Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/4DFA6ED6F30211EEAB3C7785C4F9AE02.roa
File: 4DFA6ED6F30211EEAB3C7785C4F9AE02.roa (raw, json)
Hash identifier: GVlptDOSbQ9INtyG3feAvCyLqyx3ka+/HbIx2154iLc=
Subject key identifier: BE:4A:52:F8:A9:1B:17:99:F4:1E:8A:F9:B4:2D:D4:F5:93:FC:05:FE
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 02
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/4DFA6ED6F30211EEAB3C7785C4F9AE02.roa
Signing time: Fri 05 Apr 2024 04:09:32 +0000
ROA not before: Fri 05 Apr 2024 04:09:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147295
IP address blocks: 203.170.90.0/24 maxlen: 24
203.170.91.0/24 maxlen: 24
2001:df3:a2c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Apr 2024 03:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Apr 5 04:09:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660f797c-876c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:55:23:67:81:f3:58:da:8d:17:1e:77:53:
54:de:f3:ce:4c:bd:4f:ca:96:fb:99:8d:71:9d:18:
8a:96:8d:ac:a9:58:d9:03:3f:50:0f:9a:d9:45:93:
53:99:72:03:49:4c:12:90:ca:c2:4f:b4:4f:ea:aa:
0c:a4:c1:0e:4d:69:04:6b:86:9d:7f:68:56:1f:49:
5a:ee:d6:a1:51:33:9f:cb:71:ea:c2:d2:c0:c0:e7:
80:b8:29:6d:67:1c:d9:79:26:52:ce:c1:1f:32:b1:
d7:cd:66:fc:4a:86:15:8a:53:d9:be:1e:be:fc:62:
3c:de:0f:a2:d2:7a:86:a6:67:20:97:d1:69:8e:6a:
b2:97:18:2c:78:a4:a5:75:55:9d:a6:e3:c5:d6:97:
ae:31:24:8e:f6:6f:81:81:37:f2:88:20:b1:2b:cd:
99:2f:2f:1f:bf:83:3d:e3:03:fe:63:9d:25:79:15:
64:f5:7e:2a:f5:77:9b:01:05:b6:99:06:ca:a7:99:
78:ce:0a:ce:87:a8:38:bf:f3:ae:d8:4f:64:54:69:
55:3b:f9:04:f4:21:c3:64:60:bf:bc:a8:96:f4:1e:
ae:c1:1f:d9:3f:f7:37:36:34:0e:e0:1f:92:0d:32:
fb:a7:09:7f:13:b4:33:89:48:57:ce:c6:c3:c7:8a:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:52:F8:A9:1B:17:99:F4:1E:8A:F9:B4:2D:D4:F5:93:FC:05:FE
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/4DFA6ED6F30211EEAB3C7785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.170.90.0/23
IPv6:
2001:df3:a2c0::/48
Signature Algorithm: sha256WithRSAEncryption
4c:06:a0:3a:bc:5a:fc:d3:77:66:a8:df:ea:9c:58:f5:c1:d7:
c9:6f:f4:6b:58:8e:18:8d:d7:cc:e9:f6:81:3f:9f:f8:e1:a7:
6f:68:73:d2:df:bc:b6:52:3e:d5:49:8c:f4:5e:b1:e3:3d:47:
a3:b2:b3:dd:50:fc:e5:b5:9e:4d:31:55:ea:7d:df:60:8f:4a:
9e:36:ae:fb:02:1b:9f:c0:b0:b4:cb:ab:0d:78:ff:4d:8b:b1:
6d:da:8e:91:f2:a6:3f:a8:56:c7:97:b4:8e:32:0e:91:f3:b8:
f2:18:4e:ee:77:7b:14:2c:34:bf:30:9a:19:81:58:34:60:24:
54:a6:c7:a7:4f:26:a1:ec:d2:23:4e:bd:21:89:5e:84:20:7d:
92:1c:cc:4f:ab:dc:aa:87:0a:85:0d:82:56:c1:0c:b0:e8:78:
89:d2:b7:35:bc:43:5a:15:d6:51:9e:bb:b7:09:7d:e0:d1:85:
e5:fa:be:f2:61:23:11:c7:5a:9d:60:74:9b:74:c8:30:83:48:
c5:b9:0e:e8:5b:4f:56:17:f1:49:33:aa:bd:7b:48:2a:d0:f1:
8c:11:b0:d1:78:f6:37:cb:0e:4a:a9:ee:3a:62:e3:ca:13:b2:
8c:51:9b:38:e7:26:b1:49:b8:3e:7f:8c:f8:8f:4c:41:27:6a:
7d:5f:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org