Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/0FB62230CDE111EB83EABF19C4F9AE02.roa
File: 0FB62230CDE111EB83EABF19C4F9AE02.roa (raw, json)
Hash identifier: fuAXaUyAkIjo++ysxEntnxLC5SJN2d4mXnI3RTRk7iI=
Subject key identifier: F4:2D:82:50:C5:79:F9:58:25:29:AA:27:94:C4:CD:0E:BB:C2:0A:9D
Certificate issuer: /CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Certificate serial: 049D
Authority key identifier: 22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/0FB62230CDE111EB83EABF19C4F9AE02.roa
Signing time: Tue 07 Nov 2023 01:13:23 +0000
ROA not before: Tue 07 Nov 2023 01:13:23 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 4826
IP address blocks: 202.58.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 10:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1446/serialNumber=22E01D437E386D387929D72C512228D35011CF8C
Validity
Not Before: Nov 7 01:13:23 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65498f33-0eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:48:69:29:a4:6f:be:ac:8e:04:41:28:84:
ef:10:23:05:e5:b4:e4:03:eb:61:1f:a5:a6:84:f1:
e9:91:9d:09:2e:81:8e:fa:fb:5c:07:50:88:f3:89:
d5:d9:fa:2e:63:a3:de:74:9a:2d:d2:cc:1c:d1:4d:
4b:44:c5:c5:51:1d:5a:b7:cb:83:7a:78:cd:43:80:
47:85:b1:f7:a0:29:0d:3c:af:c5:c6:5d:e4:20:0b:
a0:66:6d:ac:16:f4:db:84:af:13:37:c7:d5:6f:dc:
27:c3:c4:17:d9:2c:82:56:d6:bd:8f:3a:de:3d:40:
5b:3a:96:1a:fc:c9:2f:8e:5d:30:79:37:94:fe:4b:
c4:15:53:c5:91:96:d0:7d:ec:9b:dc:aa:7a:cd:29:
a6:4a:bd:3d:c7:85:10:e7:e1:5f:2e:41:5d:c8:9d:
a1:dd:a1:f0:5e:84:2e:5e:33:d8:6f:60:5f:d6:48:
96:11:92:50:b4:60:cf:1e:c4:67:a2:86:38:a2:1f:
3c:b6:a1:2a:a7:6c:c3:b0:25:65:ef:a4:ef:9d:d3:
d4:75:df:41:9f:85:21:c1:7e:82:aa:06:fb:1f:52:
66:de:8b:18:50:55:86:84:ec:4e:0e:ad:3c:73:a8:
b5:ac:61:a8:2f:f1:8f:00:0e:25:95:e5:73:39:85:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:82:50:C5:79:F9:58:25:29:AA:27:94:C4:CD:0E:BB:C2:0A:9D
X509v3 Authority Key Identifier:
keyid:22:E0:1D:43:7E:38:6D:38:79:29:D7:2C:51:22:28:D3:50:11:CF:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/IuAdQ344bTh5KdcsUSIo01ARz4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IuAdQ344bTh5KdcsUSIo01ARz4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1446/76741B34CA1811EBA8A71E7AC4F9AE02/0FB62230CDE111EB83EABF19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1f:a6:e3:19:7d:a3:a2:f2:3a:f0:a2:cb:e8:88:52:ce:dd:
7b:59:a4:cb:ec:a2:22:36:c6:0e:44:1c:4c:8b:cc:dc:f0:90:
65:d9:0a:d6:5a:0d:f0:d0:cf:9a:fb:41:3d:84:69:44:ff:35:
b6:3d:c6:d4:e0:06:08:ac:b9:ad:ad:5f:28:c4:5f:28:64:bb:
d9:85:46:ca:4a:5a:8c:4b:fa:78:f7:5b:d5:c7:b9:44:5b:f0:
db:52:51:91:33:ec:52:4c:27:ed:1b:ef:e6:e4:b6:d6:5a:d5:
e5:c6:b2:3c:83:b9:bf:23:fe:d8:8f:94:53:b1:ad:77:b3:ba:
b6:da:76:ae:8b:85:22:7c:47:75:38:70:e7:9e:14:ed:34:bf:
37:e1:ab:27:97:f9:58:42:d4:a4:fa:2d:22:2d:c9:e2:b9:39:
e5:0a:1b:c6:43:2a:a1:55:58:f7:f8:12:ca:24:58:7e:ef:4e:
c2:e6:3c:dd:25:41:be:34:8c:0f:7e:49:ac:f0:d1:2e:f9:43:
38:2f:f7:3e:3b:b6:55:96:7f:f8:84:cc:3f:19:5a:ae:9e:1c:
20:55:87:d6:4b:39:9b:74:e3:e4:63:5f:11:8e:49:d7:36:8b:
12:32:9e:b8:f2:d3:d3:14:cd:51:0f:89:0a:07:9e:80:b1:e5:
94:8c:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 15:12:33 2024 by rpki-client on console-ams.rpki-client.org