Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/D62B3B42E2DC11ECA301FE26C4F9AE02.roa
File: D62B3B42E2DC11ECA301FE26C4F9AE02.roa (raw, json)
Hash identifier: 9VK8GVJnf9IpfkjWxYuq1inK4RLikwBkNDlnw7G76xI=
Subject key identifier: 38:83:DD:F8:89:52:06:CD:79:6C:17:95:4F:6C:B8:6C:F2:36:B5:04
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 29
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/D62B3B42E2DC11ECA301FE26C4F9AE02.roa
Signing time: Fri 03 Jun 2022 01:31:06 +0000
ROA not before: Fri 03 Jun 2022 01:31:06 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 7575
IP address blocks: 192.84.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Validity
Not Before: Jun 3 01:31:06 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62996459-7964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:c8:4d:92:9d:8e:a1:01:fd:d2:70:6a:e0:
0e:a6:58:76:83:6c:b3:36:e5:c7:e9:83:24:90:ec:
48:d4:bc:ac:60:91:04:5d:c7:59:17:6c:c7:bf:d9:
25:f4:e0:a0:25:97:be:b4:50:e6:85:29:c5:64:73:
9d:7a:05:a1:a8:c6:56:04:5e:5a:70:84:b5:20:43:
ce:d6:1c:e1:ff:c0:a4:96:73:fe:89:4f:e4:01:af:
db:22:f8:34:14:f2:11:c2:63:72:5b:55:07:f8:9b:
bf:d1:f2:0d:35:11:f1:31:78:b3:02:55:4c:62:03:
98:77:94:80:20:e6:cb:a2:36:87:3b:92:c2:3d:a7:
7a:bc:a7:9b:0b:d5:bb:c9:04:52:23:a7:5d:6b:ca:
22:61:18:ac:fc:ff:3a:d0:58:5f:53:cd:fe:9d:20:
35:ae:27:f1:df:df:9d:52:e7:92:2c:ac:81:e5:ba:
75:3c:cd:51:9e:72:65:ad:ac:a9:89:51:d3:80:40:
d4:d8:a1:a7:82:11:18:88:90:2a:b1:65:31:a1:04:
14:b5:ff:df:3d:f6:12:2d:a1:51:55:ec:13:43:5e:
ac:a1:a7:cb:8a:f5:7d:41:25:03:e9:b7:2a:bc:72:
d1:4f:be:24:5e:a1:c3:12:50:9f:35:59:c0:d5:8d:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:DD:F8:89:52:06:CD:79:6C:17:95:4F:6C:B8:6C:F2:36:B5:04
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/D62B3B42E2DC11ECA301FE26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.84.238.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5b:63:ef:b4:bb:c6:7d:20:30:44:64:47:04:b5:24:81:fa:
e0:de:67:cb:f3:f1:88:55:b4:e6:88:a7:72:d9:6c:8e:97:58:
27:7c:ec:9f:72:81:ab:7c:39:76:3c:ed:80:2b:5b:4d:62:12:
bd:98:44:e0:68:a3:30:b0:3c:65:86:7d:8f:c5:85:54:ff:d5:
65:f1:b7:79:54:5e:40:70:e7:13:9e:2a:63:19:38:f6:ee:4d:
85:7b:b5:29:9f:b6:06:0a:0a:8d:2c:09:f3:d1:11:c3:e7:5a:
a7:f2:84:65:66:40:89:4b:54:11:1f:68:43:f0:75:b4:73:6b:
1a:83:75:ec:e6:4c:bd:da:8e:cb:6d:09:46:1e:b5:bb:5f:c7:
77:f4:d8:b8:fa:1a:c2:8e:11:c9:2f:66:73:e5:36:cb:2b:be:
73:7b:27:a8:1c:db:0e:8a:23:65:93:0d:6e:15:6c:36:f9:9c:
99:c8:5b:6f:4f:af:bc:72:88:6c:35:73:9f:40:c7:f8:a2:0f:
c2:da:f1:c8:64:74:69:9d:21:33:6c:8a:ad:5e:4c:55:a9:4e:
85:89:31:af:5a:c9:10:10:5f:1b:6c:bc:00:e6:22:2c:b0:8f:
90:d1:c8:f7:2f:49:a5:6c:a8:b7:d4:8a:a9:32:e7:0d:ef:c2:
c2:85:86:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org