Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0D2D85BEA44E11EC8C8DF840C4F9AE02.roa
File: 0D2D85BEA44E11EC8C8DF840C4F9AE02.roa (raw, json)
Hash identifier: jej7VZzpFKX0NjoIUijPRC5ElYIi0/deRQsNG8/8bfQ=
Subject key identifier: 19:DA:18:92:72:D7:BC:77:0C:52:75:1C:AE:D0:A8:39:C5:40:0F:BB
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 0280
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0D2D85BEA44E11EC8C8DF840C4F9AE02.roa
Signing time: Wed 19 Apr 2023 04:24:11 +0000
ROA not before: Wed 19 Apr 2023 04:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134134
IP address blocks: 116.204.242.0/24 maxlen: 24
116.204.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 01:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Apr 19 04:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643f6cea-0ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:97:0e:92:22:90:26:a6:3f:3a:33:c7:d2:
ea:0f:ae:28:3d:92:2d:b5:39:d2:4f:5b:80:b4:97:
5e:72:45:79:b7:68:dc:62:8f:a9:e6:a4:44:74:97:
62:fb:d9:5a:af:4b:9a:25:40:78:b3:fb:6c:bd:0b:
00:89:76:77:c5:c6:49:09:bd:fb:72:71:7d:28:37:
aa:fd:41:24:be:06:a6:91:71:d4:f7:e8:8a:ec:48:
40:47:76:d9:36:da:01:2b:d3:0b:f9:e7:8f:65:00:
28:57:41:3c:79:fd:05:03:1b:2b:18:ad:70:72:ca:
a0:e4:d2:5f:93:9e:f9:cf:ff:d8:42:59:f2:b8:32:
a7:50:4e:01:7d:19:c0:47:e6:01:63:13:9d:92:54:
11:c4:7b:07:c6:6d:09:34:94:26:f0:21:35:29:c2:
58:a7:3d:f5:b4:c8:a9:c4:74:56:b2:e1:54:fc:c8:
24:4f:69:e0:b6:fc:43:17:87:94:dc:64:28:7f:77:
e4:55:56:7d:b3:30:04:e0:36:e9:9c:5d:e1:52:ca:
d0:da:3a:95:a6:c0:98:77:99:ce:20:2b:9a:59:77:
8c:20:5b:48:ba:57:4f:de:d3:cc:66:68:e7:7d:f3:
72:49:42:c3:e7:85:f6:5b:56:7d:50:f3:bd:b2:47:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:18:92:72:D7:BC:77:0C:52:75:1C:AE:D0:A8:39:C5:40:0F:BB
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0D2D85BEA44E11EC8C8DF840C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.242.0/23
Signature Algorithm: sha256WithRSAEncryption
97:3d:7f:1d:2a:fd:c3:73:64:d0:52:d7:82:2a:9a:30:a8:c2:
5f:4d:3a:95:63:01:77:f6:ba:5a:75:1b:cb:20:f2:4e:70:de:
56:6c:16:16:c5:92:26:c7:19:eb:44:ec:b0:21:3b:30:79:2c:
ba:02:13:d1:5a:0d:da:b2:3e:d4:41:2d:10:21:3f:df:85:0b:
4a:59:76:f5:76:55:35:a5:b0:ec:69:43:d5:f9:3b:18:fa:06:
21:df:43:a7:96:6e:c5:7e:2d:00:77:04:22:2c:e2:b7:35:03:
f2:93:a8:6b:c7:bd:dd:3a:0d:67:d0:19:5c:f5:2f:ec:80:6f:
d4:21:c8:05:a0:d2:5a:1c:ec:6c:a1:17:a0:ab:96:ce:de:c0:
40:13:16:12:fd:4d:a2:ee:e6:24:bb:7f:c7:cc:43:0d:7c:3d:
ae:6f:2f:f6:b0:ea:df:76:44:b9:44:f5:8c:c8:f4:9e:9f:32:
eb:44:4b:14:be:9b:bb:73:7b:f9:d1:69:7c:02:f0:b1:b8:77:
c6:4d:ee:ce:5a:c7:95:bb:0a:88:c3:32:9b:20:41:25:e2:b7:
87:79:98:d6:23:81:6c:9f:11:5e:f0:f2:b3:1b:63:f0:8f:7c:
ef:33:95:ec:ea:cf:bd:9f:b6:fc:24:99:bd:68:c8:9d:12:3d:
0b:3e:ac:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org