Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/2E9B73FC857A11ECA3F32D50C4F9AE02.roa
File: 2E9B73FC857A11ECA3F32D50C4F9AE02.roa (raw, json)
Hash identifier: uObXQsf11jAIgRtQ7Y6EeTyCkdwaU9XcNsuBpkGz48s=
Subject key identifier: EB:A8:D8:FB:8F:71:64:F1:AE:BD:80:76:46:6B:25:96:02:39:B0:27
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 33B0
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/2E9B73FC857A11ECA3F32D50C4F9AE02.roa
Signing time: Wed 20 Sep 2023 14:50:48 +0000
ROA not before: Wed 20 Sep 2023 14:50:48 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 134489
IP address blocks: 110.38.35.0/24 maxlen: 24
110.39.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13232 (0x33b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Sep 20 14:50:48 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=650b06c8-90fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:dd:ab:41:47:48:1f:95:a2:3c:e5:0e:6b:
7b:1d:af:a8:b8:88:a2:95:4e:6b:90:fd:53:8c:7a:
d8:e0:c1:d0:5e:99:54:74:38:ff:91:b9:e3:e2:38:
85:19:b0:9b:98:eb:c0:99:53:93:b0:fe:a2:98:79:
fd:a4:8c:15:b2:19:9f:c1:48:54:53:83:48:a6:75:
47:32:e3:2e:c8:93:2b:e4:5b:a2:f4:72:91:79:34:
5b:69:ae:f9:38:59:7f:7b:4a:7e:cf:c6:b6:86:09:
9a:75:8b:a3:41:7b:b7:f7:23:6e:c6:9d:e4:98:93:
f9:a5:4e:ec:4d:1b:b2:ed:81:1e:7f:c6:3e:1a:9c:
f7:11:1f:99:08:93:84:44:26:9b:ce:97:58:db:4c:
89:47:6c:70:46:87:5e:d1:f5:ce:d1:b8:59:fd:10:
60:62:9c:8a:95:b0:22:d7:76:36:0c:be:77:15:18:
91:74:b2:58:6c:fa:3a:07:50:c3:b6:65:20:a0:ce:
dc:4e:d9:9b:21:83:86:78:c6:b1:a0:4d:e4:56:18:
b1:fc:2f:30:47:1a:20:b1:1f:d8:1b:ad:e3:3e:ba:
87:25:44:11:5b:a0:b3:73:d4:a4:c7:40:31:51:91:
77:ab:64:dc:83:c7:c9:57:6e:24:71:de:18:e2:76:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A8:D8:FB:8F:71:64:F1:AE:BD:80:76:46:6B:25:96:02:39:B0:27
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/2E9B73FC857A11ECA3F32D50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.38.35.0/24
110.39.27.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:48:38:ab:91:52:fe:37:12:2c:8b:e6:86:e9:f2:8f:bd:d7:
47:f1:d5:5c:2d:62:72:6d:25:45:a5:c1:07:80:e9:8c:4f:c8:
ed:92:24:28:a9:f2:4e:21:ac:b3:6a:ee:58:9f:1a:50:5b:f3:
7c:83:66:c0:63:ed:f0:1a:c7:c4:48:25:af:0f:de:26:75:64:
e3:db:90:36:30:ce:ef:59:e1:61:5c:3a:59:d9:ed:2f:1d:f2:
5d:39:ad:a8:70:90:c6:35:7b:6e:9a:60:3d:e9:e4:68:4e:77:
d5:5c:6a:28:13:77:4d:f2:cb:a9:1f:82:f5:ce:a5:1a:76:35:
62:8f:de:97:ef:d6:c8:0a:9e:72:34:0d:91:dc:29:44:cd:c7:
78:0d:22:fe:32:e1:1e:57:0a:1b:52:1a:01:c3:3b:4a:e0:42:
4a:53:7f:0a:3e:f5:d9:3a:17:53:20:d6:7a:1b:86:f4:68:84:
a2:c9:cc:6a:1c:1e:e8:68:32:21:bc:88:fa:61:08:ce:41:57:
fa:d7:c7:0c:35:55:ac:83:b0:44:3e:be:5a:3f:51:fd:34:3a:
62:b5:53:5e:0c:90:98:a9:aa:e2:90:da:ae:c1:40:47:fe:52:
b6:e8:70:70:44:f9:ab:19:13:58:f2:d9:12:a5:4b:34:4c:3f:
e0:f6:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org