Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/59B496E0A86A11ED882A2113C4F9AE02.roa
File: 59B496E0A86A11ED882A2113C4F9AE02.roa (raw, json)
Hash identifier: txehNSapeXDuknZEZULa5HFk5JtJ0rWA9bX6mn1BmRo=
Subject key identifier: D2:A9:6F:98:B4:EB:8E:D6:FA:95:BC:39:AA:E0:2F:12:31:41:D1:15
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 059B
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/59B496E0A86A11ED882A2113C4F9AE02.roa
Signing time: Thu 09 Feb 2023 11:10:24 +0000
ROA not before: Thu 09 Feb 2023 11:10:24 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 8100
IP address blocks: 210.247.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Feb 9 11:10:24 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63e4d4a0-de10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:cb:92:89:bd:9c:ac:5e:99:5a:f0:fa:61:
7b:b3:80:ae:a7:47:ad:96:93:22:85:d3:80:fe:2d:
9a:c3:ee:8e:35:ec:e2:a7:3a:ce:89:ca:b3:f7:93:
53:1c:73:64:cc:a5:a3:6f:d8:aa:cb:5a:42:b3:21:
f8:0f:d4:a0:19:ed:98:c3:d2:21:f9:62:99:17:b5:
4b:b2:15:7a:af:59:a3:c7:c0:a1:df:1e:44:6c:00:
06:55:27:ba:df:07:3f:15:78:a4:fa:f8:72:67:99:
9e:1f:03:f3:50:f2:c4:ce:06:ba:2e:db:bd:15:a4:
2e:e2:54:1e:a8:c2:da:00:ec:84:77:e8:79:e7:04:
9c:da:3d:be:99:b6:c5:db:6c:c0:07:d2:c3:01:20:
62:50:1d:52:c5:53:ec:2f:c5:a1:28:b0:b7:67:40:
40:a2:57:64:7d:bc:05:3e:43:fd:37:bb:28:e5:62:
82:d6:29:23:02:5f:2a:c5:36:3b:d4:f5:02:81:fa:
98:79:b4:d5:86:7a:0a:b9:42:58:7b:bf:c9:b8:a4:
2e:5e:3b:ec:7c:6b:3c:9d:cb:1b:b6:7b:53:99:8d:
ff:b8:8b:9a:2a:48:48:80:0e:82:ee:ea:7c:1e:cc:
68:e9:0a:4c:cb:ec:78:69:ba:ce:62:1f:96:43:a1:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A9:6F:98:B4:EB:8E:D6:FA:95:BC:39:AA:E0:2F:12:31:41:D1:15
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/59B496E0A86A11ED882A2113C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4c:4e:6b:43:20:87:04:a5:92:0e:2b:66:89:b4:2e:b6:df:
84:7d:fd:1d:60:a1:b6:c5:cd:25:8a:f1:79:2a:94:ca:6e:f5:
3c:2d:1f:01:b0:05:6f:76:43:40:12:47:ae:eb:13:db:ec:cf:
a9:18:35:bf:04:75:7e:72:b6:2e:56:39:ab:a3:96:ef:bf:a2:
11:65:c2:08:3a:4c:08:e7:22:d3:2f:5b:27:2d:db:56:f8:86:
fa:40:b9:f7:5e:0a:de:21:0f:1d:c3:9d:e9:5a:cb:fc:75:ed:
97:9a:2c:2f:d2:a2:02:90:df:64:9c:e1:f8:09:00:58:56:34:
9a:88:56:ea:bc:48:34:c7:ac:9c:03:a4:d3:62:07:c3:b9:7c:
c5:30:db:5c:46:00:f0:c8:52:39:84:a1:8b:e8:e9:bb:96:ce:
4a:d8:6c:28:cf:f7:6d:69:de:60:c3:64:a7:a5:d8:1f:82:0e:
97:13:f1:90:c5:af:2a:71:26:5a:0f:f8:d2:a8:74:ad:a3:7c:
1f:80:c8:d0:62:48:98:cd:4d:fe:d0:f0:08:a1:83:e9:83:3b:
27:51:9e:4b:08:b8:be:3e:9a:55:a3:9b:ac:a3:b6:4e:e8:01:
1f:ce:63:63:13:3e:b5:6c:0b:54:44:c7:65:da:3c:06:01:77:
8a:fc:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org