Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/612F9ED857C611ECA26CD331C4F9AE02.roa
File: 612F9ED857C611ECA26CD331C4F9AE02.roa (raw, json)
Hash identifier: Qrgn8nfvxm5y3Fe4sK3znKxXUeC5Mt52f+P33+DNrt4=
Subject key identifier: D1:A9:35:5A:85:61:D8:12:A3:ED:9D:1C:BA:8F:2C:C0:39:56:BC:2C
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 3155
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/612F9ED857C611ECA26CD331C4F9AE02.roa
Signing time: Wed 08 Dec 2021 01:30:09 +0000
ROA not before: Wed 08 Dec 2021 01:30:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 131107
IP address blocks: 202.125.96.0/24 maxlen: 24
2001:df2:ee00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Feb 2022 01:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12629 (0x3155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Dec 8 01:30:09 2021 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=61b00aa1-8421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:4b:79:fa:c0:43:e0:13:3f:88:4a:3b:d8:
a5:33:35:43:64:b9:4f:00:20:69:21:86:5c:bb:b2:
e4:ac:41:ca:1b:62:20:59:75:e4:8d:c1:03:eb:06:
48:8c:e1:7a:0e:07:02:81:a0:66:fd:02:d5:85:26:
16:57:85:3a:cb:ce:dd:60:a3:e0:4a:12:ef:26:4e:
e1:a0:c5:02:3d:e0:a1:b4:47:0b:47:13:67:ce:46:
65:5d:e9:92:9e:46:a3:4e:ba:87:1f:f1:db:fc:3c:
35:67:ad:6c:54:47:4c:97:ff:ad:8a:ad:ba:e9:c3:
32:98:c2:7a:d6:60:e3:2b:7b:35:b8:7b:c0:79:ca:
85:22:33:51:4e:d3:f1:ca:d3:a5:f4:db:22:bf:88:
07:d9:4d:2b:0d:c4:67:88:51:38:7e:fc:d1:60:d2:
47:2e:3c:f2:c6:30:d7:f2:9f:4b:9b:2d:2d:e3:49:
6e:3e:e7:90:aa:61:d8:77:3a:1b:15:ef:05:de:57:
91:cc:81:63:7f:62:16:3c:ee:1d:23:37:31:be:ca:
8f:8b:27:b2:64:1e:0e:62:07:30:1d:ab:e9:c7:b2:
26:36:4d:23:53:74:56:4f:a6:34:c5:62:5f:1a:b3:
70:c0:79:a8:25:db:cf:b7:02:26:f1:95:65:28:d6:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:35:5A:85:61:D8:12:A3:ED:9D:1C:BA:8F:2C:C0:39:56:BC:2C
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/612F9ED857C611ECA26CD331C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.125.96.0/24
IPv6:
2001:df2:ee00::/48
Signature Algorithm: sha256WithRSAEncryption
37:b7:64:32:20:ae:a9:79:e6:d8:15:40:91:87:a3:14:bf:11:
ff:4d:3d:74:69:a4:9b:9b:a1:c2:ed:8b:7d:1f:57:a9:eb:f8:
b1:72:45:cb:0e:b0:ac:38:71:ef:8f:a1:29:3b:df:1e:14:95:
92:f1:62:07:c3:11:56:83:39:90:4e:81:8d:51:10:7e:6d:c7:
31:61:84:66:93:26:51:c8:42:b9:c8:31:ee:a4:96:cb:62:36:
1e:bd:27:19:4c:e8:4e:a5:f4:bc:aa:97:43:af:d4:88:75:0b:
08:ec:03:a4:5a:88:63:66:c2:43:8c:ef:f6:d2:a4:ad:32:25:
4e:7d:55:76:af:66:9c:d6:64:9d:39:9d:8d:80:08:ad:2c:5a:
b0:ec:cb:7a:19:6b:fa:1a:e7:ea:5b:d0:9a:9c:a3:0b:3f:19:
2e:15:bb:c2:d8:ef:78:00:d9:37:a4:a6:13:e1:8c:eb:a4:17:
54:61:82:55:43:de:dd:1e:a1:24:ca:55:ab:14:3c:07:de:be:
19:38:be:34:c3:dc:a7:ac:6d:28:6b:90:e8:8a:cf:e9:ed:ad:
a5:04:0a:87:b3:03:76:f9:7f:7f:01:38:20:44:63:9c:f2:fc:
d5:75:7b:93:8b:1b:98:72:20:ab:29:ae:8f:a3:8e:56:ae:89:
a6:85:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org