Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/2EB6E4828F9811EE88C11770C4F9AE02.roa
File: 2EB6E4828F9811EE88C11770C4F9AE02.roa (raw, json)
Hash identifier: uFFYt7imoS5JWj+2YtKyLU7/SNIUNRESGKBKGsTDDSI=
Subject key identifier: C0:E1:F0:67:28:91:B3:BA:9A:FB:83:6B:FB:0D:76:DB:9F:58:0D:31
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: D2
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/2EB6E4828F9811EE88C11770C4F9AE02.roa
Signing time: Thu 30 Nov 2023 15:50:28 +0000
ROA not before: Thu 30 Nov 2023 15:50:28 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 60117
IP address blocks: 103.85.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Nov 30 15:50:28 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6568af43-e3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:64:11:e1:dc:4f:f3:46:7a:1d:8b:14:f1:
43:9d:c6:c7:79:d1:be:e9:24:8e:5e:c1:01:9d:d2:
8a:ab:52:ff:44:d7:35:1d:53:bd:54:39:da:ae:dc:
fe:98:01:39:28:23:4d:9c:5b:84:29:d9:44:8d:f8:
6a:4f:6f:a4:dd:c1:0f:96:de:e9:44:b1:1a:dc:58:
41:a2:61:34:0f:14:fc:80:b4:44:3b:11:a3:9e:42:
70:65:13:0e:24:ea:d8:bc:6c:19:c1:ac:9f:5f:ff:
1f:5b:b7:d7:b2:06:e8:be:11:62:d2:2e:5e:33:0f:
03:f1:16:1f:ca:7f:d7:28:28:4f:fe:be:ad:6a:44:
62:00:81:27:37:7c:9d:56:e0:89:08:e0:6c:02:06:
6e:1e:cb:14:17:c0:2f:0b:9a:3e:48:59:50:de:1f:
61:c9:2e:7c:05:ae:99:f5:96:80:11:ea:74:a9:51:
81:63:8f:c9:0c:44:08:1f:df:70:d8:c7:b0:c0:6f:
78:11:b1:29:ef:cf:4b:3d:c1:d3:46:65:36:85:6d:
d1:bd:63:f9:48:92:4e:9d:04:a5:6a:fc:6c:d8:59:
1f:93:50:e6:1b:51:ad:18:f1:e0:75:20:68:ed:a4:
3b:7b:57:f3:d0:f8:33:68:42:ae:8e:bd:f9:d6:e7:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:F0:67:28:91:B3:BA:9A:FB:83:6B:FB:0D:76:DB:9F:58:0D:31
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/2EB6E4828F9811EE88C11770C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:93:48:93:a7:24:3d:d7:af:0b:ed:f2:ce:ef:a7:39:20:41:
21:64:e4:88:47:07:37:2f:04:af:2d:da:fc:22:9c:54:70:84:
ce:0e:19:b5:4f:d1:51:50:dc:1d:ce:66:1f:ed:0c:a5:25:92:
d2:13:34:5a:d8:d7:48:44:cf:9a:31:07:7e:ac:8d:d1:92:ca:
58:bc:ab:71:39:cb:24:5c:61:5b:ff:bb:29:31:5d:cb:a2:cf:
e7:39:2e:a9:2a:93:e9:42:5c:7f:17:59:66:b3:92:08:a0:1c:
ea:16:89:83:af:81:cb:2f:5e:bc:26:7a:9c:fa:11:1f:43:33:
c9:ca:ab:f0:7e:42:d9:f6:e6:98:f7:39:12:18:55:fa:74:64:
d6:7b:d9:fe:90:a3:a2:6d:c7:b5:73:0f:65:26:af:b1:4a:df:
61:47:f4:63:25:d1:25:04:0f:fe:64:38:0d:3f:8a:98:ff:a6:
32:de:65:0c:51:82:5a:2b:80:80:fe:e1:52:a3:0a:b2:83:1e:
3d:07:d7:7e:d8:c5:eb:0e:42:3e:34:2b:4d:de:e2:0b:0c:86:
76:8f:d3:ac:c5:85:f9:c4:5e:b2:82:0b:34:90:3d:6b:8e:be:
a0:dc:2c:13:0d:fb:2e:5c:1c:d8:80:a1:ba:47:4e:cd:94:b1:
cd:a7:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org