Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/2A2C35180B6F11EF84150E18C4F9AE02.roa
File: 2A2C35180B6F11EF84150E18C4F9AE02.roa (raw, json)
Hash identifier: K7U3SsiCdaLJusfq1toaPp+RwmgOmvxAtj1q5tiqx1w=
Subject key identifier: 35:75:2A:B1:2A:32:7D:93:71:B8:C3:99:2C:94:1D:D3:53:73:6D:B4
Certificate issuer: /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
Certificate serial: 33C2
Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/2A2C35180B6F11EF84150E18C4F9AE02.roa
Signing time: Mon 06 May 2024 06:09:15 +0000
ROA not before: Mon 06 May 2024 06:09:15 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 9503
IP address blocks: 202.164.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 08:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13250 (0x33c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
Validity
Not Before: May 6 06:09:15 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6638740b-6e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:6b:d5:19:ce:0e:c4:3e:8c:6f:cb:0d:91:
c6:ab:4d:8f:f5:0d:41:95:85:53:a7:83:1a:a6:a5:
a6:2c:22:aa:dd:77:e6:a8:e5:71:a1:cf:7e:f2:49:
cd:de:b5:68:28:5e:e4:fb:0b:a5:cf:e7:51:31:de:
0a:57:97:6e:aa:a2:05:dd:c5:20:02:a7:65:f8:e0:
a6:b5:35:27:10:3f:d1:5d:cb:f1:7d:2f:f2:1b:bf:
4a:c6:a5:6d:df:56:df:cf:bc:15:d3:50:b6:88:cf:
a2:9c:1f:23:0b:73:71:75:69:ee:2a:e6:df:61:88:
ed:bd:a4:75:30:8f:e6:8a:e9:42:4c:04:d0:77:c3:
dc:ae:95:44:e9:26:02:fe:a1:52:d4:07:26:dd:51:
eb:12:a2:a6:8f:cd:35:e3:34:19:de:4f:14:46:8e:
23:74:28:78:92:b0:f5:cc:38:0c:76:ec:c0:04:2f:
6d:f0:f6:e9:ee:f3:60:98:85:89:19:e1:1e:ec:8d:
9d:5c:cb:cb:be:4c:e3:3b:59:39:1b:3b:98:c4:8c:
8b:07:7e:7c:55:7b:22:27:50:97:03:76:c4:5b:bd:
bd:f5:3f:0c:0d:1d:fc:4d:c8:df:ca:08:76:7b:9f:
77:0d:0e:a8:ca:c8:f0:14:d9:e9:15:f8:d2:8b:00:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:2A:B1:2A:32:7D:93:71:B8:C3:99:2C:94:1D:D3:53:73:6D:B4
X509v3 Authority Key Identifier:
keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/2A2C35180B6F11EF84150E18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.164.28.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:7f:e1:6a:a0:a6:66:0d:bb:74:a3:d2:a7:80:51:14:42:32:
31:4b:88:d0:8e:ef:cc:85:54:0d:74:4d:35:0e:4d:25:d7:49:
14:f0:a4:10:5b:27:70:d8:37:d9:15:97:80:f7:52:a6:69:78:
5e:a2:73:61:2f:d9:b9:58:7a:b2:ae:c0:ac:d7:4f:fb:9d:cb:
f1:ce:7f:8c:88:79:bd:83:09:f7:4f:e5:e2:fb:ed:46:2c:91:
36:41:0e:00:60:42:cf:9d:2a:36:8b:91:6a:a8:3d:97:52:b5:
39:83:7c:1e:5d:7f:e8:8e:0a:ca:c5:93:e4:dd:0b:28:43:d2:
a2:d6:fb:fc:d8:32:16:5f:2b:fc:d0:9b:96:11:e0:26:ca:ff:
c1:e0:90:9e:43:a4:f5:fe:53:9f:9e:73:a7:7c:cc:63:96:fa:
1e:d7:f7:81:67:e2:0c:5f:ab:df:91:f3:01:7b:15:e5:13:dd:
56:3e:87:e1:b9:16:c0:5d:25:69:6f:bf:9f:5d:27:6a:e7:25:
86:fb:6f:2d:59:eb:9c:6e:46:27:ec:86:d6:63:11:9f:08:0c:
b4:15:6d:7e:95:32:38:f5:25:d3:3f:16:25:2b:7d:b9:36:ef:
49:1b:34:05:2e:6b:e4:dc:32:dc:fb:07:b2:00:c5:44:08:fe:
64:e9:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org