Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/053D4458077511E9BC454978C4F9AE02.roa
File: 053D4458077511E9BC454978C4F9AE02.roa (raw, json)
Hash identifier: 0QwCnXak61k5FYPg3Wx8Bqr3OJbYYICC/1L0Yuj2Pf0=
Subject key identifier: 4D:40:76:6B:84:B3:02:99:6D:79:2A:95:4A:F7:77:76:5B:2D:AD:93
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1D48
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/053D4458077511E9BC454978C4F9AE02.roa
Signing time: Tue 28 Nov 2023 16:43:20 +0000
ROA not before: Tue 28 Nov 2023 16:43:20 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 135817
IP address blocks: 202.179.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 05:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7496 (0x1d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Validity
Not Before: Nov 28 16:43:20 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656618a7-8107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:8f:bf:93:ee:29:31:fa:66:6c:c2:7a:7c:
b4:ac:d1:8f:d4:07:fd:97:8a:d8:8d:37:1a:cf:30:
d8:95:9d:89:40:fe:23:c4:6b:fd:54:85:f4:68:21:
d5:9f:a1:a8:d3:2b:13:72:68:23:c7:33:d4:c0:11:
10:c0:8a:ca:cd:25:3c:ea:96:ad:c2:cd:ed:ca:5e:
f4:b1:9b:f7:c5:a1:2e:d5:bf:bc:b0:2e:b0:e1:8c:
9b:81:e8:43:b2:05:f9:73:33:e1:54:c1:2c:7d:12:
17:96:28:bd:dd:35:e7:45:7f:b7:c7:cd:9c:d0:48:
2c:a7:9f:b3:e2:59:a4:3f:bf:8e:d5:7a:a0:82:a1:
b4:0c:c6:18:63:28:6b:19:d4:31:73:61:ff:2b:4f:
f8:2f:16:7b:ca:eb:61:d5:7f:6d:f0:e5:2e:2e:06:
f7:37:91:c2:86:50:7a:f1:42:e1:28:16:0b:8f:b6:
aa:ca:44:41:74:c7:7e:97:30:05:10:4c:c8:6f:a5:
0a:5b:f9:82:a7:95:9f:e7:6e:21:23:38:51:2d:9e:
c8:d9:19:5b:f2:ba:2e:18:b8:5f:93:ae:5f:36:2f:
cd:3e:78:a4:03:d8:8b:3f:f3:38:36:77:f4:c8:7c:
fa:c1:dd:fb:7d:b9:38:57:3d:df:73:e5:60:ed:cc:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:40:76:6B:84:B3:02:99:6D:79:2A:95:4A:F7:77:76:5B:2D:AD:93
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/053D4458077511E9BC454978C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.179.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:dd:9e:88:c1:9f:93:ea:6c:6c:ef:87:d1:2e:b2:a1:1e:
30:6f:6d:69:3a:0a:d0:9f:ce:fe:73:61:58:fc:b4:93:f6:c3:
09:85:e4:d5:85:24:8c:94:f2:78:ba:87:73:ec:29:bd:a1:56:
ea:78:43:87:0e:15:f3:c1:30:fd:fc:a7:80:9f:e0:9e:97:ef:
27:0e:10:d4:14:d0:51:4f:33:f4:dc:b4:4b:67:f8:2c:85:09:
44:54:48:28:cf:bc:37:92:59:8f:92:65:f7:80:ec:37:97:8d:
be:9a:b8:c6:e5:10:9d:61:61:d8:36:4f:84:d0:ae:1e:bf:49:
41:a6:62:ef:5c:1e:46:fd:b7:12:13:fa:38:1e:4e:cd:83:14:
8a:5d:6e:c0:c5:78:1f:46:12:c8:0d:f3:d4:fa:c4:e8:79:97:
fe:67:4c:eb:4e:59:d7:3b:8d:fc:46:80:87:cd:78:78:ba:fe:
8d:21:ab:a8:75:fd:2e:90:8c:24:5f:99:83:9a:a1:49:e9:c3:
e1:51:c7:7c:1d:aa:fe:11:e0:a9:c6:f4:5e:21:81:32:c9:9b:
69:9e:3d:cd:89:19:78:41:55:47:52:cb:22:11:fe:c8:d3:33:
68:0f:bc:6a:34:f7:99:f8:1d:04:0e:62:61:78:86:fd:4c:d9:
4c:b9:ee:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org