Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/233AA9182A6B11EFAAD1A542C4F9AE02.roa
File: 233AA9182A6B11EFAAD1A542C4F9AE02.roa (raw, json)
Hash identifier: ybhCyCu87gaAAAGIKIFx2TMnRWmne6yqqUmhpEtb0eQ=
Subject key identifier: 31:C9:5A:F4:92:CC:24:5D:93:90:05:36:45:82:87:7E:90:29:74:89
Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial: 73
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/233AA9182A6B11EFAAD1A542C4F9AE02.roa
Signing time: Sun 16 Jun 2024 16:53:47 +0000
ROA not before: Sun 16 Jun 2024 16:53:47 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 63801
IP address blocks: 202.47.187.0/24 maxlen: 24
2001:df3:25c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jun 2024 17:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Validity
Not Before: Jun 16 16:53:47 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=666f189a-4683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:7a:75:7d:29:77:af:61:d1:1e:c4:3d:a5:
72:06:a2:06:f8:63:c7:78:27:18:60:72:14:14:4d:
4f:7f:78:fb:a6:f1:eb:a7:b8:5c:58:fe:c9:0b:b4:
0b:0f:da:50:51:68:24:35:52:ce:3b:eb:38:ba:62:
de:10:f7:fe:f9:92:dc:c7:18:95:c2:34:a4:35:6a:
5a:2f:71:57:cc:b0:f3:78:e9:c8:0e:6b:d7:0b:91:
4f:ca:73:d3:19:6b:9a:2a:d9:a1:e4:ba:eb:9a:d0:
99:3a:57:34:2e:1a:e6:e9:1f:28:26:7c:7f:ff:b8:
b9:6b:ba:37:45:80:1d:47:f8:8d:2e:e1:fe:14:be:
ec:74:70:e0:d9:13:44:d9:c5:bc:81:00:a9:28:f8:
ae:34:92:26:ed:ed:eb:46:07:08:4f:1f:8d:d4:12:
ba:a9:47:74:00:9b:d1:43:4b:75:43:f4:bb:69:68:
fa:82:e1:09:5f:82:b2:c3:e7:cb:96:83:9d:d8:3d:
55:55:1e:e8:d2:c5:c1:59:0b:74:d5:25:df:f9:af:
5f:ee:e3:e0:1d:55:90:1d:b3:56:59:54:f9:1e:00:
d9:e0:46:a3:8d:98:0b:24:2d:d5:40:8b:e7:57:c1:
0a:28:b4:04:dc:d5:98:ca:1d:db:87:ae:d5:f9:0b:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:5A:F4:92:CC:24:5D:93:90:05:36:45:82:87:7E:90:29:74:89
X509v3 Authority Key Identifier:
keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/233AA9182A6B11EFAAD1A542C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.187.0/24
IPv6:
2001:df3:25c0::/48
Signature Algorithm: sha256WithRSAEncryption
0e:d2:7d:3d:b6:bc:4c:5b:49:78:0a:fd:6c:4a:ac:54:20:0e:
fb:ab:d2:11:60:66:e2:94:b6:d2:3b:df:de:a9:d7:23:58:a0:
fc:81:e0:d1:88:23:b7:48:ac:a7:09:ee:72:db:ee:79:9f:ec:
d0:c6:00:f6:2b:ea:aa:9b:d2:f0:94:c5:68:a2:e5:ed:7d:91:
5c:35:b0:75:d4:8d:fb:e2:92:5b:b3:13:fa:37:c5:5d:fb:32:
2a:f3:2c:92:fa:91:db:df:42:6d:58:82:dc:28:02:ef:4f:d9:
42:3a:47:7a:bb:18:47:64:5d:a4:e8:c4:97:3a:cb:d6:c6:35:
61:89:29:22:a9:e4:ef:e6:b2:7d:7f:07:e6:71:6e:ca:f3:ae:
c5:f7:ed:d2:0b:ba:c7:7b:d3:cd:64:fb:5c:aa:69:c9:9d:c4:
c4:f4:68:3f:90:a9:4b:8b:0b:9d:55:2f:b1:40:e8:79:7b:de:
4b:bd:ed:81:8f:d6:7d:72:72:77:ef:a2:7b:62:c2:ad:e5:8a:
be:99:f6:1b:04:7c:df:03:f6:31:f7:93:f5:33:d6:53:a6:79:
64:c7:af:78:cb:e4:52:4e:96:84:52:90:95:a3:e5:c0:20:f6:
c8:7e:61:4e:98:af:59:00:1c:ad:13:9f:c8:e3:59:fd:69:26:
e2:58:5e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 23:17:49 2024 by rpki-client on console-ams.rpki-client.org