Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/BC56BA82D74411ECB1EFEC3EC4F9AE02.roa
File: BC56BA82D74411ECB1EFEC3EC4F9AE02.roa (raw, json)
Hash identifier: f/FqQVfBwaJtJFlKNyJL8t9pyjkKYFCA8P5AJVzQIDc=
Subject key identifier: BD:B0:C6:9D:69:93:A5:74:9A:AC:8C:40:F1:4D:C0:5B:12:FF:A6:2F
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 0115
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/BC56BA82D74411ECB1EFEC3EC4F9AE02.roa
Signing time: Thu 19 May 2022 07:24:36 +0000
ROA not before: Thu 19 May 2022 07:24:36 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 212921
IP address blocks: 204.52.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: May 19 07:24:36 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6285f0b4-c405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:63:71:24:96:95:28:5d:32:66:b3:84:63:
21:74:2c:6d:f1:bd:d5:07:30:83:9b:67:3a:b8:b9:
10:85:32:c4:f9:01:27:5f:5e:af:d2:1f:89:a8:d8:
45:9e:a9:59:c1:50:62:e6:60:b7:f7:98:3f:26:36:
11:57:fc:8d:7c:c9:3b:c5:4a:35:81:10:9a:72:6e:
59:bf:a0:7c:22:41:f9:2b:79:70:55:d1:1a:0c:68:
0e:6a:a1:aa:48:25:89:73:ee:d0:9d:2b:a3:8a:3e:
1f:76:bd:84:cb:dd:8e:05:35:fa:c4:e5:21:2d:3e:
dc:d9:29:b2:97:17:64:c0:51:7f:f0:b8:bf:2f:5b:
31:45:1a:66:c6:ba:66:d6:ef:6c:17:62:4c:97:f0:
9c:48:43:b1:bc:cc:fe:be:84:ca:81:48:d9:60:9d:
e2:a1:67:d4:5d:a7:74:6f:6d:70:d9:be:7c:43:30:
62:d5:90:9c:f8:b8:76:73:57:1c:a7:a5:13:ff:9f:
bf:70:34:28:bb:c8:aa:f3:df:ba:62:4f:e0:56:c2:
9a:0a:46:7b:4d:74:07:1f:fb:d0:4d:18:24:45:16:
c6:8b:f2:b8:cb:34:e1:d6:cd:c4:28:99:bb:11:85:
9a:43:c8:b0:c5:7b:64:1e:35:5f:45:e8:ce:c1:41:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:C6:9D:69:93:A5:74:9A:AC:8C:40:F1:4D:C0:5B:12:FF:A6:2F
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/BC56BA82D74411ECB1EFEC3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
204.52.191.0/24
Signature Algorithm: sha256WithRSAEncryption
35:38:98:29:6b:e6:3b:10:2d:dc:b9:a4:8a:ac:60:80:57:26:
2c:51:54:94:a2:12:02:33:76:dd:e9:d3:26:e5:ad:2c:ef:bf:
5f:46:cd:87:5c:b0:b5:60:80:89:39:3e:ec:bf:63:77:44:a2:
cc:05:72:28:97:9a:ce:a2:4c:c3:44:cf:c1:be:ee:33:a0:0f:
d4:e3:33:c4:d9:69:5c:9c:27:46:e8:e6:1d:c4:66:a4:f5:52:
04:7a:b6:5b:cf:d7:b4:4f:50:fc:fb:b0:10:6c:b4:e1:29:31:
d1:ef:a3:98:d5:ba:28:34:96:5d:e1:40:cc:a2:de:18:97:d9:
9f:aa:f5:38:fa:ed:d7:87:01:5f:28:fa:18:ef:9d:d3:48:76:
0f:50:eb:22:9b:06:1a:e1:b5:bc:59:7d:e1:e5:69:1e:23:e6:
a7:5f:1b:5a:95:3b:7a:d9:3a:62:b4:4f:23:04:2a:a9:32:47:
91:df:b2:2d:42:cc:8b:59:4f:8d:9a:92:29:32:bc:ee:36:42:
8b:d9:3a:ac:08:4a:e1:30:96:42:4e:50:72:c9:95:00:27:91:
b6:57:f1:d8:2a:c1:56:f7:5e:5b:25:93:2f:a2:9c:9b:11:5c:
44:cd:7c:41:f7:de:d1:73:93:6a:15:b5:82:ef:67:aa:0f:b1:
0a:67:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org