Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/6BC6F8426D8F11EE9980E23FC4F9AE02.roa
File: 6BC6F8426D8F11EE9980E23FC4F9AE02.roa (raw, json)
Hash identifier: 3LHbih6jiCy+yFOZGlCJzqmcW+w6GM0QByW0VjjI4Qk=
Subject key identifier: 48:F7:5A:A0:6F:A0:6E:BA:2C:03:C3:2C:E5:02:A4:10:00:CE:54:39
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 7C
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/6BC6F8426D8F11EE9980E23FC4F9AE02.roa
Signing time: Thu 04 Apr 2024 06:59:01 +0000
ROA not before: Thu 04 Apr 2024 06:59:01 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 151779
IP address blocks: 202.27.114.0/24 maxlen: 24
2001:df2:da40::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Jun 2024 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: Apr 4 06:59:01 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=660e4fb5-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:dc:d8:c3:11:6d:5f:11:2a:95:5f:36:a9:
cf:78:ec:42:93:f6:96:ca:c7:6d:ea:83:0d:b0:7f:
b7:f9:82:db:65:96:30:28:f1:99:4e:4a:71:28:a9:
d2:0d:27:c5:3c:ab:62:42:ff:49:7e:8e:52:da:55:
c5:ca:3e:cb:f3:32:23:00:f2:4e:85:e5:44:d8:f0:
70:50:ff:6f:78:60:c0:d6:94:11:dd:76:e0:28:0d:
23:d7:5e:97:0b:cb:db:e2:0c:f7:46:64:45:27:e6:
53:a1:92:b7:5d:f4:34:bd:75:30:3b:2d:9f:4d:e0:
68:2f:ce:57:04:25:23:9d:1a:4f:15:cb:d4:ca:5e:
09:02:63:e2:92:d6:be:d3:37:6d:e0:1c:36:a9:90:
04:6c:94:25:ba:13:a7:27:07:a4:aa:12:d2:76:5a:
68:ab:6f:bb:92:d9:e4:90:fa:dd:9f:71:b3:f5:32:
cb:d9:3d:20:5e:1f:23:af:12:56:45:73:92:be:c4:
24:82:cb:4d:a5:27:47:21:02:a1:f2:d1:1d:aa:f9:
d1:04:25:9a:b7:01:be:81:3f:c5:f8:37:16:d3:97:
e6:08:9e:8f:d1:13:f6:6a:fa:f9:cc:1e:7d:a7:68:
94:f1:01:cf:a2:41:26:15:80:28:c9:38:18:aa:2e:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:5A:A0:6F:A0:6E:BA:2C:03:C3:2C:E5:02:A4:10:00:CE:54:39
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/6BC6F8426D8F11EE9980E23FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.27.114.0/24
IPv6:
2001:df2:da40::/48
Signature Algorithm: sha256WithRSAEncryption
85:fa:e3:e5:f5:71:d7:8f:38:89:f7:0c:8e:c4:cc:1d:31:88:
57:ab:20:5d:e7:35:fb:65:03:23:78:dd:9a:d1:b0:06:28:27:
d3:3a:ad:9a:3e:b5:75:b5:fe:83:cb:fc:ed:d0:3e:ac:13:8e:
6a:12:96:7c:50:cb:31:cc:56:68:27:87:b0:be:db:73:12:3a:
73:2c:b6:1b:0b:14:f9:d2:38:18:5e:a0:61:c5:98:cb:3b:61:
17:af:ec:01:d6:5c:c5:3a:ed:55:fe:0d:73:a3:f0:e0:8f:85:
21:e5:14:b4:82:cb:7e:16:d4:60:d9:a9:a0:ae:52:f4:60:34:
1e:6b:ec:04:fb:93:c0:79:b0:7d:62:57:84:84:04:b1:9e:cc:
7e:9d:04:e5:7d:da:79:71:99:84:f7:88:d8:68:92:8f:32:f4:
7d:d2:fb:b1:bd:7b:b0:be:9b:4f:e7:82:35:1c:ce:ee:30:ca:
85:45:a2:98:b0:e6:4a:e0:f6:68:b5:35:1d:a3:d4:46:a1:d8:
bc:14:2d:71:7d:a5:02:99:b6:12:c6:30:18:b1:1b:7f:f4:4e:
85:86:b5:21:5c:a3:ef:d7:be:86:49:63:ff:38:b2:2b:a8:a0:
c7:a3:e5:9b:c0:ea:39:d1:d0:6b:4b:da:fb:d4:6a:0b:aa:69:
a6:38:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org