Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DBFAF1AA993211ECBAEF4461C4F9AE02.roa
File: DBFAF1AA993211ECBAEF4461C4F9AE02.roa (raw, json)
Hash identifier: eIX4dxCvat2p7x9jdLAspQ1sS61K6npksATeHKKmo74=
Subject key identifier: F5:96:89:79:5D:09:E3:20:71:B2:38:7C:9A:CA:CE:17:59:87:13:33
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 342B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DBFAF1AA993211ECBAEF4461C4F9AE02.roa
Signing time: Sat 06 May 2023 14:50:36 +0000
ROA not before: Sat 06 May 2023 14:50:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141023
IP address blocks: 115.186.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 08:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13355 (0x342b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 6 14:50:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6456693c-fa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:96:53:0d:75:76:51:a3:0e:bd:57:17:fa:
28:5f:fb:5e:01:14:61:93:db:79:a6:51:85:c0:e4:
b3:2c:f1:1e:bc:92:c6:17:b0:3c:72:e5:db:26:da:
ee:4a:d7:15:0f:35:a9:a2:69:32:92:10:10:9c:07:
81:8d:40:c7:aa:83:2c:8b:7c:62:fd:77:37:4f:c9:
0a:11:9c:9a:24:ed:f8:20:30:3a:2c:8a:b0:c6:0f:
9e:0e:6b:1d:71:0f:17:40:27:fa:ea:90:77:e0:ba:
c4:4b:9d:3c:c7:05:6d:ba:54:df:db:b5:c9:6f:2d:
fd:a5:e0:b3:f3:3b:1f:31:dd:b9:39:9f:0e:59:c1:
e5:22:59:f5:8f:47:9c:ef:53:5e:97:e2:87:18:7e:
d3:ae:9f:c1:8f:c2:f8:d3:3f:a5:0e:90:42:33:f8:
6f:48:6c:3d:23:1d:fa:37:21:79:77:94:f6:30:4a:
98:a8:70:dd:61:cc:fa:dc:45:6a:5a:4c:04:57:69:
ed:a1:da:d1:35:56:f2:e1:4e:9b:12:69:e3:62:b8:
01:05:1f:d9:c8:7f:ca:c3:ee:93:9d:c3:dd:7f:26:
58:06:be:94:5b:a2:2b:b4:9a:8c:1c:f5:d4:44:74:
d6:18:b9:24:71:95:72:04:8f:7b:59:d5:08:f3:d4:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:89:79:5D:09:E3:20:71:B2:38:7C:9A:CA:CE:17:59:87:13:33
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DBFAF1AA993211ECBAEF4461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.186.47.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9b:1f:3a:7a:61:17:f6:d5:11:56:cb:8f:71:eb:cc:ff:1b:
d8:e8:12:7e:5c:2e:a7:59:93:f4:8a:01:85:72:46:a9:b1:c8:
91:c1:27:08:e5:11:5d:16:e1:86:4d:95:55:1e:cf:4d:1c:36:
72:09:65:8c:20:5e:99:bb:cb:55:51:e5:83:5c:2e:fe:6b:f1:
f4:9a:7a:4f:fd:a6:cb:0c:7a:46:85:94:c4:6d:c1:a9:d2:85:
c1:fc:77:05:fd:a0:b9:08:6f:1d:57:b9:9b:a4:c2:1e:ad:c5:
fe:08:3e:34:15:47:4c:aa:58:69:cd:bd:e0:72:89:ff:f0:81:
04:b8:d2:99:f0:af:a5:56:32:51:50:30:97:3c:08:0c:43:67:
62:34:3c:c3:b7:be:aa:2d:89:2d:88:74:7e:b4:0f:a6:f9:a0:
3f:2b:b0:6f:90:7c:4c:17:d3:4d:a1:99:7a:a6:17:67:5d:06:
0e:a1:2b:37:ab:47:65:71:ce:8a:bc:b5:6e:1d:74:1d:6f:8f:
0f:df:4a:b1:0d:e5:33:bb:35:c6:81:f1:7b:bb:50:ee:35:21:
6b:bc:c2:be:89:86:0c:6f:54:b2:49:a4:1a:2e:7a:e4:f7:b2:
0c:8b:22:62:4c:58:7a:fb:b6:a1:12:61:5a:84:b8:2d:12:a9:
22:b4:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org