Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/A9A8FE1A83BC11EEB6C07756C4F9AE02.roa
File: A9A8FE1A83BC11EEB6C07756C4F9AE02.roa (raw, json)
Hash identifier: ZmlvuqiuQGpwnuAUeqJbTPK/3SghVoMsywCuvsX+JN8=
Subject key identifier: 12:74:BC:2C:4A:27:AD:33:80:AE:F7:7A:84:D6:24:09:63:A3:3E:C7
Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial: 02
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/A9A8FE1A83BC11EEB6C07756C4F9AE02.roa
Signing time: Wed 15 Nov 2023 13:41:22 +0000
ROA not before: Wed 15 Nov 2023 13:41:22 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9743
IP address blocks: 202.47.187.0/24 maxlen: 24
2001:df3:25c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jun 2024 17:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Validity
Not Before: Nov 15 13:41:22 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6554ca82-d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:9f:4a:e0:b3:90:64:0d:97:e6:99:a7:96:
e7:47:d4:fc:82:7a:d2:cf:d7:ab:ab:ca:02:fd:1c:
01:98:c7:e6:be:86:c2:13:46:9f:8f:85:0e:16:d5:
7e:7f:53:b2:2b:a3:d1:3d:4e:3a:14:19:ff:84:c1:
1e:cb:0a:97:db:3c:7b:0b:b3:7c:71:6e:0e:82:8f:
45:ca:70:38:91:4d:90:6d:6e:62:6e:53:09:82:7f:
1e:66:32:c3:17:5b:b2:75:eb:4d:75:54:a4:8f:cd:
35:a1:12:66:10:ef:6f:e8:82:68:df:f8:72:0c:3c:
47:ac:3f:be:0d:f0:70:1d:7f:b8:54:47:df:ad:b7:
1a:be:3e:fa:24:1f:64:37:ed:15:a3:47:54:60:29:
b1:bf:ba:9e:02:b5:b4:42:74:75:2f:31:4e:d5:7d:
31:4e:0b:c2:09:6d:07:02:19:84:b3:b3:85:25:e3:
92:0e:bb:c2:d1:a5:72:84:31:fb:40:59:c1:3c:74:
44:54:8c:57:b1:2b:b9:68:0b:ec:d7:1a:f8:62:3d:
3f:13:84:60:03:73:56:13:26:09:5f:c6:27:82:82:
ce:8e:31:f5:20:9e:d6:29:2f:b4:07:43:f1:09:77:
07:19:8c:96:70:85:87:1a:4d:7d:f4:c7:67:63:ae:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:BC:2C:4A:27:AD:33:80:AE:F7:7A:84:D6:24:09:63:A3:3E:C7
X509v3 Authority Key Identifier:
keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/A9A8FE1A83BC11EEB6C07756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.187.0/24
IPv6:
2001:df3:25c0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:04:d4:13:36:48:20:0e:50:5d:f7:81:6f:c2:58:05:3a:64:
43:40:5b:5a:0e:73:b7:e1:90:01:69:d7:fb:19:37:1c:3c:e3:
01:32:70:f1:ca:07:d3:ad:94:80:3e:93:f7:17:b3:bb:39:7e:
69:29:52:30:c9:70:31:3d:9d:c4:69:36:e1:11:0b:2d:23:56:
2c:6d:0b:2f:19:53:e5:50:b1:f9:c3:ce:a9:ab:d1:ab:de:6e:
55:ca:ae:b4:72:03:f7:9b:ce:94:08:38:13:b6:47:80:6b:79:
d0:a1:f9:78:06:87:6f:1c:d9:33:0b:1d:73:c4:51:96:fe:36:
bd:b2:9e:f8:5c:86:5e:da:26:70:c5:88:a1:a8:44:5d:94:fb:
41:93:83:03:a4:1c:d9:22:48:2e:57:2d:09:c9:f6:d7:66:74:
d1:e3:32:e2:d3:40:f6:38:78:2e:15:a2:04:e0:bc:1e:ca:23:
d5:19:bd:3e:e4:81:96:39:e7:72:0b:47:75:28:6a:26:8d:ec:
e9:46:bc:00:61:5c:15:37:53:d9:43:0c:7a:60:d6:b0:79:60:
56:28:17:08:59:7b:59:74:07:83:f8:9e:10:fc:af:ed:ac:05:
e2:31:ff:30:c7:bd:56:48:c5:90:46:09:58:d2:02:8d:49:88:
e5:4e:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 23:17:49 2024 by rpki-client on console-ams.rpki-client.org