Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/880E256C866711EDA07D971FC4F9AE02.roa
File: 880E256C866711EDA07D971FC4F9AE02.roa (raw, json)
Hash identifier: MDeZ7sPyuQeyIZ6vpzqGE8PaZHcOhzRXDau0XkhpP6s=
Subject key identifier: C7:17:05:33:C4:FF:95:AE:54:37:A6:3D:69:D6:F8:80:06:01:7C:50
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 0113
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/880E256C866711EDA07D971FC4F9AE02.roa
Signing time: Fri 07 Jun 2024 06:45:27 +0000
ROA not before: Fri 07 Jun 2024 06:45:27 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 1221
IP address blocks: 203.34.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 02:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Jun 7 06:45:27 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6662ac87-e7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:4d:bc:ff:d2:7c:49:74:49:dd:b2:c4:6a:
9e:b6:9f:d5:dc:ec:5b:fa:0e:40:eb:05:79:1f:e9:
9c:1d:cf:43:b0:09:95:dc:17:30:9b:8d:63:7f:20:
0a:00:8b:53:17:b0:a8:63:0c:f7:c2:9b:a5:98:39:
93:be:93:c4:a5:49:be:b0:75:a8:2c:cf:c6:41:19:
7d:f0:37:c1:9c:42:92:5c:88:fb:ea:0e:e9:23:ff:
83:10:5d:f7:99:d0:e7:65:5f:2c:bd:54:84:97:51:
84:58:80:32:00:12:56:c3:7c:0a:ac:30:1c:58:19:
30:87:eb:3e:87:8f:97:6a:a5:ee:ca:bf:0b:2b:c8:
68:b3:7e:ca:3a:dc:25:50:c1:8b:03:c3:62:47:bb:
cf:f8:96:e3:77:a1:4e:35:77:6a:73:a1:a8:17:d4:
00:78:31:d3:63:fe:41:e4:e1:c3:99:0c:87:e6:05:
df:32:32:56:87:d5:68:2f:be:eb:89:ef:f7:7c:3a:
31:22:cd:af:83:0b:4f:06:7b:c2:57:16:c9:e9:6c:
fb:ae:8b:6f:20:1e:dc:28:0e:a2:69:c6:19:c5:d2:
1e:35:47:16:0d:32:a7:d7:63:c4:74:7a:e6:f0:34:
99:1d:9f:5a:ea:7b:b9:2b:b3:e6:5d:b5:8e:24:4a:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:05:33:C4:FF:95:AE:54:37:A6:3D:69:D6:F8:80:06:01:7C:50
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/880E256C866711EDA07D971FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.177.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f6:33:a9:43:1d:41:40:44:61:c5:0b:dd:2a:d4:d2:54:47:
fa:ba:37:cf:ec:3d:94:d3:27:62:63:48:46:ec:74:49:b0:a9:
92:58:22:f7:8c:cf:bc:6f:a4:8b:2f:d5:ae:73:59:96:50:a3:
f0:c6:7a:4c:d2:5a:46:f6:32:e8:ce:96:97:6f:45:eb:ba:39:
da:ec:f0:7c:df:fc:6d:d9:de:05:e5:e9:03:9c:26:8f:1c:55:
a7:0d:8f:79:bd:f1:28:ff:e0:a2:ae:2f:3d:67:dc:68:42:32:
25:b9:a1:5b:f7:17:10:85:1a:e2:c1:c6:bf:a0:8e:c6:db:11:
0f:ad:a5:0b:e1:52:02:14:41:59:7c:02:93:44:a8:36:2f:4e:
a5:90:37:8f:f6:9e:46:2e:44:b9:a0:37:9e:f2:f6:bf:6d:fa:
f4:46:96:03:b9:59:1a:c9:30:90:3f:4b:bf:25:75:9b:b8:fc:
06:0d:78:33:05:75:15:5e:09:d1:4a:88:5f:89:58:8b:d9:66:
c8:13:2d:d7:3b:c0:24:75:89:28:d6:35:4a:df:98:64:a2:32:
5b:79:c4:1e:c0:46:c1:27:ff:12:71:bc:7f:b0:4e:bb:36:4b:
f2:1f:f7:14:34:4f:22:b8:10:a8:d3:fa:02:3e:0e:dd:b9:11:
57:c6:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 04:47:59 2024 by rpki-client on console-fra.rpki-client.org