Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/590104FCAC9911EEAC8BE93DC4F9AE02.roa
File: 590104FCAC9911EEAC8BE93DC4F9AE02.roa (raw, json)
Hash identifier: pkRMr7Mav3jwdbYbWCWs+L+aveZSD4Gc1Icv/Ceqeig=
Subject key identifier: 42:56:21:7A:E2:DD:68:8A:30:87:72:41:A8:85:E7:0F:13:7A:59:77
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1DAB
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/590104FCAC9911EEAC8BE93DC4F9AE02.roa
Signing time: Thu 14 Mar 2024 05:22:11 +0000
ROA not before: Thu 14 Mar 2024 05:22:11 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 138296
IP address blocks: 202.179.69.0/24 maxlen: 24
202.179.70.0/24 maxlen: 24
202.179.71.0/24 maxlen: 24
202.179.72.0/24 maxlen: 24
202.179.73.0/24 maxlen: 24
202.179.74.0/24 maxlen: 24
202.179.75.0/24 maxlen: 24
202.179.76.0/24 maxlen: 24
202.179.81.0/24 maxlen: 24
202.179.82.0/24 maxlen: 24
202.179.83.0/24 maxlen: 24
202.179.84.0/24 maxlen: 24
202.179.86.0/24 maxlen: 24
202.179.87.0/24 maxlen: 24
202.179.88.0/24 maxlen: 24
202.179.90.0/24 maxlen: 24
202.179.91.0/24 maxlen: 24
202.179.92.0/24 maxlen: 24
202.179.93.0/24 maxlen: 24
202.179.94.0/24 maxlen: 24
202.179.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 11:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7595 (0x1dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Validity
Not Before: Mar 14 05:22:11 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65f28982-2b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:e4:f1:1a:47:14:de:09:f6:0f:55:31:a3:
5f:f4:8c:4f:93:fc:2a:d1:28:7f:9e:67:33:85:42:
1e:06:f0:3f:5a:44:d7:52:ec:c7:91:2f:a5:72:db:
ec:d3:d7:67:df:ad:8a:c1:82:79:91:04:4d:31:a0:
fc:e2:89:a8:6c:5e:8a:59:82:bf:6a:d8:f0:f6:ef:
97:bd:57:98:70:61:fb:72:28:e9:5a:ec:74:08:db:
e4:5a:6f:d7:b6:8c:93:b7:bd:63:ae:14:f7:b2:10:
63:46:ea:fc:e9:2c:2c:05:58:93:2e:fa:d4:2b:59:
ca:cd:d4:1c:53:89:91:af:65:89:5e:76:bb:c1:01:
46:9a:05:aa:ef:0c:60:63:68:4e:d7:ec:b5:d4:ff:
c4:05:e4:d0:46:a4:82:87:8d:07:78:62:96:f0:4e:
fa:4d:81:f6:08:4a:b6:0e:78:bd:e8:32:c8:55:7f:
da:e2:9e:5e:7a:a0:af:f3:0d:9c:6d:41:b3:73:f8:
ef:75:89:ba:58:96:45:87:0a:1a:dd:ae:21:d8:b6:
f6:f6:79:ab:85:4e:2c:6a:f2:40:e3:0b:10:4e:01:
01:65:a5:50:23:e9:0e:ae:15:ca:3c:cc:ca:30:17:
60:70:56:83:70:57:7e:af:3e:de:3b:18:94:4e:26:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:21:7A:E2:DD:68:8A:30:87:72:41:A8:85:E7:0F:13:7A:59:77
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/590104FCAC9911EEAC8BE93DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.179.69.0-202.179.76.255
202.179.81.0-202.179.84.255
202.179.86.0-202.179.88.255
202.179.90.0-202.179.95.255
Signature Algorithm: sha256WithRSAEncryption
96:0a:9c:57:a2:d5:c5:b6:7c:ef:ea:99:1f:6e:e8:21:41:aa:
87:87:e8:db:d8:8c:f3:2d:12:29:a7:b3:36:c9:58:d9:e9:07:
68:bd:5e:6d:de:80:15:cd:4c:9b:65:34:b7:79:e7:d3:70:13:
06:95:98:e3:e8:b0:f7:4b:b6:6f:b7:0a:f0:84:00:8d:6e:6d:
90:14:95:9f:43:b7:23:a3:a0:15:66:b8:c2:59:0d:66:bc:fb:
ae:7b:b2:6d:3c:4c:67:13:da:22:4f:47:82:bc:92:9d:b1:22:
aa:25:6b:25:3d:c2:fa:7a:1e:f1:0d:d1:49:93:d3:54:3f:df:
f3:db:78:ef:d5:cd:3a:da:74:5d:7e:55:8a:8a:71:54:64:7c:
e8:b1:d3:1a:61:04:80:c9:a8:ff:87:d3:8d:b3:eb:47:3a:a9:
c3:a6:4d:4a:0d:e6:f5:dd:ea:59:fc:8e:25:61:cd:fe:56:ce:
fb:e2:c2:d2:ab:2a:79:f6:3d:ac:67:c7:3d:c8:5a:96:07:f6:
f9:d4:00:f2:a2:f6:b6:b9:36:ae:8c:0e:06:df:33:32:59:04:
2b:b2:fc:89:a3:41:3b:06:d2:ca:1b:6e:8d:f6:6b:2d:e3:af:
8a:61:de:f9:6d:dd:e6:c2:e5:d6:c9:84:2b:a6:fc:ac:21:05:
b8:3e:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 14:48:42 2024 by rpki-client on console-ams.rpki-client.org