Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B60243B8843011EAB4270B83C4F9AE02.roa
File: B60243B8843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier: s35/XSTBCmRLcKUErxnNMtTwMiGiemCHtyMoVc33X1s=
Subject key identifier: 49:F8:02:7C:D8:00:E2:FB:42:3E:E5:B7:46:F1:60:8B:B4:4A:63:4B
Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial: 1733
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B60243B8843011EAB4270B83C4F9AE02.roa
Signing time: Wed 02 Aug 2023 17:14:16 +0000
ROA not before: Wed 02 Aug 2023 17:14:16 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 36351
IP address blocks: 203.98.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 03:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5939 (0x1733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Validity
Not Before: Aug 2 17:14:16 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64ca8ee7-c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:56:ac:4f:15:17:07:96:2f:41:7e:0b:bc:
d1:7f:1c:da:7d:c0:5b:8d:77:09:3b:33:99:f7:f1:
ea:c0:a5:17:43:c3:9b:0a:22:80:93:32:82:4c:76:
a0:66:af:04:a9:39:be:e1:a7:39:ac:b0:f1:96:de:
9c:0e:80:cf:11:e9:19:55:fe:1a:ae:8c:99:09:2b:
62:cd:62:b6:ea:82:12:e6:dd:b8:42:d4:43:af:af:
b8:fa:2a:a4:f3:53:81:f6:bb:cb:b2:f4:fa:5b:76:
d9:aa:b5:d2:8a:5e:91:9d:8b:fa:39:d2:a0:e6:69:
18:99:ea:13:66:e7:a6:65:a1:28:32:54:a4:fb:82:
2e:3b:a8:7d:fd:99:0f:3a:03:d9:a0:7e:ae:c3:70:
af:de:b1:18:af:ab:2f:31:41:7c:a3:fc:54:65:b5:
f1:d6:e8:ab:45:10:37:48:5d:8b:ab:8d:8c:d3:ec:
5c:d6:1b:33:0b:de:14:5c:3a:9a:50:1c:d5:f2:51:
03:ae:5a:15:d1:2f:80:b4:0b:1d:c4:2e:e0:7f:b4:
e0:af:33:fc:d4:6e:f7:9d:9f:5a:95:29:e4:cd:b0:
30:de:e7:3b:57:8c:e6:a3:23:70:f7:d1:2a:26:f4:
12:e9:45:9a:a5:fe:f0:30:a6:13:05:1f:eb:79:fd:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:02:7C:D8:00:E2:FB:42:3E:E5:B7:46:F1:60:8B:B4:4A:63:4B
X509v3 Authority Key Identifier:
keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B60243B8843011EAB4270B83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.98.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:80:38:c8:d2:61:cb:b2:56:b2:70:81:f6:4b:82:a3:e6:95:
fd:92:bb:0b:93:48:e8:28:39:21:ab:51:97:8c:b8:7f:88:c0:
20:0f:e0:39:db:3d:71:ef:cf:d9:de:17:b4:7d:45:c9:10:64:
8d:7e:1c:75:0d:b1:69:28:6e:d4:e3:f2:38:51:da:9b:e9:81:
2f:81:3d:5a:d7:a2:c5:0d:1b:8a:f8:eb:b2:81:eb:3a:4d:e4:
29:10:d9:37:4e:dd:59:2a:fb:14:77:dc:6e:14:ff:cd:20:88:
b2:bf:9d:b4:72:11:68:84:0f:8d:75:d7:fd:79:62:b6:b2:c6:
3a:a8:fa:2d:1f:1e:c4:3a:0b:dc:b5:69:21:64:78:f2:ef:3a:
39:6a:02:e1:48:d8:68:f9:51:4d:b9:e6:9a:40:cd:14:d3:26:
62:97:a5:9d:a4:a7:cd:94:1a:06:53:3f:f1:c5:b4:ec:ea:3c:
71:b2:52:90:85:ca:cd:97:a8:16:7c:de:f6:56:0b:17:06:4d:
8a:c9:8f:b8:6b:a3:1a:99:c3:a2:c1:65:b7:8c:53:ca:cd:e2:
8c:3a:06:ab:7b:d6:c3:d9:09:98:4b:e8:47:db:9a:8c:20:64:
e8:50:83:fd:86:9c:69:12:7b:00:1b:f8:eb:52:11:07:51:92:
5b:c4:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 05:23:53 2024 by rpki-client on console-ams.rpki-client.org