Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CCDEBC3E926811EEB7530D7EC4F9AE02.roa
File: CCDEBC3E926811EEB7530D7EC4F9AE02.roa (raw, json)
Hash identifier: i+TOk+cTDkT8NIW38rnV6goBA3a4+/aazbag4JpzyKE=
Subject key identifier: 7D:A5:B7:90:56:DF:7B:E0:D5:40:FF:E5:06:B5:A6:2F:AD:77:35:BC
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 34E3
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CCDEBC3E926811EEB7530D7EC4F9AE02.roa
Signing time: Mon 04 Dec 2023 08:33:26 +0000
ROA not before: Mon 04 Dec 2023 08:33:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
111.88.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Dec 2023 16:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13539 (0x34e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Dec 4 08:33:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656d8ed6-372a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:e7:e9:0c:66:fb:22:f6:a8:1b:44:ab:05:
04:cf:d3:33:ac:a0:77:9a:d1:0b:a0:f1:7b:05:68:
aa:d8:07:1a:b5:47:4f:8c:7d:f2:64:39:07:55:4d:
c5:f2:24:66:84:e3:d5:ad:53:04:07:96:f4:82:80:
c0:3e:82:e5:3f:9d:9f:36:11:64:2f:2f:0b:e8:ea:
03:06:25:74:4a:22:9f:e1:b7:5b:94:8c:79:60:f8:
23:47:98:79:71:98:31:bd:7a:a6:d2:d1:2b:a9:25:
a1:3b:a4:d6:cc:d8:83:00:7e:dd:ca:e3:a4:55:ba:
dc:9e:76:8f:14:f8:6d:5e:76:1b:56:ca:fa:e6:20:
9c:c1:5e:51:26:25:d5:70:f9:d4:a5:20:2d:58:ae:
a4:77:d0:36:32:c5:fb:bf:49:39:41:f7:95:a5:bd:
f0:f3:f5:6d:da:e3:7c:a4:97:2f:3f:5e:54:67:45:
49:6f:d7:e2:28:28:2e:c6:22:c8:fe:ef:a9:70:44:
77:e2:3f:20:e8:42:3e:3b:84:b0:9e:3b:ce:bc:f7:
1c:d0:16:17:ae:0e:02:01:fb:bd:ba:16:d7:66:62:
71:10:c9:85:8d:fa:f2:5b:16:51:c9:0a:e0:77:15:
3c:f7:a4:6f:af:36:32:50:b9:ca:61:82:21:9d:04:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:B7:90:56:DF:7B:E0:D5:40:FF:E5:06:B5:A6:2F:AD:77:35:BC
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CCDEBC3E926811EEB7530D7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.138.0/23
111.88.164.0-111.88.171.255
Signature Algorithm: sha256WithRSAEncryption
6b:9b:2d:42:a0:86:a5:e3:a5:f7:bc:c2:3c:a2:44:db:c0:08:
68:a7:f8:77:bd:15:9e:b7:f6:0e:29:d9:23:3e:95:49:ae:86:
fe:aa:a2:9e:65:96:77:eb:79:22:1f:2b:a4:36:20:d1:c5:26:
13:df:23:8b:7a:0b:14:0c:c8:a3:e7:e5:55:b7:c8:a8:f6:ca:
fe:0f:c2:95:12:2d:96:5d:c0:6f:1f:bd:53:2b:26:09:86:42:
e7:92:b0:35:40:52:37:f1:ad:5c:60:87:5b:fb:72:f7:f8:c7:
50:2c:a5:2a:eb:4c:70:2d:11:3c:a2:25:fc:f3:bc:a9:07:90:
ec:08:1b:9d:ea:f9:dc:fb:89:9d:e4:9d:4b:59:13:ee:1c:fc:
69:0c:6d:28:e1:fa:73:7a:2f:b3:fa:1e:ab:aa:3d:4f:9a:50:
13:c3:e3:14:85:0a:76:54:6c:0c:9e:49:97:e5:4d:d0:0e:b6:
3c:6b:4e:86:97:94:46:42:3b:34:74:76:86:b5:df:3f:41:86:
3d:8c:87:eb:fa:3b:3c:62:c3:b4:a6:8c:43:cf:91:bd:78:da:
a7:e2:1e:b3:30:40:8a:21:bd:e3:cc:52:a0:0d:a1:1b:63:04:
15:bb:92:59:89:1a:2a:77:06:e8:17:f3:e2:2f:3a:4a:26:d9:
86:7d:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org