Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/D321A892E68F11EE8AA45E25C4F9AE02.roa
File: D321A892E68F11EE8AA45E25C4F9AE02.roa (raw, json)
Hash identifier: 1I+hEzDyHZwOc14chSk/Dzsy1UsQJNsntViQHfiTQLM=
Subject key identifier: F4:78:1B:5F:14:AA:24:9C:08:07:2F:7D:B0:EF:CF:F9:58:AB:7D:21
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 04
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/D321A892E68F11EE8AA45E25C4F9AE02.roa
Signing time: Wed 20 Mar 2024 07:59:49 +0000
ROA not before: Wed 20 Mar 2024 07:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9498
IP address blocks: 202.71.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 20 Mar 2024 11:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Mar 20 07:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65fa9775-420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:cc:b8:74:21:f9:6e:46:43:a1:37:c2:62:
5c:aa:0d:82:c6:e4:24:34:05:56:75:16:17:cc:79:
5c:e1:65:38:92:8c:33:81:83:d0:05:b4:e2:0a:c0:
d2:fa:ba:a6:72:a8:29:b4:91:c4:87:2b:eb:c2:42:
14:ef:05:4d:3e:f7:28:7d:3f:d5:f5:9f:a5:72:c8:
59:59:69:bb:16:77:24:30:19:6e:62:0c:f4:38:ad:
ee:7a:39:3a:04:10:04:f3:c7:16:2d:1c:de:53:d7:
ae:da:cd:94:0a:4c:a1:20:47:da:1b:f8:ba:bf:79:
4b:84:7d:66:44:3d:38:23:8c:80:7b:9c:15:6e:ff:
d0:71:ff:5e:84:5c:4f:e5:d4:0b:bf:08:ad:f1:69:
a9:32:8b:f1:11:10:b9:0b:0b:1d:e3:6c:e5:60:87:
ad:66:ef:4b:3e:61:10:d2:cc:82:ae:a0:53:e0:b3:
6b:b2:8d:53:cd:4c:eb:ea:10:49:ca:e6:53:17:cf:
74:9e:eb:a1:c3:2c:65:04:e7:b6:c1:51:64:19:d3:
f3:bc:b3:b4:81:79:db:08:87:66:56:c5:ef:00:29:
1a:98:29:94:31:41:35:da:64:7a:eb:4d:09:bb:9c:
45:bb:4e:ca:a5:a2:72:9d:7e:eb:70:5a:7b:f9:d8:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:78:1B:5F:14:AA:24:9C:08:07:2F:7D:B0:EF:CF:F9:58:AB:7D:21
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/D321A892E68F11EE8AA45E25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.71.184.0/23
Signature Algorithm: sha256WithRSAEncryption
70:7a:d6:f9:6a:e9:d8:8e:22:91:cc:43:3c:da:03:0e:48:55:
d2:c1:3e:69:61:9d:67:71:b8:15:b3:64:90:c8:06:1f:cb:42:
91:82:e9:63:3c:25:10:e6:fb:8b:4e:44:ba:50:3d:e1:32:6d:
01:dd:6d:48:a4:90:59:a2:8c:1c:49:10:32:ec:7e:3f:a2:fa:
50:af:b0:a8:34:1b:71:9e:eb:22:6d:02:72:45:f7:b5:88:ea:
a3:ed:70:1d:70:d5:43:3b:10:0e:5e:f6:1a:d0:e2:1e:49:46:
72:86:e3:89:2d:66:7f:e2:64:f3:67:83:16:2d:d0:16:a3:0b:
21:7d:60:47:0f:df:f9:7d:54:67:d0:16:cf:ff:3e:09:f7:a0:
24:66:ae:d1:0c:b2:5f:c4:71:05:33:43:9d:2d:78:38:25:68:
97:d6:87:91:bd:cf:ce:79:55:97:50:8c:cb:89:6e:2f:ba:c4:
28:81:75:3a:cc:02:d7:d0:1d:bb:2a:5e:0f:22:f9:3f:8b:d4:
08:e2:b6:26:e8:44:65:0a:d7:02:6e:fc:7d:02:b4:00:a8:dc:
71:c9:8e:35:fd:68:15:c3:80:17:be:fe:7a:09:39:10:39:e6:
e8:97:da:7e:79:d2:be:c0:81:86:dc:e2:6d:04:0b:54:5c:b3:
e9:c1:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 14:30:35 2024 by rpki-client on console-ams.rpki-client.org