Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/772492AAAD5411ECB0E6DF32C4F9AE02.roa
File: 772492AAAD5411ECB0E6DF32C4F9AE02.roa (raw, json)
Hash identifier: kuzVgKQ1d8OBaljDKaYaibvOQRS9eMXr3pzvEkhrQdo=
Subject key identifier: BB:99:A4:19:E9:7D:5F:A3:B9:01:F0:20:13:F9:79:F7:B7:57:F2:F5
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 0333
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/772492AAAD5411ECB0E6DF32C4F9AE02.roa
Signing time: Wed 29 Jun 2022 14:22:33 +0000
ROA not before: Wed 29 Jun 2022 14:22:33 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 148971
IP address blocks: 2001:df6:b780::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Jun 29 14:22:33 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62bc6029-b15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:47:da:f1:d5:90:05:51:c9:52:71:75:a4:
e1:78:c0:c5:bf:82:5d:02:5b:bf:32:ce:9b:ff:d2:
c1:7f:f1:df:ed:49:38:16:e2:e8:8e:9e:5f:e5:39:
9a:0e:88:20:8c:82:6e:2c:be:bf:ee:9e:90:4b:fb:
ce:c0:47:35:74:f6:b1:52:e5:0a:ad:80:62:8e:36:
68:dc:a4:ff:e6:59:e0:83:69:80:77:19:b8:45:90:
95:2e:a5:5d:69:12:1e:09:54:92:74:fa:3a:c6:18:
58:39:ca:c6:c7:06:56:c3:27:83:c3:37:a6:c3:35:
96:51:5e:0e:7f:43:3d:d2:23:ca:13:c7:56:0f:75:
58:dd:30:5a:d4:ad:66:87:0c:af:ee:a0:fd:13:b0:
48:bb:2e:d5:17:df:23:0c:7a:98:47:e5:2c:e6:f4:
98:25:20:57:e2:da:11:65:79:23:fd:ca:ba:41:cf:
7b:a2:b4:e2:dc:a8:95:63:7d:57:7d:bd:10:75:bd:
43:a0:52:05:f3:13:ad:af:23:d5:0a:c6:da:e3:1e:
9b:d8:3e:6c:b1:93:1c:91:77:43:a3:8d:48:a3:a1:
43:e3:9e:52:7b:af:b6:3c:04:78:4f:ed:55:b4:43:
7d:e6:1d:5f:7d:40:78:66:09:52:74:51:9a:3f:51:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:99:A4:19:E9:7D:5F:A3:B9:01:F0:20:13:F9:79:F7:B7:57:F2:F5
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/772492AAAD5411ECB0E6DF32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:b780::/48
Signature Algorithm: sha256WithRSAEncryption
ab:e2:79:82:82:4e:73:12:28:39:58:63:f5:9a:b7:d4:3c:cd:
b7:c6:28:52:d6:ea:77:0e:d3:04:85:09:55:aa:eb:ed:ea:6e:
29:f2:c3:58:3e:85:0f:a9:91:51:03:44:5f:68:84:e6:5c:b2:
ef:34:d1:8a:21:fe:c4:f3:70:c0:ae:88:c6:96:19:2a:3d:7a:
9b:9a:97:cb:46:f2:81:97:49:51:7a:29:d5:0e:5d:43:5e:19:
1c:72:95:fa:d3:ee:1f:37:a4:c6:9a:e3:37:20:57:bd:64:58:
88:4b:7b:fa:95:17:1b:6c:4e:05:f2:44:6e:8d:f6:6b:34:50:
17:c2:1d:02:74:0e:92:25:88:89:60:1a:60:99:01:0d:cb:9c:
bf:4f:8f:e1:6f:c0:67:22:76:46:d6:95:71:28:a3:33:fe:f4:
c5:39:33:c0:af:11:44:46:bd:2c:db:bf:b0:5c:f3:a4:4f:f1:
b3:5d:0a:47:eb:f2:a7:b7:60:c6:49:40:9f:43:b8:16:b2:21:
11:c9:bb:2e:b7:98:b7:f0:49:11:cf:32:4a:4d:6f:be:b6:4b:
72:68:24:2f:c8:57:b9:5c:17:f9:91:9a:ce:ca:a4:03:a3:bd:
80:7c:0a:15:66:b2:28:c5:f6:28:02:8a:73:56:00:60:97:b9:
74:b5:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org