Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/6480C664DE2911EB9B09A334C4F9AE02.roa
File: 6480C664DE2911EB9B09A334C4F9AE02.roa (raw, json)
Hash identifier: pkZYc0o+xFl8DM7TWOh1qoZOhkRvg5BH9RUql6YfQlo=
Subject key identifier: FC:7F:F6:7A:EC:C4:E7:6B:9F:CB:01:38:97:5B:13:DD:BD:0D:65:78
Certificate issuer: /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial: 02DD
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/6480C664DE2911EB9B09A334C4F9AE02.roa
Signing time: Wed 13 Apr 2022 02:12:19 +0000
ROA not before: Wed 13 Apr 2022 02:12:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399073
IP address blocks: 2403:4f40::/32 maxlen: 40
2403:4f40:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Validity
Not Before: Apr 13 02:12:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62563183-1619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:79:07:64:d1:6d:ba:1c:e6:a4:01:71:27:
0f:1d:83:67:8a:82:c1:87:1f:73:23:c2:89:47:88:
fb:61:78:9b:fb:28:8d:7c:36:19:06:41:56:ab:3d:
bc:41:dc:06:fd:39:6c:eb:0b:23:b6:af:74:d3:b1:
59:fb:ab:dc:95:35:70:df:dc:36:e8:1b:dc:a9:63:
45:72:06:10:fb:bb:02:c4:fb:c8:82:60:6c:68:63:
cf:02:22:b3:07:e0:12:29:3e:e1:27:5e:ca:0f:41:
66:bd:a3:0b:3f:ec:bd:0a:a7:c8:56:1a:49:9c:96:
81:e2:96:d2:69:0d:b2:07:57:b2:8a:a8:29:cd:78:
26:da:de:11:e5:ac:01:70:7b:71:b6:aa:a2:c9:04:
4b:4c:96:76:7d:19:d1:c5:0f:95:fe:da:da:eb:da:
18:66:f6:ac:c1:69:13:fb:ae:21:52:b7:31:32:1d:
7a:d9:c0:95:55:bb:c7:26:f5:c2:0b:cf:23:d1:cb:
1f:cc:bb:64:ab:1e:71:e7:e3:6e:50:2f:7f:1b:4b:
7c:65:07:d5:9d:04:ae:6d:9c:d3:ce:61:53:37:f4:
f5:e0:ae:b0:3d:0c:e0:31:42:82:8a:d8:e2:5d:05:
d5:e8:7a:bf:3e:4f:f5:9a:ff:fb:af:a8:e9:ca:97:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:F6:7A:EC:C4:E7:6B:9F:CB:01:38:97:5B:13:DD:BD:0D:65:78
X509v3 Authority Key Identifier:
keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/6480C664DE2911EB9B09A334C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
35:42:95:b0:a2:ae:11:66:3f:0a:f4:0e:fa:80:5a:a9:62:7c:
5d:43:07:54:f1:49:9b:bf:09:95:38:81:07:00:8e:24:db:93:
74:e8:2b:24:5b:83:8b:39:47:76:35:e9:0b:cc:2b:0d:20:20:
4d:9f:52:4a:8f:33:e3:0f:38:1d:05:6b:d5:d8:05:2d:ff:cc:
4f:72:36:29:b8:0d:85:ae:ba:d7:6f:7d:35:50:7f:c1:1c:33:
c2:a9:38:fc:06:52:35:ef:2b:d1:39:e2:38:57:30:ca:03:46:
ca:3e:b2:02:c4:70:59:82:d8:ba:97:cb:45:6a:12:bf:1f:71:
3a:ae:a0:0b:a5:6c:b5:5d:eb:b7:5e:9f:21:0e:dd:61:fa:7b:
c3:26:4a:5d:e3:3b:85:29:42:a3:e7:3a:54:99:11:e6:a9:1b:
3b:b5:ed:82:be:97:00:e5:95:cd:e5:ef:a6:fa:49:db:69:7e:
da:b2:f9:54:a5:96:b0:9a:79:68:1c:84:8b:7c:7c:6d:2f:e4:
e6:4e:21:72:2f:b7:e1:43:7d:8f:02:a8:ec:ee:f6:aa:b8:14:
3a:02:00:08:fa:a2:99:30:f7:5c:96:72:51:c8:5e:c0:53:0e:
c9:3c:76:95:1a:86:1c:0a:31:bc:fb:53:b8:49:b3:43:f0:9a:
2c:b0:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org