Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/0D1BE26A9A6811EF8611A74AC4F9AE02.roa
File: 0D1BE26A9A6811EF8611A74AC4F9AE02.roa (raw, json)
Hash identifier: s+xNOj5DyzD0bOfjvTFn0Nl1oVkbDfJeawNPSTll9B4=
Subject key identifier: 54:38:0A:C4:F7:E9:D4:28:89:BB:8F:2B:97:EB:D4:FB:66:73:5D:4C
Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Certificate serial: 04
Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/0D1BE26A9A6811EF8611A74AC4F9AE02.roa
Signing time: Mon 04 Nov 2024 04:48:36 +0000
ROA not before: Mon 04 Nov 2024 04:48:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 137924
IP address blocks: 203.32.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Validity
Not Before: Nov 4 04:48:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67285224-2ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:f4:f5:38:76:2f:67:aa:c8:a4:13:ac:af:
49:c9:17:d7:83:f3:64:27:f0:ce:16:57:40:5c:ba:
8d:90:49:82:fa:6f:6e:d3:99:27:52:6a:b0:47:63:
bf:d3:4f:27:13:63:91:9e:0e:b1:81:c5:35:ee:cd:
23:24:ac:5e:9f:cf:4c:f1:94:ee:a7:fc:fe:a6:38:
ec:23:db:0c:f0:b7:4a:5b:a1:c0:b7:0b:2c:1b:94:
39:f4:ba:2b:77:86:c0:3a:cc:5e:f8:bc:36:40:40:
63:3d:69:8b:da:7a:87:1a:1d:94:a4:30:b0:5b:7b:
de:3b:a3:58:f9:97:87:43:76:e6:c8:df:57:5b:d5:
f4:6a:09:ea:3d:74:39:83:51:2f:80:26:57:e8:74:
92:7c:5b:07:fd:d4:f4:f3:14:d2:9d:58:86:c3:9e:
ad:45:3c:28:95:63:31:dc:77:5b:bf:45:be:66:d4:
88:33:28:9a:e2:88:dc:7b:ac:18:10:0a:1d:da:bb:
02:28:8f:1f:70:41:79:53:7f:c0:d2:1e:66:1c:e3:
91:8b:5e:0d:32:e1:f2:14:ec:1a:63:27:2e:d1:86:
39:3f:a7:e1:45:2b:5d:01:9e:a1:9f:fa:c5:e9:ad:
c7:4f:c0:f0:ee:49:ad:f5:cf:db:16:ea:64:ea:34:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:38:0A:C4:F7:E9:D4:28:89:BB:8F:2B:97:EB:D4:FB:66:73:5D:4C
X509v3 Authority Key Identifier:
keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/0D1BE26A9A6811EF8611A74AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f4:fb:b2:89:f2:42:bd:e7:69:ec:ee:fc:75:f9:96:58:bb:
86:30:0e:06:8a:42:09:5f:4d:71:78:92:4a:03:8e:ff:cd:d5:
61:26:81:fd:03:e8:0d:d6:85:1c:fd:ec:d5:75:b1:2f:37:d5:
3c:2d:30:f8:ac:e4:67:77:8b:c0:24:d6:2e:da:09:aa:21:30:
6a:16:9f:3e:6e:80:7b:48:6e:80:3a:90:53:2e:d4:f2:10:e3:
c9:5e:08:2b:fc:3c:a7:92:a2:f1:19:11:89:1b:39:0c:85:81:
d4:75:44:fe:77:98:93:b0:10:5d:c1:a3:44:d2:dc:51:43:3e:
56:db:90:5c:e4:ef:db:7a:99:25:2b:71:08:56:dd:3a:b6:bb:
d4:08:d7:36:5b:2e:ee:56:83:16:d9:5a:21:f9:e3:44:78:a0:
17:12:0e:32:2b:ea:74:c0:cb:09:1c:a3:a4:ab:53:ac:e0:a6:
cd:fe:d6:65:4e:bf:11:6d:ac:8b:16:53:28:52:f2:06:60:45:
bf:f9:a0:78:19:1d:5e:36:2e:e8:55:01:1e:ae:e1:9a:5a:33:
dd:bf:62:9c:6b:0d:33:ef:a2:4f:fd:4b:de:3f:56:f0:18:c8:
c9:05:51:d9:58:64:bf:86:6f:8e:f8:4c:dc:8c:f3:6d:53:7e:
97:3b:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:00 2024 by rpki-client on console-ams.rpki-client.org