Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/C94B3CA682CC11EEB2B63A47C4F9AE02.roa
File: C94B3CA682CC11EEB2B63A47C4F9AE02.roa (raw, json)
Hash identifier: cTI7Y9fN7u5xpCqWf600N446I7tlfAnNB7tISLi8mDU=
Subject key identifier: 29:81:91:0B:21:1C:ED:89:53:03:06:7E:9C:EC:4B:D6:F5:44:34:AD
Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial: 02
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/C94B3CA682CC11EEB2B63A47C4F9AE02.roa
Signing time: Tue 14 Nov 2023 09:04:16 +0000
ROA not before: Tue 14 Nov 2023 09:04:16 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 132275
IP address blocks: 203.175.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 19 Nov 2023 05:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Validity
Not Before: Nov 14 09:04:16 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6553380f-33bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:97:d3:ea:0b:6d:92:37:05:f8:57:51:b6:
8d:32:69:ff:46:65:06:6f:3d:ff:10:75:6f:90:22:
73:24:c1:63:91:ac:c0:0d:ac:f5:5d:9d:95:cd:fd:
a9:1f:b5:c4:fd:15:ac:0f:85:6a:ff:8c:2e:14:2a:
5b:e4:00:91:cd:92:19:33:e5:c0:0c:ec:2a:a5:1b:
c1:b7:a5:ae:a3:77:5c:78:ba:79:bc:50:07:44:c7:
f3:5d:5c:f5:9e:e2:df:6c:ab:1a:a2:b9:67:8b:a1:
7f:38:49:92:96:51:34:ea:0b:50:91:8f:e3:55:ac:
e0:67:93:9c:42:52:06:3c:bd:66:55:fc:d2:4b:df:
da:c1:f1:49:25:e9:f6:84:eb:01:c8:6d:39:82:81:
9f:1b:a8:1a:ae:9a:42:85:82:ba:3a:d9:17:49:2b:
15:fb:8e:a0:42:48:9c:c6:e3:09:c6:d9:1d:d2:ba:
8e:97:73:a9:7a:fa:20:86:c7:56:0a:dc:d4:95:06:
11:f4:5f:0c:da:a9:09:e6:51:00:14:bf:36:eb:ab:
80:32:44:39:16:22:a2:ed:9f:6a:3d:43:03:1a:65:
1e:d6:44:15:c0:29:a0:ab:8b:bb:bb:db:a2:c5:01:
e3:8b:c8:7c:a7:88:2a:f2:41:b2:46:98:b8:ab:ed:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:91:0B:21:1C:ED:89:53:03:06:7E:9C:EC:4B:D6:F5:44:34:AD
X509v3 Authority Key Identifier:
keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/C94B3CA682CC11EEB2B63A47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.108.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:4b:4f:13:a6:07:8b:22:d1:7c:59:a3:47:3a:e3:9e:3f:d6:
70:50:41:45:6c:db:32:e6:25:76:ad:a7:89:0d:96:11:58:a1:
f4:f0:a3:4d:9f:93:3d:6c:e3:b2:ba:44:b1:47:33:4a:a6:91:
3f:39:24:10:74:f7:b7:9a:99:05:44:4f:67:17:bb:07:ea:69:
1d:67:d7:eb:90:6c:a4:5e:f0:75:ea:be:73:79:0d:0f:d4:cb:
8b:c4:fc:8f:39:2d:3a:51:b4:e2:06:74:48:ef:62:f2:f8:d4:
87:9f:18:24:db:74:3b:99:b6:25:47:88:bf:02:0f:7f:ef:f1:
5f:25:da:05:26:78:db:3f:d6:31:84:a1:c0:df:6b:41:36:cb:
e7:68:29:8a:cd:a5:75:e6:25:7b:1c:2e:86:d5:b4:ae:19:29:
df:65:36:0f:4c:5e:2d:a4:c7:f9:e9:1d:71:bb:b4:59:64:21:
c7:83:c2:cf:95:d4:71:ae:2e:02:a2:bf:23:d2:1e:27:67:7a:
5f:19:bf:fd:28:d8:3f:47:df:89:41:a2:6e:71:47:1d:64:b5:
3c:1d:1c:fd:52:28:43:73:01:6c:45:98:1d:2b:55:cd:37:48:
c1:d1:ca:84:6f:c7:b5:b9:99:a0:ea:5a:ff:fc:23:79:8b:57:
17:9e:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org