Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/EFF5B41AB48811EEA36F5D11C4F9AE02.roa
File: EFF5B41AB48811EEA36F5D11C4F9AE02.roa (raw, json)
Hash identifier: WTvYJnzJB7X3wWCjrykI3THZGuk+1h1NhL52ZLFoSYc=
Subject key identifier: 73:0C:A3:37:D6:01:3A:0C:3E:A7:02:7F:E8:C4:04:05:2B:19:A4:6F
Certificate issuer: /CN=A91FA6CA/serialNumber=3B1DB316C08D2936C74A356A277EEAC43CB7524C
Certificate serial: 02
Authority key identifier: 3B:1D:B3:16:C0:8D:29:36:C7:4A:35:6A:27:7E:EA:C4:3C:B7:52:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/EFF5B41AB48811EEA36F5D11C4F9AE02.roa
Signing time: Tue 16 Jan 2024 16:04:33 +0000
ROA not before: Tue 16 Jan 2024 16:04:33 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 151849
IP address blocks: 202.134.56.0/24 maxlen: 27
202.134.57.0/24 maxlen: 27
Validation: Failed, certificate revoked on Wed 14 Feb 2024 20:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6CA/serialNumber=3B1DB316C08D2936C74A356A277EEAC43CB7524C
Validity
Not Before: Jan 16 16:04:33 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65a6a911-c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:a0:33:16:af:ad:7b:6c:23:8e:a0:0a:1d:
98:b0:15:18:03:97:0f:05:34:62:fa:6f:2b:3e:19:
2a:ca:41:f3:62:c4:3b:c7:85:ac:43:e3:8a:7f:69:
a3:ee:41:cf:7d:fd:80:bd:5b:6c:2e:19:ab:38:d3:
0d:0a:fe:2d:5d:4c:c4:2f:cd:56:55:fd:1e:ef:89:
a5:b3:12:6b:d9:e6:41:8d:25:04:2b:84:b0:08:df:
cf:57:cf:3a:b1:db:8f:75:d7:4d:44:9c:21:e2:a2:
ca:0c:2b:4c:8d:d7:d2:98:52:00:e6:e2:f4:49:1d:
72:66:77:8f:3b:13:d5:6f:be:8a:14:f7:1d:90:c4:
5e:bc:13:bd:1f:23:f0:81:c9:ec:a4:09:9b:ef:12:
38:0c:6d:0c:fb:de:99:63:1e:cc:06:12:e6:24:65:
05:45:c0:a4:c3:c3:bf:ec:d3:40:43:76:2b:23:a4:
23:d9:f4:40:1e:71:db:57:ea:be:dc:5c:47:de:05:
55:24:81:4a:7e:0b:6d:5b:6c:2f:09:90:46:66:f5:
93:ca:0f:30:75:16:7c:1e:14:49:b7:03:08:2c:bd:
09:c5:3c:ce:1a:41:10:18:7a:99:d3:4b:f8:af:e3:
d3:a7:db:b5:ec:25:6d:ae:5d:64:bf:d4:80:28:60:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:A3:37:D6:01:3A:0C:3E:A7:02:7F:E8:C4:04:05:2B:19:A4:6F
X509v3 Authority Key Identifier:
keyid:3B:1D:B3:16:C0:8D:29:36:C7:4A:35:6A:27:7E:EA:C4:3C:B7:52:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ox2zFsCNKTbHSjVqJ37qxDy3Ukw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6CA/DE0A6D32B48711EE99DC0A13C4F9AE02/EFF5B41AB48811EEA36F5D11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.56.0/23
Signature Algorithm: sha256WithRSAEncryption
59:bb:75:b2:56:db:eb:f8:e2:e7:f8:01:7a:76:2d:ac:08:c7:
9b:75:30:77:5d:3f:d9:52:0e:e0:76:e2:dc:a8:fe:7b:c2:3d:
1b:be:ce:63:0b:02:df:23:0d:c7:eb:19:42:14:90:bd:57:73:
f1:cb:f6:79:d7:6f:43:ff:ac:05:a9:01:b8:bb:01:0b:ca:3c:
71:4d:d5:44:a6:a1:56:c5:5c:fb:b9:c9:42:31:5b:69:47:9a:
a0:52:2e:33:c8:ac:58:3b:ab:6e:13:7d:1d:68:e6:77:34:b3:
30:e7:96:d3:bc:51:44:1c:58:da:40:8f:d3:29:5c:f2:29:89:
fe:cc:7b:db:5a:73:0b:7d:a5:4c:16:3f:84:d2:38:ae:f4:3b:
24:10:8e:b7:6b:c4:93:42:89:be:cb:e1:92:6f:14:00:fb:ba:
b5:1f:34:de:a5:2c:7a:23:d4:6b:8d:f6:bd:5e:27:f1:0f:6e:
69:5f:74:cd:fa:6e:6a:72:02:3b:a4:22:53:8f:9e:16:a2:d6:
04:84:62:0c:76:f7:dd:1a:a9:8b:ef:c6:37:75:87:40:a0:13:
e0:5f:fe:e7:86:8f:67:ff:dc:30:f1:2b:00:d6:82:a4:04:84:
86:c5:b3:0a:3b:84:e3:57:ab:e5:a3:19:aa:33:55:b0:38:44:
47:5c:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 22:41:25 2024 by rpki-client on console-ams.rpki-client.org