Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A7B1DA56003A11EEB8430127C4F9AE02.roa
File: A7B1DA56003A11EEB8430127C4F9AE02.roa (raw, json)
Hash identifier: GgTjvQfZMNUqe5q7Fp9+YC2cK2cqXKPmqyq1u7GvYx4=
Subject key identifier: 76:C1:B9:C8:2E:4C:63:A0:D6:D7:C0:E8:4E:B4:2F:FB:B0:18:51:7B
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 33B1
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A7B1DA56003A11EEB8430127C4F9AE02.roa
Signing time: Wed 20 Sep 2023 14:50:49 +0000
ROA not before: Wed 20 Sep 2023 14:50:49 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 138368
IP address blocks: 110.39.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13233 (0x33b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Sep 20 14:50:49 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=650b06c9-35b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:f3:1a:da:d0:e6:49:5e:61:bd:7e:34:da:
74:21:2a:3c:21:3b:de:bb:2e:05:ee:b7:e3:58:5a:
52:f2:18:79:26:bd:f7:3c:81:c0:4f:43:c7:60:d4:
22:72:77:88:7a:2a:24:56:66:e9:57:7d:35:b6:87:
19:d5:3f:73:cf:52:78:9c:6b:ee:5a:81:77:a7:8d:
47:c1:11:ef:b6:5f:70:aa:05:4f:04:dd:93:d2:15:
3f:c3:de:a6:26:0e:da:e4:ee:67:10:7a:8c:2d:6b:
40:9e:9b:df:f0:9e:a2:bb:26:67:d0:dd:ae:45:f1:
e7:c2:41:0c:e3:ac:6d:c8:40:eb:17:35:b6:e7:7f:
78:70:a0:99:13:a7:d9:d7:8c:00:a7:ef:da:5c:83:
f5:c6:9f:6d:00:be:40:09:4e:e3:25:ed:c0:3d:fd:
71:a3:c8:61:6e:73:8e:3d:53:0a:e7:70:14:ac:7d:
07:a0:0d:91:07:ad:e9:4f:aa:ab:b4:4f:9c:1a:5a:
44:84:69:38:7b:c3:0b:8c:1c:7a:53:e8:09:cf:18:
76:a6:5e:9a:09:07:ef:dc:15:47:20:9b:ff:cf:fe:
bb:50:44:9c:b4:9e:18:e1:52:37:51:ac:a8:20:d6:
fe:21:17:8d:fd:c1:a0:a1:76:6a:ef:4e:d6:19:ba:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C1:B9:C8:2E:4C:63:A0:D6:D7:C0:E8:4E:B4:2F:FB:B0:18:51:7B
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A7B1DA56003A11EEB8430127C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.39.137.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f7:21:44:ac:66:4d:f9:24:0a:68:3d:34:a6:9a:0c:a1:1d:
df:9d:05:5f:56:b6:0c:a1:bb:e9:c2:06:21:97:60:f3:1a:1b:
8f:e4:0f:61:7d:e4:c4:1b:c6:d5:1f:41:cb:a3:48:b8:cf:c1:
63:f9:74:f9:8a:5f:bf:60:83:ae:a2:49:cb:55:3c:e7:7f:39:
17:97:f8:e7:d7:17:bb:c8:79:38:78:cf:93:01:b6:81:18:05:
6e:cd:0f:d3:a4:ef:a1:80:55:97:e3:c5:8d:e6:1d:3e:67:67:
f5:0a:72:27:55:b7:7f:37:bc:cf:dc:59:1d:94:51:4b:5a:0d:
3c:db:53:b2:ce:de:fa:c2:b2:2d:36:b7:9f:df:e7:72:9c:3d:
9a:a9:ed:4e:2e:57:d5:77:62:5f:13:df:08:05:58:8d:b5:fe:
a0:58:32:2f:58:8b:de:55:ac:e9:e2:c7:79:be:58:7a:28:75:
0c:9c:ec:89:69:81:4a:9f:fc:92:95:cd:69:91:41:e8:80:e9:
c2:75:8e:3d:7e:9c:e2:23:b5:70:1c:a1:b9:55:e2:93:77:c1:
9f:7a:94:36:75:63:48:8e:91:a8:ba:95:68:ac:21:49:93:21:
58:76:d0:0d:9d:d3:76:4e:fb:a6:58:b0:71:c3:52:63:aa:f5:
03:6c:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org