Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/D799F8723A8411EF92E17985C4F9AE02.roa
File: D799F8723A8411EF92E17985C4F9AE02.roa (raw, json)
Hash identifier: 1iVdTL/mg5pcgq+J6UNN+tr2hwdEL8bnExi9w55yRFQ=
Subject key identifier: FD:36:58:0E:06:F1:A7:74:0E:E8:AE:F3:8C:DC:EE:C9:49:05:FB:F2
Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
Certificate serial: 20
Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/D799F8723A8411EF92E17985C4F9AE02.roa
Signing time: Thu 18 Jul 2024 03:34:57 +0000
ROA not before: Thu 18 Jul 2024 03:34:57 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 24007
IP address blocks: 180.188.204.0/22 maxlen: 22
180.188.205.0/24 maxlen: 24
180.188.206.0/24 maxlen: 24
180.188.207.0/24 maxlen: 24
202.12.24.0/24 maxlen: 24
203.3.130.0/24 maxlen: 24
203.4.232.0/24 maxlen: 24
203.4.233.0/24 maxlen: 24
203.4.235.0/24 maxlen: 24
203.4.236.0/23 maxlen: 24
203.4.238.0/24 maxlen: 24
203.4.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 03:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69
Validity
Not Before: Jul 18 03:34:57 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66988d61-8208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:fc:c9:9a:86:6e:39:19:b6:38:1a:fc:59:
00:bf:98:90:c4:8e:ba:ef:13:c7:e6:37:c1:d6:28:
a7:8e:10:61:ff:00:eb:fa:91:fe:79:a9:d4:6d:e9:
76:33:0c:36:be:81:d1:1d:da:45:2c:7e:cd:80:4a:
e2:39:c4:13:31:ae:d3:4d:f6:a1:e0:88:3c:6c:62:
c6:e4:91:12:40:77:43:26:da:f3:b2:4d:e2:f9:7f:
4f:93:b3:c2:aa:43:2c:58:25:5e:5c:a2:6c:1c:4b:
d1:f9:b0:03:34:9d:ac:c1:74:94:87:29:ce:99:34:
15:a4:3d:23:49:be:9c:7a:3f:8c:5b:b5:05:54:97:
88:0e:c2:a8:d2:03:86:a0:1c:91:7c:87:b2:66:f5:
64:16:ad:9c:f8:03:91:a6:0e:b9:51:2c:21:4f:f3:
72:a6:f8:60:8f:f9:6e:a2:ea:96:b6:56:96:0f:aa:
84:5d:15:f5:6e:7f:5a:27:55:18:44:41:47:c2:cc:
42:f3:de:43:56:33:b8:b6:ef:cf:2e:05:0d:6e:fc:
a8:1d:2b:df:e1:a9:dd:73:e9:a7:14:3a:c5:2e:4f:
32:fd:10:ab:d8:bf:14:11:e4:30:8e:d1:08:52:9d:
bf:c9:c0:70:b1:2a:d3:9c:df:0b:72:5c:7f:58:92:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:58:0E:06:F1:A7:74:0E:E8:AE:F3:8C:DC:EE:C9:49:05:FB:F2
X509v3 Authority Key Identifier:
keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/D799F8723A8411EF92E17985C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.188.204.0/22
202.12.24.0/24
203.3.130.0/24
203.4.232.0/23
203.4.235.0-203.4.239.255
Signature Algorithm: sha256WithRSAEncryption
3a:d9:5c:78:eb:c4:ae:23:58:33:07:ba:7a:3d:51:af:cc:35:
aa:a2:d7:f8:9f:d4:ab:0c:b5:9d:bd:cf:6d:37:4f:62:1d:38:
fd:33:79:e2:26:0f:96:87:71:dd:e1:a9:5e:5c:35:fd:3e:15:
6e:4d:3a:a5:76:8e:1b:e1:70:43:97:b0:c3:3d:55:ff:6e:ae:
72:75:7e:78:4b:9d:6c:95:1c:8f:8d:74:00:7f:a5:97:6b:f0:
f1:ae:09:46:b1:6b:c8:75:47:9f:48:27:4a:bc:ff:a6:06:f9:
76:3e:8e:1c:04:83:60:01:63:5f:12:d7:2c:c1:d0:e1:09:62:
c5:c2:b7:62:2d:cb:ff:18:80:aa:b1:44:60:b5:25:97:29:05:
77:87:7d:de:7d:0d:95:59:00:30:c8:fa:7d:33:94:b5:73:54:
72:6b:c0:26:69:c1:87:34:fc:ee:d5:84:f6:fe:5d:22:af:84:
36:1f:c0:9f:e1:5b:13:6f:5f:81:53:77:4d:97:0c:eb:9e:5d:
da:9e:35:e3:ae:e7:c3:a5:81:9c:72:bf:75:51:5f:e5:37:87:
56:06:6f:f7:4b:bc:08:d3:db:ab:32:af:a0:fa:b3:04:3d:5d:
5c:39:15:bb:41:d5:0e:f8:57:0e:bb:39:33:d2:77:d6:95:ae:
9f:ed:54:1b
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 18 05:56:55 2024 by rpki-client on console-fra.rpki-client.org