Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/E33CB14871E211EF85299677C4F9AE02.roa
File: E33CB14871E211EF85299677C4F9AE02.roa (raw, json)
Hash identifier: pkOqXPwCYb7S/077JrVE3xLAZXDJrwoyZoMi3eTilWE=
Subject key identifier: 71:FD:57:7A:51:9B:B0:1C:92:5A:01:55:4F:E8:66:E2:61:75:4B:C4
Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Certificate serial: 0F33
Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/E33CB14871E211EF85299677C4F9AE02.roa
Signing time: Fri 13 Sep 2024 15:14:36 +0000
ROA not before: Fri 13 Sep 2024 15:14:36 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 45282
IP address blocks: 123.176.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 18:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3891 (0xf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Validity
Not Before: Sep 13 15:14:36 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66e456dc-8122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:70:7f:ff:4c:20:00:df:76:fe:3a:0e:52:
ce:1e:8b:ed:7f:4e:63:ae:ec:2d:a4:fa:9e:41:65:
ec:b2:e4:2e:4e:d9:55:76:57:96:d4:b1:7c:98:1f:
11:20:e3:cf:f2:71:4f:2f:51:5d:12:3f:d8:89:3e:
86:29:24:df:dc:68:e9:fb:8d:2a:21:b5:39:27:6e:
85:e0:08:8e:3b:b8:b5:b5:4b:8b:19:13:86:f1:73:
2a:fd:58:b8:0b:1b:66:f2:8b:a8:9e:eb:f2:64:11:
7f:3e:b5:f3:a2:f8:c3:e0:75:0b:51:a5:a9:ed:52:
fc:b3:60:08:3a:e6:fc:fb:b8:3d:83:cd:40:8f:b0:
21:fe:57:8d:be:98:1f:12:df:96:dd:94:e2:cf:ac:
4c:3d:ef:47:50:3d:a1:92:09:6b:e6:7d:4f:1f:0c:
04:58:be:73:3e:4b:93:b6:fa:fb:e3:df:60:cb:95:
0e:b8:f3:b8:6e:32:85:8b:39:6d:63:ee:86:86:28:
20:ca:bb:8f:8e:24:cf:f8:f1:20:f5:03:88:ab:96:
9b:ce:9f:0c:15:b2:07:3e:cd:38:75:1f:bf:7f:f1:
c0:37:3b:6c:b9:45:8c:fc:3e:2b:71:e7:10:0e:44:
3c:78:78:ba:ed:b6:9e:49:35:b4:98:1e:f5:e9:25:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:57:7A:51:9B:B0:1C:92:5A:01:55:4F:E8:66:E2:61:75:4B:C4
X509v3 Authority Key Identifier:
keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/E33CB14871E211EF85299677C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.176.58.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cf:92:58:32:6d:64:f6:f9:ac:b0:fe:c6:8e:50:f7:41:e9:
3e:e4:37:c7:c7:39:e8:b4:59:fd:4e:5c:09:e6:05:21:77:8b:
fb:e9:39:a8:c1:f3:88:6c:c2:53:f8:91:f8:d6:25:ec:12:67:
1a:7c:4d:ea:9d:9a:dc:03:4f:86:ff:de:a2:70:8e:f5:33:c1:
9e:92:0e:c6:6a:f1:2f:35:81:f5:01:2d:2b:8f:e1:44:86:ad:
d2:b1:84:ad:e4:06:0b:9e:ad:2c:61:c1:91:5b:0b:5c:1c:98:
f3:c2:38:df:ff:5a:ef:65:04:40:b0:54:b8:5d:c3:f2:2a:9d:
74:e2:fe:74:23:cf:65:26:62:31:4c:3a:e2:d9:54:a0:82:06:
29:27:88:1e:83:f4:a6:cd:69:83:6d:ff:ca:4e:b9:a3:fd:85:
e4:66:cd:bb:79:4c:5c:42:fc:f7:8d:7b:a6:8d:e2:f7:2d:21:
e4:c2:4f:4a:69:44:5b:4f:25:fd:fc:56:fc:30:6c:5e:8f:08:
1d:31:c5:50:8d:0d:10:19:a2:7f:55:c0:18:5d:32:00:f3:a2:
21:32:bb:f3:1b:8e:b3:dd:5c:18:52:ab:85:b1:4b:ae:f3:4d:
16:5f:2c:9a:12:cd:d0:04:ce:3c:9c:4e:7e:2b:eb:95:b1:1f:
22:b3:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org