Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E11035DE02E311EFA9712859C4F9AE02.roa
File: E11035DE02E311EFA9712859C4F9AE02.roa (raw, json)
Hash identifier: V6mkU1t+do01ENnx0fHkUqNhuyY++hkugss11RhFtvg=
Subject key identifier: 9E:6E:C9:33:F9:07:64:92:28:93:27:18:1C:22:05:4D:4C:C5:84:FB
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0B1D
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E11035DE02E311EFA9712859C4F9AE02.roa
Signing time: Tue 30 Apr 2024 09:47:57 +0000
ROA not before: Tue 30 Apr 2024 09:47:57 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 136908
IP address blocks: 27.111.17.0/24 maxlen: 24
117.121.230.0/24 maxlen: 24
117.121.236.0/24 maxlen: 24
117.121.238.0/24 maxlen: 24
202.52.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 05:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2845 (0xb1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Apr 30 09:47:57 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6630be4c-653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:91:d3:da:36:3b:4f:2a:eb:74:3f:4e:2e:
62:56:36:e6:db:27:c3:fb:9c:c8:9d:d6:32:54:0c:
96:5a:bd:4c:08:09:13:73:4a:0a:55:d2:08:8d:10:
63:57:00:c0:63:72:64:ba:03:55:61:e4:4e:01:0a:
30:0e:8e:ae:79:56:d4:3c:9c:cb:21:f1:1d:2b:9f:
46:66:84:c9:12:17:96:fd:35:43:26:f5:96:70:60:
ee:a7:72:d7:f3:1e:09:cf:d2:36:90:49:51:1d:bf:
82:4c:ec:43:c8:60:d7:ab:1a:95:0b:e7:6e:b2:72:
93:fe:6d:70:ba:0b:92:25:83:4f:b9:fe:56:07:fb:
af:f9:1c:fa:fc:60:48:98:d9:0c:70:5a:a2:92:66:
ea:e6:45:2a:b1:73:de:eb:ba:17:a9:6d:f9:ac:2f:
0d:81:eb:29:03:81:0e:72:65:74:b2:a9:69:a6:a3:
5b:10:96:ec:0b:79:b3:85:ce:86:c4:77:5d:b8:55:
8b:16:00:6a:59:43:e9:1c:22:66:41:e0:01:aa:e9:
6f:96:21:48:c0:16:a7:2b:3b:5d:32:f4:eb:92:15:
06:d8:49:1e:4f:42:02:21:3f:b3:90:75:f8:14:7f:
90:de:78:de:28:fc:8c:df:5d:65:fa:a3:a1:04:a3:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6E:C9:33:F9:07:64:92:28:93:27:18:1C:22:05:4D:4C:C5:84:FB
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E11035DE02E311EFA9712859C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.17.0/24
117.121.230.0/24
117.121.236.0/24
117.121.238.0/24
202.52.243.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ae:ff:bd:61:e0:db:44:63:9f:41:cd:83:da:ae:04:11:a8:
68:de:f8:21:6c:e9:41:a5:13:f1:e7:13:01:60:84:27:45:ff:
ba:27:82:c3:62:19:8a:33:91:79:24:7d:4b:57:b0:ce:62:d6:
c7:9a:bd:95:5b:6c:94:c1:c6:cd:a2:e7:c6:43:cf:1c:e9:e1:
61:c9:69:4c:be:b9:77:55:11:67:c5:b0:35:39:3d:38:84:bc:
c5:d8:3c:76:a0:65:c6:21:9a:27:ae:79:6b:0e:1a:5f:d2:fa:
2f:e0:47:44:50:32:b0:23:89:2b:03:c9:f4:19:a0:f9:98:62:
aa:e1:67:8d:df:e0:4c:25:d0:d7:78:3d:6f:59:0d:d6:92:f5:
01:c7:0f:66:a5:19:02:d9:25:09:64:9b:ba:55:b1:50:a2:c3:
11:77:ca:56:3b:f9:90:ad:72:b1:ac:b5:e5:b7:0a:c3:42:59:
3d:45:c1:af:65:f7:4d:f2:71:cd:9c:81:d9:92:0f:fa:76:49:
fb:99:fe:d8:b6:33:67:ab:ba:16:e2:36:7c:de:e0:d4:b3:2c:
1a:f5:61:b9:3b:53:92:83:09:2b:e6:81:4b:a4:28:7d:dc:46:
41:e9:b8:e9:b2:b9:e6:a2:e1:45:54:32:9b:59:59:4e:b3:55:
33:da:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 07:45:01 2024 by rpki-client on console-ams.rpki-client.org