Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/C6BC93E8402A11EEAC7DEF72C4F9AE02.roa
File: C6BC93E8402A11EEAC7DEF72C4F9AE02.roa (raw, json)
Hash identifier: jOM6Hkgactl6lz7fjFPOGTN8Wqofzk/QdCIdXUVbU8s=
Subject key identifier: 3C:FF:8A:E7:92:25:39:42:8A:60:EB:4C:3E:C6:32:CB:C6:9D:56:F9
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 02
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/C6BC93E8402A11EEAC7DEF72C4F9AE02.roa
Signing time: Mon 21 Aug 2023 13:58:17 +0000
ROA not before: Mon 21 Aug 2023 13:58:17 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 24424
IP address blocks: 113.197.104.0/23 maxlen: 23
2401:fa00:40::/43 maxlen: 43
2401:fa00:40::/48 maxlen: 48
2401:fa00:41::/48 maxlen: 48
2401:fa00:44::/48 maxlen: 48
2401:fa00:45::/48 maxlen: 48
2401:fa00:47::/48 maxlen: 48
2401:fa00:48::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Sep 2023 14:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Aug 21 13:58:17 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64e36d78-339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:d6:f5:14:b9:95:e4:3d:ab:14:96:04:85:
96:31:b7:04:2c:3f:17:94:e9:f7:e6:e4:52:b6:4b:
39:21:c9:eb:5f:f5:c4:7e:26:08:b8:02:53:df:46:
a7:85:28:4f:90:da:8c:bf:73:4a:3b:08:36:3d:9e:
dd:f9:ff:c6:ce:8f:e2:a7:2a:dc:45:a7:49:19:b4:
e6:d6:71:b8:1e:eb:cd:40:4f:03:e4:6e:2a:fa:03:
4f:7e:62:e8:ea:96:7d:03:86:9f:11:dc:45:d8:92:
3e:9f:40:f6:c3:5f:12:36:10:69:54:4e:5a:52:08:
ac:94:79:90:fb:63:9b:37:1e:7d:5f:fb:22:2f:25:
48:47:9f:ac:f8:0d:0e:46:09:49:81:31:1a:8c:df:
a5:7e:f9:1a:2c:cc:1b:80:da:d3:d9:17:12:a2:bb:
4d:bc:c8:1b:60:22:14:22:a0:98:24:e2:9d:9d:d9:
06:15:9d:4a:b6:eb:66:82:6c:74:09:da:2e:b0:86:
44:85:0d:19:16:7e:ed:1d:8a:01:41:92:4d:db:c5:
8b:b1:45:c7:a8:77:7a:1d:79:72:2f:0b:93:16:f9:
36:5f:3b:da:80:e8:41:ee:49:e9:2f:29:0e:44:0f:
a8:5f:d1:56:c0:b5:6a:15:1e:2e:29:bd:dc:f1:07:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:8A:E7:92:25:39:42:8A:60:EB:4C:3E:C6:32:CB:C6:9D:56:F9
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/C6BC93E8402A11EEAC7DEF72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.197.104.0/23
IPv6:
2401:fa00:40::/43
Signature Algorithm: sha256WithRSAEncryption
1e:06:c9:48:de:0d:35:63:55:29:e4:f5:5a:16:c3:ab:e7:10:
43:bb:e9:72:30:00:1e:2e:9c:70:33:b5:95:f7:7d:53:ec:71:
5a:25:fb:48:f3:b0:ac:03:34:1c:13:7a:05:70:7c:22:5b:13:
74:94:a3:81:7f:17:01:4b:93:33:04:b3:d5:7d:21:86:e9:6f:
9b:85:bc:a4:82:1b:6d:57:69:97:83:29:8a:a0:f8:d8:e2:63:
00:6d:c2:71:51:a0:c2:58:68:1a:d0:24:67:ce:48:7b:78:68:
0e:c1:1b:42:cb:a7:04:d5:81:e9:46:c9:52:a2:e7:33:af:bd:
21:ef:57:98:51:28:db:cb:c2:66:cc:66:77:17:8c:7d:ba:63:
ed:a0:55:c4:44:38:85:1c:f4:99:a7:c3:fa:f2:3b:39:d9:30:
68:ed:0f:a9:3a:97:39:b7:85:0b:c4:14:7c:da:ac:08:c9:4d:
3e:fd:2d:62:06:90:e2:e6:05:df:87:f8:85:28:62:27:f8:25:
a3:07:19:cb:f2:a9:f4:54:4b:d3:31:98:28:93:51:cd:39:2e:
7c:bc:f8:6c:70:b7:c8:cd:75:f5:7b:8d:f6:28:93:b4:e7:ee:
23:fe:e1:af:1a:62:2c:ec:c9:dc:fe:79:7a:8b:a2:a5:55:ab:
6a:ea:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org