Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/C853908851F811ED8A249A7DC4F9AE02.roa
File: C853908851F811ED8A249A7DC4F9AE02.roa (raw, json)
Hash identifier: KxyAjui8rlO4bur+0+R9DOEI/EzbxxrVxeDL5RZJDvs=
Subject key identifier: 2B:C2:F8:E1:9E:56:64:FC:F4:C7:CF:95:25:B8:51:C1:51:63:97:EB
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3341
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/C853908851F811ED8A249A7DC4F9AE02.roa
Signing time: Sat 22 Oct 2022 11:00:47 +0000
ROA not before: Sat 22 Oct 2022 11:00:47 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 138156
IP address blocks: 182.54.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13121 (0x3341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 22 11:00:47 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6353cd5f-ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:dc:a9:3b:b2:f9:5e:dc:07:71:48:fc:b3:
d7:fc:01:74:cd:e3:76:7c:87:0d:55:aa:ca:0f:29:
62:1c:69:b3:a1:8f:7c:c5:e1:63:02:32:f0:c4:f4:
34:de:11:76:0d:49:95:5a:3f:f2:6a:02:53:70:c8:
b3:dc:0e:a4:28:23:4f:f3:2f:23:e1:29:c6:31:8f:
83:f3:a8:ed:f7:34:32:74:78:2b:d5:05:2c:39:a1:
cf:15:23:07:ee:fe:16:4f:8e:24:e8:05:10:f5:d3:
5b:6f:56:75:1f:f8:45:29:e4:62:f8:5f:d4:f4:d1:
6e:85:6b:d5:5e:d4:49:7e:d5:03:0a:fb:fd:af:38:
e0:e8:b4:08:c0:98:4c:0c:18:3c:7c:d3:c7:6c:19:
5f:68:99:39:9c:2a:ac:e3:5c:d9:f9:65:0a:cf:24:
94:6e:40:05:11:3c:cc:74:5c:69:07:ec:b4:07:9a:
48:27:3c:a9:71:7e:ce:46:e3:8e:80:46:c6:a0:6c:
c1:4f:9f:39:83:19:08:67:7a:46:32:45:a5:c0:e0:
ee:c1:c7:07:1b:98:43:cd:82:e7:9e:81:7b:79:45:
8a:ad:d8:a3:4f:30:30:d5:85:05:75:ed:9b:9a:16:
0d:54:de:43:60:c4:0d:06:f9:e1:5f:81:6e:7c:a0:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C2:F8:E1:9E:56:64:FC:F4:C7:CF:95:25:B8:51:C1:51:63:97:EB
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/C853908851F811ED8A249A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.54.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5d:56:1f:3e:91:be:12:2c:b3:5e:49:4a:76:66:0a:a7:dd:
ba:b9:ec:23:83:1f:b2:aa:07:38:2f:1a:76:08:62:1e:2c:a9:
a2:f5:e2:98:54:e7:6e:72:bf:12:c7:f6:3d:79:e2:2a:3f:9f:
88:c5:74:f3:a4:36:89:af:d6:1a:20:e9:98:08:eb:7b:09:a7:
17:c4:19:29:e2:5a:1d:42:f6:d4:4c:6c:78:7a:f5:d0:95:89:
fd:57:08:53:83:13:9d:fa:25:00:e6:d4:f7:0c:8d:43:58:b8:
67:aa:6d:45:70:b9:28:a2:11:55:06:a8:9f:af:1b:dd:ca:1c:
08:a2:62:e6:ab:5a:b5:22:c5:df:40:7f:33:58:4d:73:69:4c:
34:16:9b:76:09:87:18:9e:73:ac:4b:94:5b:ac:3d:e9:0c:82:
48:2a:00:08:76:ed:b8:23:ff:95:15:10:2d:46:3b:12:55:b5:
09:e0:16:4b:49:5e:3e:ed:ea:a8:8b:79:4c:41:60:28:73:07:
74:47:1b:a0:ae:9c:80:c3:7a:44:94:2a:23:15:06:cd:41:32:
ba:05:e6:81:50:7e:dd:88:0b:61:9f:9a:99:10:9f:17:85:8f:
c0:13:32:9c:87:63:e4:7d:88:8d:bc:89:cb:3e:c9:df:e6:9f:
ca:15:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:46 2024 by rpki-client on console-fra.rpki-client.org