Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/672A20FCC79611EC96AC5747C4F9AE02.roa
File: 672A20FCC79611EC96AC5747C4F9AE02.roa (raw, json)
Hash identifier: Rfl5/tmXFeVCJc7Ehgr6qZ1juUZfnO4PHzVFgIruAhU=
Subject key identifier: 73:83:EB:C1:73:6D:3D:AF:25:2D:0D:07:FC:44:E6:B8:3A:BB:B3:E4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0726
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/672A20FCC79611EC96AC5747C4F9AE02.roa
Signing time: Mon 02 May 2022 06:10:42 +0000
ROA not before: Mon 02 May 2022 06:10:42 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 13768
IP address blocks: 115.167.7.0/24 maxlen: 24
115.167.8.0/22 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 2 06:10:42 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=626f75e2-84ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:77:ac:de:0c:eb:69:95:88:93:76:c2:4f:
a9:9e:9b:7f:44:66:b8:6b:ff:b5:b9:47:62:c9:6a:
d7:96:8d:14:5f:e9:b7:35:df:50:36:3f:18:41:e0:
f2:b1:02:2e:f1:cd:e9:3e:45:9a:1f:a0:34:a8:94:
a0:e4:81:c7:df:63:08:c2:1a:56:dd:b5:42:49:4b:
63:46:5e:dc:99:59:34:78:4b:14:1a:d8:af:33:86:
f1:6d:7c:0f:8e:0c:16:8e:16:18:f6:00:e0:21:77:
5f:dd:d2:c9:ae:a9:ed:47:49:3c:90:3f:78:65:2e:
b2:c3:86:8e:28:eb:29:19:69:7d:dc:97:eb:f6:f4:
a1:8a:65:64:53:8d:91:49:3b:be:c1:18:1b:0c:b3:
b0:de:c5:a3:c3:c8:38:34:3b:f6:65:e1:64:c1:0b:
58:39:7d:31:2f:3b:d4:84:cb:f5:31:67:3c:a8:0f:
62:68:8d:ae:ab:6c:83:1f:30:88:7c:3b:e5:72:d3:
fa:b7:fd:54:0d:05:d4:d5:21:ad:30:ce:ae:44:19:
c1:10:fc:50:02:ab:5f:58:c1:7b:ed:6e:f5:05:e3:
65:28:11:6d:a1:43:c3:1c:77:13:69:50:ec:b4:94:
26:85:ee:10:d6:3b:87:c7:38:68:7f:6c:09:9d:58:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:EB:C1:73:6D:3D:AF:25:2D:0D:07:FC:44:E6:B8:3A:BB:B3:E4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/672A20FCC79611EC96AC5747C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.7.0-115.167.15.255
115.167.52.0/22
115.167.77.0/24
175.110.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:43:a6:de:04:89:56:6e:69:99:ae:01:8f:b5:78:b8:20:55:
d5:e0:25:29:18:d9:0b:ce:aa:e3:76:49:98:ef:0a:72:30:24:
9b:e4:96:85:92:58:81:69:8b:f2:5a:33:09:a3:51:02:36:63:
d3:75:9e:09:38:2d:1d:ef:28:cc:bc:8b:54:01:06:a6:b2:3b:
5e:ae:42:58:d5:ba:73:f4:e6:04:a5:0a:07:4e:90:4c:c4:63:
36:ab:7e:2a:d5:f6:1d:d1:61:a9:c6:0e:c4:d4:28:d5:e6:bc:
61:ca:87:b2:09:47:2b:2a:e8:bf:aa:0d:00:90:d7:80:1b:d7:
bb:cb:fc:65:07:df:65:e2:ae:28:77:83:b8:20:83:6f:4e:26:
fd:f3:b9:ca:c6:b7:0c:cf:3b:7a:4d:33:27:f1:b9:13:22:8c:
8b:24:21:88:bc:e4:50:ef:72:20:71:cf:e5:3a:cf:b4:cc:eb:
3a:96:db:5e:a8:10:ac:1e:ea:b7:18:dc:0b:46:e4:e4:ae:b1:
83:7d:78:a9:30:17:13:28:4a:11:3d:a9:a4:18:36:74:d9:87:
02:f1:fc:50:63:e4:b4:1d:7c:ae:c7:ce:ad:0c:e8:96:09:c2:
21:f2:4b:6b:c6:e6:6c:5b:82:5e:53:6c:e0:e5:9e:b7:17:a8:
72:7f:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org