Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/8F6D316EC18411EE9D8AE97EC4F9AE02.roa
File: 8F6D316EC18411EE9D8AE97EC4F9AE02.roa (raw, json)
Hash identifier: fUYERCnGCraHVzPJDvoVzjCDxBvMZBcW4OH5DFbWj9s=
Subject key identifier: 58:23:13:B5:FB:BB:6D:0F:F4:39:BE:49:66:24:A4:BF:EF:45:96:24
Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial: 2F
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/8F6D316EC18411EE9D8AE97EC4F9AE02.roa
Signing time: Fri 02 Feb 2024 04:35:58 +0000
ROA not before: Fri 02 Feb 2024 04:35:58 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141045
IP address blocks: 203.145.36.0/23 maxlen: 24
2401:5020::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Mar 2024 10:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Validity
Not Before: Feb 2 04:35:58 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65bc712e-f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:00:07:ff:d8:c0:6b:18:04:89:be:2b:ec:
86:37:9a:ae:81:07:d1:0e:2e:89:f2:97:53:f1:d9:
e2:90:b0:6a:f9:44:90:07:f4:eb:16:81:96:ae:17:
e3:2f:2d:0e:78:36:c4:55:a7:25:13:01:0e:ee:85:
53:1d:f9:6a:cf:14:97:71:3a:f5:65:19:e6:30:7e:
95:ec:b2:06:94:78:1a:e0:f4:23:05:81:4c:49:fa:
d1:f6:75:c0:e0:94:32:f2:1b:29:fb:97:a8:2c:48:
9e:ab:b2:e4:01:9f:a8:b3:24:d1:c4:78:cd:dc:19:
da:c3:44:33:f7:c7:6d:3e:17:8d:d5:8e:0f:85:8c:
5c:65:81:c6:f4:fb:da:6c:16:5d:41:dc:a0:12:fa:
0d:4c:96:20:fe:af:65:be:56:70:57:dc:08:3d:87:
ae:67:fe:d0:85:b1:6e:23:71:e6:07:f1:d2:66:46:
90:5c:bd:48:3f:c8:97:c1:76:aa:49:70:1e:77:a7:
76:7a:d9:3b:b3:2c:2d:06:50:09:c2:d2:db:24:6b:
2a:70:50:17:59:a7:fb:ac:23:34:47:d0:e0:b1:cf:
9e:2f:bd:9e:79:e8:a9:73:f6:88:27:2b:72:ad:cd:
98:60:7a:8d:32:c9:47:5f:54:57:49:37:6e:ea:eb:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:13:B5:FB:BB:6D:0F:F4:39:BE:49:66:24:A4:BF:EF:45:96:24
X509v3 Authority Key Identifier:
keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/8F6D316EC18411EE9D8AE97EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.36.0/23
IPv6:
2401:5020::/32
Signature Algorithm: sha256WithRSAEncryption
39:64:38:ed:ec:2b:b2:1a:b5:ee:34:c7:06:06:5d:c9:76:77:
a7:10:23:3d:f3:00:91:32:fa:de:0f:0d:20:b0:d6:c6:b4:97:
12:9d:d7:a0:4d:6f:ac:da:35:94:2f:56:f0:eb:82:48:f5:a8:
14:fb:60:4f:22:15:70:d1:8d:2c:2c:be:01:be:ef:80:8b:11:
a2:4d:96:59:77:4a:e9:d9:15:29:27:49:a5:40:4a:98:ed:b4:
62:bb:ed:93:33:2d:65:63:f5:a4:c3:55:70:83:63:93:f1:25:
69:23:fb:77:cd:bd:d2:7a:56:b1:88:37:ef:7d:cf:f1:c5:10:
b2:27:38:38:b3:74:53:62:01:44:de:c9:12:d9:31:6b:47:0f:
9c:09:8b:2a:78:e4:11:eb:e7:c8:69:28:d4:68:0d:75:21:2e:
fd:c0:aa:9e:e0:4f:af:e0:d2:64:f2:1d:d2:c6:82:ae:f4:f2:
e3:9a:53:79:aa:1b:7b:a2:ba:cb:b5:e9:aa:5a:f7:0b:cf:3c:
25:cf:c6:62:ab:84:91:99:a9:15:03:57:9d:fe:06:87:70:65:
ff:34:2e:e1:39:a6:fb:4a:6d:e5:a4:c3:4f:0d:f1:1b:70:20:
86:c3:61:34:f4:95:c7:cd:07:0f:3c:59:43:e2:3d:b6:c7:77:
85:50:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org