Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/0068B446668D11EDBFE3FC1BC4F9AE02.roa
File: 0068B446668D11EDBFE3FC1BC4F9AE02.roa (raw, json)
Hash identifier: eIEAQ6m4Qn2ToiZcHjLBo/4b64fSKdUwEb9rIsaYESU=
Subject key identifier: 27:5D:03:61:DB:35:E3:CE:59:65:E6:E5:DA:01:D8:07:69:A0:43:02
Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial: 028D
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/0068B446668D11EDBFE3FC1BC4F9AE02.roa
Signing time: Thu 17 Nov 2022 15:32:10 +0000
ROA not before: Thu 17 Nov 2022 15:32:10 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 40676
IP address blocks: 103.177.80.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Validity
Not Before: Nov 17 15:32:10 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=637653fa-67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:c2:30:cb:37:5c:6d:4f:cc:fb:ed:5c:de:
97:97:26:8a:ec:41:7c:d3:16:d5:97:a3:17:84:2d:
f9:10:d4:e1:4a:c8:d9:b5:fa:3a:58:c5:26:35:e1:
00:2d:51:be:63:96:4d:be:a9:e5:0c:79:41:69:9f:
c6:ed:20:d2:3a:7a:de:ba:ea:22:54:32:f0:05:bc:
2a:b4:25:11:a1:f8:78:ac:6e:d6:95:f8:c5:7c:b4:
ff:5e:ff:af:76:24:6b:79:27:84:8f:95:06:d3:41:
00:b0:a5:ad:20:9c:f0:f5:e3:c8:b8:bd:45:b6:31:
f4:11:63:2b:72:8c:cc:d4:02:58:44:07:9a:ca:db:
44:8a:7f:b3:b5:9f:16:b8:6d:86:3c:49:cc:5a:08:
10:ee:7f:a2:49:d9:72:3c:42:3b:de:40:15:fe:9d:
d3:f3:d9:ef:c3:bf:76:ea:6a:24:3d:a5:2c:23:55:
1e:da:10:8c:12:bd:49:a6:40:85:ab:5f:7e:89:c8:
54:86:46:82:34:49:0d:25:89:ec:a7:12:b8:f4:a4:
10:da:b6:e0:20:f6:cb:08:28:27:49:43:7e:ef:fb:
1c:72:74:f1:81:20:21:eb:b4:08:c2:19:e4:9c:85:
92:1a:2b:6f:d7:5b:36:38:34:84:95:99:7a:bb:f7:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:03:61:DB:35:E3:CE:59:65:E6:E5:DA:01:D8:07:69:A0:43:02
X509v3 Authority Key Identifier:
keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/0068B446668D11EDBFE3FC1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.80.0/23
Signature Algorithm: sha256WithRSAEncryption
96:ae:6d:a3:7b:22:9f:f7:1f:77:e1:da:a2:24:8d:60:45:71:
71:e9:26:15:63:f3:82:56:cd:cc:b9:80:6c:7d:fa:8c:44:1b:
4f:86:32:41:75:ac:f0:43:b5:9d:26:74:fa:cd:40:6a:c3:02:
51:81:08:b5:1c:2f:b3:ec:f3:ee:7d:07:7b:5d:dd:1f:4d:38:
b3:51:46:e1:ed:92:b0:e7:7a:74:18:b1:b1:05:dc:ae:bc:fe:
e9:d9:e9:7f:cc:33:29:6c:76:b4:cc:bc:1f:a6:ee:aa:57:c4:
77:1c:b0:51:8e:35:8a:0b:62:e8:1f:47:d1:3d:8b:ac:b7:85:
98:5b:ee:ac:be:ba:55:a3:d3:0d:e6:28:15:7d:54:a8:4d:1a:
9f:cb:78:c1:01:82:21:9b:19:ba:34:db:4e:94:fb:ed:a7:77:
f7:69:0c:07:db:18:04:1c:08:77:d4:1d:d5:72:27:a0:21:f3:
b4:66:ca:a8:d0:ed:7f:3f:74:87:af:17:dd:56:d1:0e:b0:fd:
05:33:be:99:be:44:8b:bf:be:fb:af:5e:40:a4:54:b9:12:c5:
21:60:2b:46:d8:8e:6c:0c:6c:d0:22:7e:b7:4d:ef:9f:d7:db:
61:3f:47:d0:9e:ab:20:77:84:fe:11:87:45:06:af:d5:54:b8:
a2:42:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org