Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/37BED9E838F011EF9699042CC4F9AE02.roa
File: 37BED9E838F011EF9699042CC4F9AE02.roa (raw, json)
Hash identifier: pUwKhR5uXG5wdTBm01GSb+WAiujhb6R8qh1hlrLzwzk=
Subject key identifier: C7:2E:66:7A:77:DE:F5:39:99:C0:ED:82:C8:31:28:5C:83:85:5E:A9
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3864
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/37BED9E838F011EF9699042CC4F9AE02.roa
Signing time: Wed 03 Jul 2024 03:56:25 +0000
ROA not before: Wed 03 Jul 2024 03:56:25 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 152915
IP address blocks: 61.91.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 04:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14436 (0x3864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 3 03:56:25 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6684cbe9-e530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:b9:31:e1:22:90:17:a3:64:e5:d8:b2:0b:
a4:b5:24:f4:7e:66:b5:cb:32:4b:a1:e4:0b:5d:89:
91:32:62:89:af:70:df:dc:d1:77:6c:a4:dd:b5:45:
5b:93:8f:75:c1:98:52:34:2a:27:1a:75:d9:38:8a:
04:a0:15:7e:d3:5d:3e:00:df:5a:0f:6f:79:5b:12:
a8:24:47:52:a9:85:b3:d1:c9:79:6b:1c:2c:0d:34:
24:73:d8:42:c2:fb:80:1b:45:2f:95:25:b5:ff:6a:
34:55:20:b5:37:e2:8a:90:f3:3b:dd:8b:72:9b:e9:
ed:a2:ab:01:4f:99:52:5f:e7:fd:1e:6a:f1:15:d5:
2c:22:f2:85:b9:75:ad:83:d2:90:84:e9:c5:be:82:
b1:23:84:51:06:6b:ba:ee:4a:3d:d6:3e:3a:ed:66:
89:da:ca:dc:da:b1:37:a5:be:20:bb:11:0b:2a:da:
0c:1b:af:f2:63:17:35:d2:de:63:07:0e:17:b0:e6:
fe:bd:2e:d7:da:84:d1:2a:c8:40:a8:7c:1b:d4:f8:
3d:55:f6:19:eb:d8:be:1c:6c:25:b5:97:84:8a:80:
f6:9f:5f:f4:5b:28:26:fd:ac:4b:d7:73:ff:14:56:
a3:50:38:ba:a0:ab:76:70:2f:2a:51:52:9a:c7:77:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:66:7A:77:DE:F5:39:99:C0:ED:82:C8:31:28:5C:83:85:5E:A9
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/37BED9E838F011EF9699042CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.91.255.0/24
Signature Algorithm: sha256WithRSAEncryption
01:30:25:64:4d:75:0f:53:d2:6b:eb:99:2d:06:11:74:ab:9d:
e7:00:07:0a:f4:9c:6d:49:18:79:91:aa:ae:e6:ca:31:b4:d3:
76:f9:a5:81:55:08:64:5a:ee:16:18:ca:73:30:43:fb:10:d6:
5f:76:7f:21:46:99:57:d8:8b:7d:85:94:ea:e7:54:f8:a9:07:
dc:fe:83:44:05:60:7f:60:a7:77:7b:86:ac:90:7e:e4:5b:2d:
d4:43:87:a2:46:97:2e:46:f8:3d:26:cd:4f:ff:e4:8c:cb:97:
a0:b1:90:50:a6:65:f3:3b:42:ed:c8:33:fb:82:17:2c:90:fa:
04:ac:43:f6:45:a3:84:e7:3b:fb:ec:18:13:5b:d7:82:8f:44:
f0:3a:1a:b1:61:38:07:d4:55:f3:fb:4c:90:de:f6:bf:29:52:
a4:9d:3a:5d:28:0c:de:8f:e2:49:b2:07:42:fb:13:85:00:a0:
98:63:0b:fb:40:c8:fb:8b:0c:46:d5:a6:47:6b:5f:85:17:8a:
01:3e:ff:22:23:d4:1f:7f:3e:15:ba:42:b0:44:ca:c1:ef:26:
d4:36:87:c5:c1:2b:45:3c:55:0b:94:2d:ff:1b:32:0d:11:d7:
a5:5f:9e:23:c2:dd:d9:50:38:38:ad:ca:e8:04:8e:05:22:74:
f7:ca:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:00:11 2024 by rpki-client on console-fra.rpki-client.org