Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/1A07CC822A0211EE9857866AC4F9AE02.roa
File: 1A07CC822A0211EE9857866AC4F9AE02.roa (raw, json)
Hash identifier: 5W8gv74nJozbTEE1CoxVuMpYePg3204DuWBA4N7ZHNc=
Subject key identifier: 71:2D:A5:C6:18:D4:8F:15:DD:26:16:DD:E7:29:0E:8A:A1:86:8E:D8
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 2917
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/1A07CC822A0211EE9857866AC4F9AE02.roa
Signing time: Mon 24 Jul 2023 09:11:41 +0000
ROA not before: Mon 24 Jul 2023 09:11:41 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 40065
IP address blocks: 183.90.184.0/24 maxlen: 24
183.90.185.0/24 maxlen: 24
183.90.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10519 (0x2917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Jul 24 09:11:41 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64be404d-81a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:7b:b4:6b:05:b5:14:77:b9:37:17:36:ac:
12:46:eb:7b:dc:c6:41:65:7a:4c:3d:4a:0c:48:05:
3a:14:b5:5c:38:bf:5f:59:ef:32:f9:a3:b8:f5:5f:
c1:67:a0:d2:f4:45:7f:04:c0:b5:bb:c1:5d:92:9c:
93:4c:f0:ca:e4:eb:67:72:64:f0:3c:21:d3:eb:b1:
21:e0:5f:60:33:28:c9:bb:cb:51:0d:33:66:2b:e8:
a2:d5:cc:45:5e:29:69:b4:76:19:51:93:15:9b:34:
21:5b:95:cc:0e:9e:77:59:d1:b1:89:bb:21:60:6b:
ba:1c:ad:af:a5:7b:6f:32:b5:e1:17:b0:6e:3d:17:
ad:d5:09:b3:55:31:98:1b:ad:4d:07:97:49:bb:a5:
f6:27:4a:03:58:f9:a4:09:19:14:3a:c8:18:e3:1d:
68:e3:fb:e6:28:94:fc:11:99:6a:c1:c7:54:65:71:
6b:ea:1c:87:70:61:2e:74:21:49:c8:9c:7d:f4:51:
7a:98:a3:4d:92:3b:17:56:77:d8:89:01:0a:d7:f6:
9b:1f:7d:ac:77:bb:18:90:25:e4:d6:07:44:76:f9:
10:7a:29:83:5e:95:de:c8:ed:b5:d0:44:12:8a:9f:
4d:2d:d8:6e:77:b6:47:20:8b:d2:9d:0c:75:aa:19:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:A5:C6:18:D4:8F:15:DD:26:16:DD:E7:29:0E:8A:A1:86:8E:D8
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/1A07CC822A0211EE9857866AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.90.184.0-183.90.186.255
Signature Algorithm: sha256WithRSAEncryption
67:20:c3:d4:c3:45:78:75:38:21:9f:05:64:76:72:d1:21:c8:
96:ce:33:03:15:dd:48:72:f7:bb:bd:b1:39:5c:f3:50:f9:a0:
77:24:8d:58:38:b0:da:4f:7f:47:b4:bc:3c:9d:b9:71:8f:36:
c9:23:47:4c:25:69:2e:f7:ef:11:71:f8:95:54:0c:b9:b6:22:
8e:e2:ec:9d:73:d1:a5:22:06:22:4e:f4:5d:04:a9:73:dd:75:
05:d0:bf:72:c4:d9:28:06:ec:28:da:c4:a8:18:0c:30:1f:07:
d5:3f:9f:18:42:d2:1f:89:5f:8b:68:a0:ef:9f:0b:ae:85:9e:
2a:60:07:40:f4:47:3f:74:e2:5d:42:df:4e:64:c9:1b:6f:5f:
6d:18:ca:d3:59:7a:13:9b:95:93:dd:22:5c:6e:17:f8:8c:74:
0a:18:a2:63:6c:aa:77:8d:d6:09:87:95:be:05:0a:f1:23:40:
53:6b:9c:53:47:a9:47:81:17:9e:9e:c0:23:c4:6a:82:60:fa:
cf:36:32:32:15:51:60:09:61:1c:0d:57:5d:d0:0f:28:dd:fb:
67:32:7b:80:82:01:91:80:f7:52:2f:66:70:1d:67:2e:87:10:
4a:7f:3d:8c:b4:1c:4f:2f:c6:6b:dc:3b:6a:2d:af:ce:b7:61:
c8:46:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org