Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json)
Hash identifier: 5/XC2ut4Im2unyRnjytpx2JJE4JeQhWQMAYdvODs+CU=
Subject key identifier: A7:2C:94:AC:78:74:47:D2:4A:9D:39:BC:20:5A:CB:B3:30:52:26:CC
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 55FEEB63080D40A02FAF910A07F1DAC05A21D49D
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
Signing time: Fri 31 May 2024 00:00:01 +0000
ROA not before: Thu 30 May 2024 23:55:01 +0000
ROA not after: Fri 30 May 2025 00:00:01 +0000
asID: 24021
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 01 Jun 2024 12:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:fe:eb:63:08:0d:40:a0:2f:af:91:0a:07:f1:da:c0:5a:21:d4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: May 30 23:55:01 2024 GMT
Not After : May 30 00:00:01 2025 GMT
Subject: CN=A72C94AC787447D24A9D39BC205ACBB3305226CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:bc:78:8a:ab:99:77:91:1c:f3:e5:29:f4:
35:b1:b6:23:ef:ad:16:11:dd:90:63:d5:40:be:56:
43:f8:80:7b:2d:7c:7b:db:84:8c:fd:b0:fa:a7:98:
5c:1f:be:54:31:4b:90:b4:c2:2e:4c:1c:c2:c1:1e:
b6:a7:73:24:1a:90:b3:79:fd:7b:10:ec:bb:d7:7a:
57:24:af:32:dc:75:88:33:7e:19:4f:19:d9:2c:4e:
41:88:dd:bc:15:3f:02:f9:55:55:56:77:23:6c:c5:
b2:74:73:80:9a:17:a6:e7:3b:fe:01:c1:35:8d:9c:
31:cc:9f:bd:29:c9:84:5a:00:48:ad:19:3e:9d:98:
78:33:9d:6a:80:54:8f:bd:2f:ba:44:70:a5:20:58:
51:eb:53:74:9b:36:58:ce:71:00:b1:ec:55:9b:b4:
82:5b:98:b8:13:13:88:1b:74:5a:f6:28:6a:f4:5b:
de:f2:7a:0c:79:9e:52:a8:84:c8:25:c7:fb:7e:0d:
d3:ca:f1:30:09:52:a4:c1:6b:06:6e:e1:f2:23:0f:
f8:1e:7c:ad:3e:32:e3:9d:2a:da:f5:af:85:ac:fa:
74:57:ca:ec:86:7a:60:0d:79:04:08:2d:99:01:77:
cf:24:c5:4c:78:29:8d:a3:79:1f:17:4f:1c:31:f9:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:94:AC:78:74:47:D2:4A:9D:39:BC:20:5A:CB:B3:30:52:26:CC
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:1b:b3:ad:56:e8:57:a1:d5:0b:23:47:2f:57:f8:42:5d:38:
90:07:b9:01:a3:05:11:e9:93:25:a7:a0:a0:58:a1:ec:37:b2:
46:24:0d:bb:9c:b0:45:a5:e4:f3:56:58:82:00:5c:ec:cd:dd:
8e:c9:1f:40:8b:53:de:c6:bc:1c:0f:4c:5e:0a:15:62:25:fd:
33:f9:03:22:66:23:eb:e3:06:94:a5:4f:46:99:b2:1a:ec:df:
86:04:df:c4:08:1a:ff:cb:cd:1a:0e:f3:7f:2b:a2:25:51:be:
da:1a:01:c1:db:de:e9:ea:7f:3f:70:e4:58:1b:3c:cd:47:61:
c7:c0:ba:d4:cd:54:c1:b4:14:dc:78:bf:11:cd:5a:47:57:a2:
08:ba:e0:23:0e:99:ed:9f:16:14:54:7c:d1:5d:ae:d7:eb:66:
f0:d8:17:22:33:ba:8b:c2:51:ab:8e:3d:65:89:5b:cf:e6:f0:
32:2d:63:df:be:68:a2:c5:f6:53:e6:db:0d:35:c2:05:8a:35:
54:ed:51:18:16:e1:0f:9c:d3:6e:38:d1:19:8b:c3:f0:ba:a9:
2c:4a:02:e4:3d:94:f3:13:fe:b0:f4:6b:2c:68:a0:d0:83:78:
dd:fe:85:5d:9c:9a:30:28:65:ce:00:c6:f0:5c:cc:8d:a7:5c:
4d:27:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:05:33 2024 by rpki-client on console-ams.rpki-client.org