Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6596CA66D64911ED923C302AC4F9AE02.roa
File: 6596CA66D64911ED923C302AC4F9AE02.roa (raw, json)
Hash identifier: yHCk8FN0M2ECc9l1ocEgbUlXXAlbcEwiFU4gxs/0PY0=
Subject key identifier: 23:C8:8F:07:CC:97:16:D7:40:4C:3E:A3:5B:65:2D:3B:DD:04:48:85
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 34B1
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6596CA66D64911ED923C302AC4F9AE02.roa
Signing time: Thu 29 Feb 2024 08:01:11 +0000
ROA not before: Thu 29 Feb 2024 08:01:11 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 7018
IP address blocks: 175.29.128.0/21 maxlen: 24
203.76.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 11:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13489 (0x34b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Feb 29 08:01:11 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65e039c7-cf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:19:37:17:49:bb:84:b0:67:f3:ff:cd:77:
72:97:ed:6e:2a:bb:ea:b0:87:33:a6:1b:46:93:1d:
1d:50:a4:43:6f:ed:de:e6:69:88:65:fd:d8:c7:d0:
b9:ea:40:29:e4:cc:e9:d6:55:c8:e8:df:51:fd:9e:
bc:a3:b0:7f:80:3e:49:71:cd:b5:66:13:a6:4b:db:
90:ca:f7:c9:2b:ea:fa:2a:a6:7a:22:eb:0a:24:4a:
4c:73:65:15:87:94:6d:07:94:57:ed:ff:6a:db:ea:
11:61:11:bd:0d:fd:15:47:2e:4a:cd:ca:80:e0:bb:
85:e4:3a:d4:e1:5b:8b:8e:cd:18:e3:e7:5e:0f:b1:
46:af:e5:c6:cb:45:f9:bc:b7:18:91:cc:bd:ba:d8:
15:d5:b8:b2:f1:91:a3:3e:4b:a8:0c:46:af:81:06:
7f:1f:05:36:e1:fa:aa:34:bb:89:42:60:cf:8e:ff:
ea:1f:5d:3d:ad:ed:81:9c:c0:27:cc:5a:45:bc:b2:
9c:ac:52:ba:c0:0f:9b:5d:5c:76:2e:94:93:0c:25:
db:ee:4d:49:b6:30:03:4c:3a:d6:fe:48:8c:47:9f:
3b:62:97:2b:ef:5c:aa:bc:aa:5e:c3:5c:83:2c:c9:
95:58:a5:21:4f:70:10:44:22:49:ed:b2:67:28:00:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C8:8F:07:CC:97:16:D7:40:4C:3E:A3:5B:65:2D:3B:DD:04:48:85
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6596CA66D64911ED923C302AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.128.0/21
203.76.152.0/21
Signature Algorithm: sha256WithRSAEncryption
21:f0:25:df:fb:c4:2a:b5:58:ed:0a:93:5a:71:bc:ac:d5:61:
8d:51:f0:6b:11:8f:2c:38:60:28:a9:83:f6:1e:23:6d:be:24:
d7:87:c7:2b:9b:57:87:c5:ac:eb:51:b2:9e:be:1e:f9:09:03:
a7:0d:10:f4:e5:d2:3e:1a:32:17:77:76:b4:03:cb:cf:68:e2:
36:49:19:ae:5e:a0:3a:79:e5:a2:77:42:8e:9e:40:87:56:5c:
ab:ed:4e:cd:ee:d5:78:e3:1c:16:e3:be:eb:ef:2d:00:76:fe:
c4:31:9e:6d:24:b0:56:49:a9:ba:67:81:e7:7a:d9:cc:65:68:
04:32:ce:74:84:01:bd:2e:e5:77:d1:94:3a:82:62:65:a7:55:
73:42:56:f7:77:b2:d3:65:e3:75:f1:c3:49:e8:c3:6e:b7:51:
7d:04:d3:64:e1:d2:68:96:c3:e5:6a:9d:33:e8:78:5f:7e:4a:
9d:fb:19:31:04:7e:04:4e:2b:28:87:7b:df:94:66:55:6a:5b:
f4:aa:59:b7:b6:9d:24:26:c4:3b:15:20:a7:b9:f3:df:b8:a2:
65:7d:c3:56:a9:f4:f7:6e:23:b7:58:e3:2c:b4:2b:d1:5e:5d:
09:01:38:e8:a0:6a:33:47:4d:26:60:ec:ce:3e:83:45:79:23:
28:30:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 13:52:49 2024 by rpki-client on console-ams.rpki-client.org