Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/41CFFAF81E0111E9A590C837C4F9AE02.roa
File: 41CFFAF81E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: 8xySvvDwrTjnVNfqG8ETYQZJfizX+Cv2DzfWAGAxAz0=
Subject key identifier: EE:F2:76:54:C8:65:69:5D:33:52:3F:D9:D0:7C:32:90:22:15:B2:A7
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 36A5
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/41CFFAF81E0111E9A590C837C4F9AE02.roa
Signing time: Sat 08 Jul 2023 14:30:51 +0000
ROA not before: Sat 08 Jul 2023 14:30:51 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 23725
IP address blocks: 203.144.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 03:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13989 (0x36a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 8 14:30:51 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a9731b-f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:11:5f:84:2d:75:ac:b8:f8:fb:d6:b4:b0:
51:59:0d:a7:45:90:0e:be:46:f9:7c:ea:d7:08:f9:
c9:99:e1:4c:7f:3d:1d:14:80:65:91:a6:c7:96:25:
ef:46:67:b3:19:1d:3a:12:e3:0c:e3:31:21:be:e6:
5e:13:f1:7a:08:c0:2d:d9:75:f5:4b:5c:6d:4f:45:
a7:d7:d3:18:20:b0:0c:cc:da:8e:b5:02:e6:8a:ab:
ff:b0:d9:5d:ff:39:f8:f1:cf:8e:37:e2:6a:10:fe:
86:5d:c7:5b:ab:63:73:df:46:01:bd:70:59:9c:c5:
36:ef:02:20:8e:25:07:23:20:8f:31:34:5a:9b:82:
ab:c6:3b:31:a3:c2:67:72:3f:38:56:cc:22:47:e3:
08:a3:ec:90:97:69:54:c0:40:87:62:4f:29:3e:31:
6d:f8:79:7f:ef:61:69:1d:dc:77:df:da:c5:92:fc:
5e:9c:0a:19:9d:df:7c:ad:51:31:19:10:76:ca:f4:
a7:30:8e:73:86:6d:a9:f9:9c:15:cd:bd:ad:7c:46:
22:34:cd:d4:b3:f0:3b:7e:aa:5a:7c:78:b1:da:54:
00:06:81:8a:17:59:c8:6d:ea:86:d5:af:dc:db:fc:
6a:61:b8:51:70:14:69:df:84:de:de:c4:66:6a:d3:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:76:54:C8:65:69:5D:33:52:3F:D9:D0:7C:32:90:22:15:B2:A7
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/41CFFAF81E0111E9A590C837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.144.202.0/24
Signature Algorithm: sha256WithRSAEncryption
50:40:6d:90:fb:5d:a0:85:f7:8a:d5:66:54:80:7e:eb:b9:4c:
e8:26:6f:15:53:55:85:ee:ba:be:7d:32:fb:4d:ae:17:e0:35:
0b:40:b9:0a:54:00:0d:4d:7c:6b:13:95:7a:56:0d:63:3d:d3:
3c:86:6f:e5:e2:43:3e:f1:42:2a:df:4f:b2:27:b3:2e:53:27:
9d:e4:f4:33:d1:30:75:e8:42:9e:66:f4:3d:2c:66:77:46:46:
a1:d1:a3:94:c7:bc:54:eb:49:c9:9d:80:0e:be:8e:d2:76:5b:
97:8f:ed:f6:d6:53:f7:1d:81:c3:db:58:9a:0f:67:58:da:e1:
63:a9:df:22:4c:28:62:fb:5d:46:0e:40:c7:6f:81:59:ec:b2:
54:b2:b8:4c:b3:cc:15:91:a9:95:0e:95:cb:04:e2:a7:d8:e1:
24:d8:24:0e:04:90:9e:67:10:05:a5:25:67:f6:82:2c:d4:ce:
de:cc:54:be:97:9a:9c:fc:f5:4d:e2:92:e2:14:ae:a6:8b:63:
cc:2e:aa:bb:8b:ed:04:48:6e:e6:99:1a:42:6a:47:61:5e:51:
1a:a8:e6:16:12:a0:de:58:40:8d:57:c4:50:ff:75:54:eb:e5:
23:de:59:1a:bd:df:9e:51:11:ac:e4:c7:db:1d:19:08:f2:60:
b5:08:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 05:46:59 2024 by rpki-client on console-ams.rpki-client.org