Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D370391E4FCE11EF919B6C39C4F9AE02.roa
File: D370391E4FCE11EF919B6C39C4F9AE02.roa (raw, json)
Hash identifier: 8uCH7EKoDuudJXFy9UxQdrxWMH8n2Ycni73ucnkPQJg=
Subject key identifier: DF:88:70:50:D4:BC:DF:D1:A0:73:63:7A:F6:4C:05:7C:EC:13:81:D3
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3530
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D370391E4FCE11EF919B6C39C4F9AE02.roa
Signing time: Thu 01 Aug 2024 06:25:21 +0000
ROA not before: Thu 01 Aug 2024 06:25:21 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 62164
IP address blocks: 116.90.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 12:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13616 (0x3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Aug 1 06:25:21 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66ab2a50-f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:3e:94:bd:1a:2f:86:b6:75:b0:94:ad:3f:
1a:89:e3:a6:67:b8:a6:8b:67:71:e2:4b:8c:57:bd:
17:5e:bf:aa:73:88:77:53:ff:9f:4c:57:ab:29:d9:
e1:ae:2a:a9:b4:c1:e5:fe:42:10:1c:33:93:25:6b:
37:f8:a7:30:07:c9:1a:68:1e:4b:57:44:77:de:6d:
19:14:7b:50:c9:94:3e:8d:fd:99:46:78:3a:97:df:
6b:52:16:c3:2a:fd:be:da:82:2d:8a:b9:9a:ed:0e:
23:ce:8d:fc:7a:9f:af:1a:9d:d7:db:95:14:ab:30:
90:20:84:6c:06:89:cb:9e:9f:02:16:9a:91:86:54:
fc:e7:05:1e:e5:b5:d2:9a:5f:34:f9:18:f2:61:68:
78:2c:95:e5:80:d8:92:01:1d:e1:1d:75:50:74:6c:
33:e8:d9:29:1e:1f:c3:b4:68:91:d2:fa:94:e2:c7:
ba:b4:dd:60:f5:89:b2:90:9c:fe:e0:12:66:43:b4:
fc:04:6e:50:4a:ce:62:03:20:24:28:96:d0:6a:28:
57:37:4e:3f:5d:d3:b3:ce:9b:5c:8c:7c:ee:16:b6:
1a:db:cc:7f:6b:c2:61:d7:92:3a:bc:3b:1b:6e:e8:
3f:20:36:6e:e5:55:83:a7:df:10:94:46:fb:11:11:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:70:50:D4:BC:DF:D1:A0:73:63:7A:F6:4C:05:7C:EC:13:81:D3
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D370391E4FCE11EF919B6C39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.105.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c4:6f:5a:f0:74:64:6c:af:7c:0c:78:a2:42:a6:15:a8:e6:
73:fd:de:e8:0c:6d:1c:15:7e:55:c0:0d:34:13:f6:75:5b:e0:
eb:61:3e:c5:a7:dc:03:8e:e4:f0:54:18:43:1d:42:b7:be:23:
d3:62:9c:5c:34:1f:e1:68:ce:eb:1f:dd:d4:01:47:d1:a2:e7:
a0:9c:3a:e2:45:f5:dc:fb:a1:c5:14:ce:0f:06:19:de:b3:f7:
e2:bc:8a:7a:77:66:2a:69:90:2e:94:c8:50:fe:1b:f9:bd:26:
32:2b:3c:9f:fa:e6:89:07:ad:b6:d6:cb:fa:9f:71:54:19:d0:
03:a8:9d:c0:da:d1:d3:df:8e:6d:c0:47:34:46:62:d3:a2:85:
2f:2f:8f:ed:2e:af:fd:9e:00:24:06:bb:a9:12:8b:72:75:25:
1e:0b:94:3f:45:03:51:17:72:4f:9d:8a:c6:5a:c1:fe:a4:f1:
7e:bd:76:68:b8:8e:d9:88:33:7a:c4:66:b2:46:4b:dd:c5:43:
ed:bf:c1:e0:8c:4d:fc:ba:da:d3:a5:43:af:62:ca:f9:1b:ca:
49:05:5e:5b:d0:d6:bc:67:2a:e8:f2:b8:3f:30:68:83:c1:db:
16:fc:df:f0:b9:04:29:06:4d:8f:08:3d:d2:3b:2f:77:4b:33:
38:e4:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 14:00:10 2024 by rpki-client on console-fra.rpki-client.org