Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/88D343A49F4011EE9C72963BC4F9AE02.roa
File: 88D343A49F4011EE9C72963BC4F9AE02.roa (raw, json)
Hash identifier: G2qhypaePbhj5bf4eHAB78wtsjJtj/ilxUGIK8Kj7Pc=
Subject key identifier: 09:11:6B:23:49:32:D2:1F:6B:6A:1A:46:3C:61:08:F2:03:95:5E:E0
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3479
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/88D343A49F4011EE9C72963BC4F9AE02.roa
Signing time: Thu 04 Jan 2024 14:50:42 +0000
ROA not before: Thu 04 Jan 2024 14:50:42 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 43260
IP address blocks: 116.90.100.0/24 maxlen: 24
116.90.101.0/24 maxlen: 24
116.90.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13433 (0x3479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jan 4 14:50:42 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6596c5c2-59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fe:fe:84:a9:8f:e5:b1:fb:cd:b5:d9:05:41:
e1:86:95:61:42:3e:af:2e:60:91:7a:af:39:ee:0d:
2d:64:b3:c1:33:c5:0b:f2:ac:22:90:04:1a:92:c9:
b9:cb:f6:2a:74:08:17:f4:2f:ad:49:6e:cf:f2:4a:
fa:a8:d9:8d:66:aa:18:55:b6:d9:b8:96:bf:37:0d:
44:5d:bc:a7:e9:d3:43:c9:5d:d3:47:dc:de:7a:b2:
03:a1:a0:f9:28:a6:a8:ac:c7:b1:66:1c:d1:d6:a0:
d9:2c:ad:14:ee:77:0a:35:c7:40:8f:bc:12:a8:e6:
78:37:4c:20:82:bb:1d:cd:10:0c:09:3a:60:62:6c:
4a:bb:a4:8b:08:d4:22:0a:62:2a:06:ee:b1:3c:49:
3e:3b:7a:30:76:1f:be:11:7a:ca:5d:36:37:33:9e:
2b:20:8c:86:9e:ba:93:ad:b7:0d:b7:df:85:e9:e9:
e3:dd:8b:a5:19:f8:1b:80:b4:6a:b2:71:d6:33:ce:
90:e7:7c:55:62:14:a9:55:90:24:cd:66:0e:b6:bf:
50:be:8a:dd:d0:97:0c:ff:87:ad:f1:4b:82:17:5c:
d7:4f:c6:64:27:75:0c:80:ff:b7:4a:de:33:85:14:
89:92:93:b0:55:ca:27:86:10:d7:66:19:10:de:e1:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:6B:23:49:32:D2:1F:6B:6A:1A:46:3C:61:08:F2:03:95:5E:E0
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/88D343A49F4011EE9C72963BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.100.0/23
116.90.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b3:0d:b8:98:29:af:d5:70:d8:cd:e4:e8:cf:e4:01:e5:24:
c7:2d:0a:02:4d:42:4f:29:26:a5:50:9e:2a:c1:9e:e7:e5:e0:
d5:8b:09:3d:8b:ed:59:6b:13:5b:88:8a:91:24:3f:30:07:c9:
d0:b9:fd:99:b2:8b:27:6e:e4:e8:25:26:46:dd:54:4c:aa:56:
a0:60:7c:c6:48:66:d4:cc:30:61:9f:b0:36:98:74:ce:d9:5e:
e5:67:8c:25:be:54:47:4b:37:41:67:2d:fb:68:e3:7b:ed:38:
43:ee:b4:de:3b:9b:b9:00:1a:f9:85:f2:48:11:c3:5c:8a:d2:
53:27:ef:0e:31:d7:18:ab:fa:f7:c1:97:ab:e2:c0:94:dd:06:
b6:dc:ca:d9:b9:c3:94:60:25:d2:41:39:1c:df:56:66:ff:27:
2b:33:92:10:d3:60:82:84:0e:91:13:01:5f:e2:03:83:26:be:
56:9e:6f:dd:a0:ce:f4:46:9d:aa:c6:01:ea:f4:3f:99:91:25:
9b:64:7e:27:04:98:42:c6:b1:ce:f3:cc:39:6d:46:39:59:14:
92:3e:6c:bd:cc:cb:ca:f2:91:44:ef:b5:f7:3f:18:e9:b9:52:
9f:df:f8:e3:93:8d:89:99:7a:65:43:2f:12:a5:5f:16:a0:ce:
1c:aa:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org