:d0:8e:67:dc:cc:9d:b8:e6:c8:3f:
99:f7:09:ed:59:40:dc:b3:c2:89:25:2d:34:c8:4d:eb:f3:a8:
54:6f:bd:b9:08:9f:8e:6a:a1:8f:b5:1e:57:91:76:34:24:11:
98:c3:4c:7c:4f:4f:53:31:ae:ba:6a:30:b9:3a:c7:89:17:b7:
66:29:fb:bc:4a:c5:69:05:cb:e4:ca:a4:84:4e:fa:e2:dc:ff:
87:6a:ea:39:26:61:f1:90:4b:1d:ab:71:79:a0:4a:b5:a7:28:
4b:aa:15:96:e6:5e:31:aa:44:2b:69:9a:b7:78:e4:ba:29:c1:
60:e1:e6:99:5c:8c:e2:2e:a6:ad:a3:66:44:dc:5b:32:8b:b5:
59:76:ed:ed:8e:6c:e8:d6:37:bc:b3:36:d7:88:25:37:b4:e1:
de:fa:47:48:95:f2:2c:cd:89:0b:52:ae:4a:5f:78:6f:3d:2a:
cf:5e:72:5a:1c:62:66:09:65:76:19:45:e9:8e:43:85:d6:f9:
81:14:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org