Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/DA724FD0306D11EEBCF3720EC4F9AE02.roa
File: DA724FD0306D11EEBCF3720EC4F9AE02.roa (raw, json)
Hash identifier: hWXGV2JILS45xY0WT7vZn3CDbOTwev/DPfkpwp5JjdE=
Subject key identifier: 81:83:40:55:D0:6A:20:C0:80:5F:C8:13:25:9E:3B:6F:A9:F6:A4:E7
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 207E
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/DA724FD0306D11EEBCF3720EC4F9AE02.roa
Signing time: Tue 01 Aug 2023 13:18:07 +0000
ROA not before: Tue 01 Aug 2023 13:18:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 180.210.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Oct 2023 07:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8318 (0x207e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Aug 1 13:18:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64c9060f-e316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:b4:41:93:19:46:81:a2:a3:35:0c:c4:5f:
cd:3f:9d:e8:85:bd:48:a5:fc:6b:5b:9a:24:83:df:
d3:fd:ae:c1:e3:0f:e2:fa:dc:53:59:dd:80:72:64:
32:77:98:e6:e2:22:01:3c:a8:1f:4d:d1:72:78:98:
ee:a0:d0:22:e4:15:42:38:60:22:4b:35:aa:b9:8b:
0c:c9:8d:7d:b5:04:06:78:aa:8e:c1:73:c9:5a:d6:
8e:11:77:7c:83:16:a8:71:48:f1:2e:3c:05:da:96:
c5:80:2e:e8:c9:ed:5f:08:2e:91:ca:eb:f6:9e:52:
1b:fb:e0:69:df:a9:5a:13:d1:84:67:ee:77:74:46:
05:06:97:0c:12:bb:38:b2:a4:05:00:9a:01:8b:4e:
fc:f1:52:4b:a2:7e:06:ea:d0:cd:98:a3:ac:0d:4c:
3e:26:64:9d:a3:f1:58:b1:65:2e:d2:8d:20:82:89:
3b:2d:61:7e:69:d2:cb:1c:28:76:73:fb:3d:be:d1:
2c:0f:2b:83:8a:65:1e:6c:19:85:16:2c:b9:ff:9b:
3a:08:52:64:7b:cd:ff:4c:3f:11:9f:a9:f8:57:67:
57:cb:1a:9e:ec:30:4d:e9:83:71:a7:3a:cb:f5:19:
b5:dc:77:b2:16:74:c3:c4:1d:8b:6d:0d:11:75:ff:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:40:55:D0:6A:20:C0:80:5F:C8:13:25:9E:3B:6F:A9:F6:A4:E7
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/DA724FD0306D11EEBCF3720EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
83:02:44:37:95:ad:7e:23:d5:f6:c0:b5:69:bf:50:3b:03:30:
23:f5:4d:1f:8b:cf:26:e5:34:8e:b7:03:4d:3a:66:e9:90:b6:
44:64:30:55:e0:ad:26:1c:04:44:1c:e5:7a:d6:a2:5d:92:ee:
c9:48:2e:c6:de:3a:68:dc:88:bd:eb:1c:3c:30:74:40:d8:49:
66:b3:c6:ae:0f:e2:ff:de:18:cd:11:49:15:01:3a:57:01:7f:
82:af:86:a3:f0:6f:24:b4:76:a1:7f:c6:a1:37:01:b7:54:12:
b3:d5:1e:1a:2f:aa:a9:4e:b5:b6:0f:1c:dc:d6:59:6b:09:b0:
57:5c:87:0d:57:ff:65:72:2f:11:9d:bc:f8:29:ed:9c:e3:7a:
73:5c:97:5a:ed:77:89:22:3f:ab:ef:14:3c:0a:a4:f4:05:23:
9c:90:87:3b:c6:2c:4f:39:67:0e:b1:4a:c0:5d:6f:66:01:66:
29:d3:1d:9b:6a:f9:f4:a4:78:27:e3:e9:ac:e4:86:5b:dd:b6:
02:3b:23:ad:92:1b:db:42:79:18:06:f1:e1:18:0b:f4:7a:ac:
46:1f:47:18:d9:ed:a4:ba:37:cf:2e:c8:95:b5:25:3f:34:72:
ec:79:b1:6d:a9:1b:ec:b5:4f:a2:c5:c4:8a:9e:f5:fd:de:0e:
11:f7:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org