Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/FFA70E30B66411EEAD17EA7CC4F9AE02.roa
File: FFA70E30B66411EEAD17EA7CC4F9AE02.roa (raw, json)
Hash identifier: gRFbHX2/HmvfUd4wd5TdUcc/KjXG9cpnB9jlvixw9gE=
Subject key identifier: 51:F0:73:F5:AD:9A:6E:D2:3C:92:4E:B6:3B:24:D4:E7:3E:5A:05:26
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0710
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/FFA70E30B66411EEAD17EA7CC4F9AE02.roa
Signing time: Wed 31 Jan 2024 00:12:38 +0000
ROA not before: Wed 31 Jan 2024 00:12:38 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 834
IP address blocks: 202.139.224.0/22 maxlen: 24
202.139.230.0/23 maxlen: 24
202.139.232.0/21 maxlen: 24
202.139.240.0/20 maxlen: 24
202.148.128.0/20 maxlen: 24
202.148.144.0/20 maxlen: 24
203.147.224.0/20 maxlen: 24
203.147.240.0/20 maxlen: 24
210.247.128.0/19 maxlen: 24
210.247.160.0/19 maxlen: 24
210.247.192.0/21 maxlen: 24
210.247.200.0/21 maxlen: 24
210.247.208.0/21 maxlen: 24
210.247.216.0/21 maxlen: 24
210.247.224.0/21 maxlen: 24
210.247.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 09:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Jan 31 00:12:38 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b99076-e418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:b1:b3:67:28:30:77:57:74:ba:58:37:92:
94:13:56:6a:88:83:42:f1:07:7f:8b:a6:2c:e9:ce:
44:5a:ac:20:82:12:23:3c:33:e0:b4:9a:ee:f1:01:
6b:24:12:d3:f5:e6:2b:d5:36:52:2a:a1:ac:d6:70:
bf:36:f3:cf:88:64:de:18:0c:8e:02:89:01:13:40:
45:90:95:44:23:95:21:ab:f9:88:25:81:f8:bc:96:
b4:43:5b:bc:b7:08:4b:c1:f4:84:b7:f3:75:22:74:
4d:1e:f8:dc:99:a2:5e:31:23:aa:f5:f7:48:9e:66:
af:e5:5a:d1:98:50:e2:ec:d4:ff:93:b2:38:5e:02:
cd:ec:f4:ae:0d:63:d9:f1:f7:1f:b5:25:13:51:41:
a6:13:9e:46:30:f7:4c:4d:97:cf:b4:ed:66:47:b1:
f7:12:1e:f5:d3:5f:20:90:94:45:f4:6a:27:79:4a:
ea:1c:cb:96:72:db:b0:14:2b:2c:ff:8b:fa:c6:77:
0e:b4:eb:c1:5d:c9:0c:79:da:59:1c:37:58:5b:00:
f0:b8:5a:34:63:0d:52:44:76:c7:d1:0c:fe:78:f7:
6b:90:b0:46:ab:de:38:da:57:52:63:fc:95:d2:40:
41:ea:a0:2b:60:99:33:ba:15:00:9f:5d:95:28:fd:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:73:F5:AD:9A:6E:D2:3C:92:4E:B6:3B:24:D4:E7:3E:5A:05:26
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/FFA70E30B66411EEAD17EA7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.224.0/22
202.139.230.0-202.139.255.255
202.148.128.0/19
203.147.224.0/19
210.247.128.0-210.247.239.255
Signature Algorithm: sha256WithRSAEncryption
01:fa:f6:df:59:74:d6:c4:44:92:dd:1b:01:6f:3b:7f:07:c2:
d6:e8:c0:88:19:92:ff:42:49:bd:0b:be:e1:51:8a:a2:16:36:
b4:d8:e3:d0:be:3b:ae:08:af:e8:cb:9c:41:91:96:4b:48:c2:
29:b3:a2:75:49:7f:67:96:5c:b8:a8:86:0e:46:3d:c1:4e:e7:
7b:9d:dc:e0:a0:3b:d4:fb:68:7c:1b:84:23:f4:6e:7d:a5:d2:
64:8f:86:8d:18:c0:82:3b:39:96:93:8e:b4:f5:db:db:90:fa:
4d:70:79:41:77:61:6a:97:49:52:7d:13:9b:11:6c:09:ad:1a:
13:8a:b7:ab:19:48:db:6e:58:a8:92:57:09:6f:a8:e4:ac:47:
e4:35:1c:0a:83:aa:22:bd:c0:03:bc:e9:5e:e9:0b:20:64:5c:
b5:f7:ac:b9:1b:42:4c:8a:9f:cc:18:f3:88:e3:97:db:79:95:
c8:a5:03:cb:b9:d7:29:4b:d9:50:34:0d:25:c4:73:2f:53:a0:
f5:71:81:b6:a7:fa:95:8e:7a:63:04:35:f8:ed:c2:ab:4e:04:
d1:47:72:37:90:5c:63:ed:6d:67:dd:fd:98:dc:ac:bc:d6:6b:
44:ca:b8:a9:88:8d:f4:15:20:6f:b4:7d:a4:33:c6:2f:81:5a:
27:9b:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org