Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/E3A83166063511EF81D98D5EC4F9AE02.roa
File: E3A83166063511EF81D98D5EC4F9AE02.roa (raw, json)
Hash identifier: JY/9Mrotlj4kyV7+9fbvlzU4R5g8Z2UU9l54u689StU=
Subject key identifier: 83:C7:81:86:FD:6E:EC:1E:38:A6:2B:23:15:BF:96:91:AE:03:0B:85
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0B89
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/E3A83166063511EF81D98D5EC4F9AE02.roa
Signing time: Mon 29 Apr 2024 14:36:39 +0000
ROA not before: Mon 29 Apr 2024 14:36:39 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 147314
IP address blocks: 202.53.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 11:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Apr 29 14:36:39 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=662fb077-5630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:1d:23:8b:ea:90:c8:49:bc:46:b1:b3:cd:
bf:dc:cc:93:78:c7:ca:5a:f7:16:60:94:1c:5d:de:
20:0a:45:00:29:50:87:50:75:d6:14:b1:30:f1:b5:
2f:ea:41:72:72:f8:ad:e1:fd:f1:f6:ea:74:86:ca:
b7:06:eb:58:fc:1b:79:d2:e6:ac:23:78:e9:6d:3c:
87:38:7d:3f:24:8e:93:f5:10:43:48:1f:fb:e0:3f:
78:16:c0:49:ea:f8:0f:31:82:55:51:0f:a3:86:f6:
70:b8:35:61:e3:8f:e7:4b:cf:19:c5:73:04:b8:dc:
dd:ea:4d:9b:06:24:b9:9a:44:55:1f:04:11:b1:73:
6f:ad:e4:16:d0:46:f0:93:bf:b5:a6:72:e5:82:e6:
7e:8a:31:ad:0a:3d:cc:40:43:35:6f:96:b8:ca:5b:
55:c8:c4:ce:e5:24:e1:25:47:df:3c:5e:46:17:18:
bd:ee:33:11:72:7a:dd:94:b7:d2:12:40:43:06:fe:
fc:2b:41:cd:32:eb:72:3a:ec:07:de:7b:ac:f4:55:
37:71:39:bb:c8:76:d7:fe:eb:e8:53:6a:bd:b3:cd:
2f:09:bf:0b:9d:fb:cf:30:50:ee:0c:6e:4a:b6:4f:
10:3f:7a:80:c2:8c:17:43:b3:43:5e:98:fb:d0:c9:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:81:86:FD:6E:EC:1E:38:A6:2B:23:15:BF:96:91:AE:03:0B:85
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/E3A83166063511EF81D98D5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.53.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8b:2c:67:be:b5:86:92:4d:13:80:fd:41:e1:55:8a:64:8b:
5e:5d:63:f9:bf:9f:f6:c0:84:fa:cb:6a:0f:a8:a1:b3:15:75:
29:b0:c5:ba:6b:74:00:41:c6:84:18:47:46:b3:f3:10:5f:1f:
3d:d0:58:e0:7f:a5:55:62:dd:ec:89:5b:81:d8:71:37:c3:b5:
c7:11:c3:a1:22:d9:d0:26:1c:84:7d:69:24:13:4e:cf:9a:40:
39:9d:29:c6:88:08:08:a1:47:4e:72:5a:68:eb:63:45:d1:5a:
26:09:0a:0d:7e:7b:bb:5d:7e:71:2d:52:10:96:5f:fb:da:ea:
bb:c9:00:cb:31:a9:91:55:59:60:2e:d9:c8:03:c7:c1:92:9b:
6b:22:4c:5a:f7:7a:17:49:d0:2d:b6:2a:6a:8c:07:93:d3:35:
c0:18:df:df:3d:08:10:12:34:7f:ca:fe:7f:75:b5:f3:e3:22:
fb:b6:80:72:18:b4:33:b6:d2:13:8a:87:13:ef:87:48:30:45:
16:53:b9:8b:dd:88:32:13:a3:19:82:53:ce:16:56:21:46:d1:
71:ea:63:78:a4:7d:02:ac:cd:23:96:6e:6e:e5:39:bf:3a:0f:
8d:18:37:e7:b4:16:df:ae:cb:25:34:b2:67:75:36:6b:19:1f:
b8:47:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 13:36:47 2024 by rpki-client on console-fra.rpki-client.org