Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/BCB5596633E111E98918DB77C4F9AE02.roa
File: BCB5596633E111E98918DB77C4F9AE02.roa (raw, json)
Hash identifier: 7qTicsKWmzmRdE7pvLOdDlN/ooeEL6Y8hUOWZE84fgA=
Subject key identifier: 26:77:03:A8:87:E5:AF:B3:D8:EA:97:24:60:A3:70:84:E8:C3:3A:63
Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial: 33BC
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/BCB5596633E111E98918DB77C4F9AE02.roa
Signing time: Thu 22 Jun 2023 15:10:37 +0000
ROA not before: Thu 22 Jun 2023 15:10:37 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 24398
IP address blocks: 163.7.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13244 (0x33bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Validity
Not Before: Jun 22 15:10:37 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6494646d-fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:d7:cb:44:c6:57:10:c2:cb:59:b0:ce:c5:
d1:06:96:67:91:e9:d1:81:33:3f:70:b7:78:6e:f0:
7f:a8:4f:6e:df:ab:dd:59:f4:8c:7a:99:b5:69:ed:
c3:b7:a1:58:4b:8c:ea:b7:00:d0:3e:12:de:72:1f:
48:aa:44:cb:e1:31:6c:2f:ac:e7:4c:e6:46:64:0a:
06:28:13:3a:4c:5e:b6:cc:f7:34:3e:8f:cc:24:61:
7a:4d:fe:fa:b2:3e:70:a3:a1:6d:98:5e:ae:9d:c4:
00:18:11:56:a9:fe:ba:07:ee:a1:19:75:d8:f2:73:
2f:aa:af:70:13:8c:bb:76:1e:2d:72:c7:56:0d:8c:
49:30:38:15:57:e9:79:52:67:03:28:3b:40:5e:11:
5e:69:cf:67:ba:e4:62:8a:f9:cc:4c:37:7c:1e:4d:
41:c0:de:63:cb:74:7e:00:be:8e:cd:24:2e:d0:94:
94:28:68:c8:99:62:09:87:65:27:e1:5a:f0:3d:1b:
27:21:4f:93:cb:da:46:64:69:52:fe:28:e8:51:6e:
67:ce:01:a9:5d:9c:84:44:df:2c:74:18:d0:42:b1:
8b:20:09:27:fe:75:14:e5:53:b2:fa:b4:41:bf:4a:
7a:e5:1c:ae:f4:f3:8f:cd:42:f0:50:30:fd:ce:9b:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:03:A8:87:E5:AF:B3:D8:EA:97:24:60:A3:70:84:E8:C3:3A:63
X509v3 Authority Key Identifier:
keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/BCB5596633E111E98918DB77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.7.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ac:eb:19:05:fa:3d:69:aa:f4:0d:24:e2:ca:ec:17:d1:13:
b7:70:5a:0c:11:2c:75:de:7f:6d:d9:db:dd:cd:37:4b:d6:b6:
be:f5:12:68:5a:b8:19:70:af:90:27:41:76:ec:89:cc:5a:07:
3b:24:85:ee:7b:d6:f3:9a:5c:d4:fb:b5:6b:46:d9:0d:61:65:
fd:70:eb:25:42:2d:84:3c:a0:b3:40:36:7d:2f:95:f2:4f:75:
e0:f5:c2:b7:33:14:d9:80:04:63:23:98:fe:4d:43:c5:e1:1b:
05:44:89:5a:7e:3e:8b:c5:f8:55:de:ce:5f:73:f5:67:9f:18:
40:50:a6:f5:b5:01:3c:d6:df:b5:3b:07:6e:eb:56:c7:8f:dd:
f2:ba:05:19:12:e6:7f:99:07:c2:19:d8:52:af:ed:5a:ec:0b:
b0:6d:9b:ec:a5:4f:cf:f1:11:85:31:a2:c2:94:09:54:8c:b8:
15:9d:29:eb:9c:f2:98:31:13:69:d8:01:f7:27:13:23:25:79:
47:f8:e5:8a:d4:ae:7d:06:a8:a6:eb:02:31:d3:a1:5a:f7:db:
6b:d0:1e:a0:3a:1c:33:ad:a9:65:03:23:97:bc:af:93:a0:10:
6d:a5:92:31:4d:e3:25:b1:fe:6e:43:28:89:e5:38:58:23:d3:
a4:aa:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org