Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/24E642B20FC111EC8A57EC35C4F9AE02.roa
File: 24E642B20FC111EC8A57EC35C4F9AE02.roa (raw, json)
Hash identifier: tnGiabo+Hql6VZRShpbOR9Ez6KXbtE+dvqMOVftyshg=
Subject key identifier: E6:09:8C:E1:64:83:DA:CC:A2:1A:C8:47:41:04:40:30:EB:6F:E1:E0
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 018D
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/24E642B20FC111EC8A57EC35C4F9AE02.roa
Signing time: Tue 07 Sep 2021 09:51:17 +0000
ROA not before: Tue 07 Sep 2021 09:51:17 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 29538
IP address blocks: 129.227.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Sep 7 09:51:17 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=61373614-2f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:39:9b:d0:11:b0:77:6c:5a:42:88:3e:7f:
77:9c:5e:d4:bc:8b:39:04:cc:87:4f:ef:ad:90:07:
b3:ec:1e:14:57:e9:17:b2:36:da:3b:ce:f4:f8:a0:
32:c7:fd:cb:af:fa:fc:78:44:90:cd:0d:4f:5b:31:
af:a3:44:21:06:a3:5c:d6:ad:a3:d9:03:d0:4e:37:
da:76:8d:da:21:58:04:68:95:a8:ac:0d:54:27:f3:
24:9b:b1:5e:d5:94:0a:df:64:2e:d4:34:44:51:0b:
f3:27:a8:3e:96:b7:63:4d:f4:8f:d2:a1:bd:18:74:
7d:dc:6c:22:35:3b:95:2c:d2:ba:13:fc:0a:bd:25:
de:82:31:0e:b1:15:65:8f:46:00:00:eb:93:40:1e:
c5:d2:73:ae:df:b6:80:23:2d:6b:b3:bd:9b:2c:32:
d4:b0:56:73:88:0a:67:05:a0:ce:88:26:79:a5:53:
93:87:21:e4:26:30:d4:e7:a8:83:19:6c:c4:85:fb:
f2:e3:7b:ba:c5:87:e8:af:ec:35:c0:6d:2b:03:a3:
ce:3f:ca:a0:86:14:b9:ef:77:a0:c2:cb:1f:27:e7:
d3:1c:c4:f8:49:59:7c:38:8a:f9:3d:9f:89:29:85:
cf:cd:d7:36:2b:8f:5d:f2:28:27:08:79:4a:0b:8a:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:8C:E1:64:83:DA:CC:A2:1A:C8:47:41:04:40:30:EB:6F:E1:E0
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/24E642B20FC111EC8A57EC35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.227.63.0/24
Signature Algorithm: sha256WithRSAEncryption
58:05:49:a8:9b:09:97:73:b1:af:80:6b:22:d3:01:48:a4:a0:
08:23:bc:46:2e:c2:f5:e5:78:1e:d2:ef:eb:61:1e:46:0b:a7:
9f:b6:20:44:ed:b1:47:08:3e:fa:6b:b7:2a:a7:8c:a3:99:d1:
40:ff:08:60:7b:bc:ad:a7:da:b1:af:dd:2f:c7:1c:cd:95:74:
ce:3d:d0:fa:71:1f:3a:ed:b5:dc:bd:f7:b0:e6:6c:38:e7:56:
e9:77:a1:71:ca:d1:71:02:20:f2:89:82:70:8e:a8:24:c2:8d:
1b:fd:18:7c:70:57:05:d5:29:6f:42:3d:fa:cd:d4:9a:80:6e:
3b:fd:29:42:57:61:82:c8:7f:44:05:00:7f:46:85:70:b1:29:
6a:bc:f4:12:c4:4f:83:f6:95:1b:70:1a:af:20:d5:7f:5f:cf:
49:35:0e:ce:28:96:22:12:72:cc:d1:ad:6f:02:be:38:62:69:
66:d4:12:98:6a:ae:22:d2:0c:d0:9f:6c:a0:3c:31:8f:d6:d6:
f4:34:64:64:34:77:7a:c1:69:27:c3:5c:f1:c9:b6:1d:9e:af:
9e:b4:0d:cc:35:85:da:07:59:cb:b6:7c:93:b6:e8:12:8f:17:
cf:14:5e:ca:58:5d:70:ed:7e:a5:67:52:29:4e:41:37:e9:52:
a2:bb:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:37 2024 by rpki-client on console-ams.rpki-client.org