Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/060F7718074A11EFA1093E85C4F9AE02.roa
File: 060F7718074A11EFA1093E85C4F9AE02.roa (raw, json)
Hash identifier: cb1EPhkHJOzS9xUOUx71+Yw90w5i0ub1Gp2GX0RjukY=
Subject key identifier: BB:F9:A4:1C:AB:71:A0:A4:6A:07:E2:53:32:3C:D1:D2:69:63:D1:25
Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial: 50
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/060F7718074A11EFA1093E85C4F9AE02.roa
Signing time: Tue 30 Apr 2024 23:33:19 +0000
ROA not before: Tue 30 Apr 2024 23:33:19 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150750
IP address blocks: 113.192.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 04:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Validity
Not Before: Apr 30 23:33:19 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66317fbe-6a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:33:a8:53:a5:6a:9d:c3:0c:59:a2:11:8b:
1a:e8:15:f9:9b:fe:08:10:27:3b:38:26:f4:6a:58:
e6:5a:05:d5:4f:fc:6f:18:61:12:d2:61:7d:aa:3a:
47:0b:f8:59:87:94:65:fc:cc:e9:da:73:93:7b:18:
a3:e3:08:6c:b0:95:27:8d:a7:41:b6:ad:0c:c7:1a:
3c:04:c7:e3:d1:1f:df:d6:51:64:08:ee:cf:ac:7f:
27:fe:28:99:df:11:16:fe:d3:d0:2a:81:75:cc:7c:
ee:4a:66:2f:0e:d9:ea:fc:84:50:de:dd:37:a2:5c:
18:af:df:2f:9d:38:ed:45:41:f8:d8:5e:7c:3c:65:
9a:f8:7e:74:ed:dc:db:52:25:a3:a2:bb:31:29:f8:
f8:fb:31:16:f0:b4:c8:95:38:a2:98:64:1c:04:f0:
1a:e0:98:d7:67:19:77:69:62:74:ad:87:80:f3:f5:
19:ca:af:ad:34:94:80:ea:63:82:ea:0e:0a:d8:47:
e1:3e:36:d8:bc:55:db:a5:8a:9b:84:cf:77:90:1b:
61:c0:50:ae:ef:be:17:1a:30:12:67:d9:49:48:6f:
1b:23:5b:c9:c9:e6:4c:32:07:ef:ce:74:5c:b4:7c:
48:3c:32:73:0f:1f:f4:8c:98:d5:9f:22:1e:f1:1d:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:A4:1C:AB:71:A0:A4:6A:07:E2:53:32:3C:D1:D2:69:63:D1:25
X509v3 Authority Key Identifier:
keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/060F7718074A11EFA1093E85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.192.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1a:c3:90:20:67:1c:d7:61:4a:02:2a:20:f3:d4:c5:b7:11:
ad:98:24:25:c0:94:c0:a8:be:88:29:cf:e5:ed:ce:df:ee:ae:
ea:80:b5:c3:f5:d1:d4:fd:da:71:9a:eb:ae:4a:2c:f1:25:de:
5f:7d:b6:8f:de:2f:68:5d:ef:5e:8a:56:1a:e1:60:6a:a3:52:
62:89:08:01:81:a6:d1:92:5d:64:2d:73:6f:f7:e6:25:2a:bc:
ea:77:e2:7a:7b:cb:aa:25:44:77:da:fb:f3:d4:23:a4:b9:2e:
f8:a3:76:8b:23:2a:e1:c8:41:78:30:97:18:3b:ee:79:38:5b:
cf:e9:5f:50:c9:71:e7:a5:a6:25:f8:6f:4a:60:6a:6e:14:49:
fd:81:e4:02:f9:e3:1d:4b:ff:d4:5f:cc:ca:92:23:be:15:14:
52:19:07:bd:10:25:f9:33:f0:30:4a:ee:9c:a8:3c:5a:47:28:
a3:80:e3:8e:a0:51:84:ff:46:96:15:1c:05:df:72:b6:71:c4:
f1:e9:63:b9:d3:ae:d9:e6:4b:e8:54:02:63:33:ec:62:2b:bd:
81:1b:1f:76:61:de:eb:48:c7:c9:7c:69:91:ed:e2:45:fe:aa:
ae:a8:6a:16:ad:ab:6d:3d:90:ec:71:b4:da:c8:e2:b1:2e:66:
fb:21:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 07:31:35 2024 by rpki-client on console-ams.rpki-client.org