Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/AA7667B21E0211E9862ECE3FC4F9AE02.roa
File: AA7667B21E0211E9862ECE3FC4F9AE02.roa (raw, json)
Hash identifier: hJCTopQtLS+SkcXsIPMbuJp3I+njT/xoz2fbjbq4oRc=
Subject key identifier: 17:B9:18:6A:DE:C8:7A:D2:11:82:68:2C:DE:2A:D0:12:33:6F:26:34
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 36C2
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/AA7667B21E0211E9862ECE3FC4F9AE02.roa
Signing time: Sat 08 Jul 2023 14:31:16 +0000
ROA not before: Sat 08 Jul 2023 14:31:16 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45860
IP address blocks: 171.102.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 02:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14018 (0x36c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 8 14:31:16 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a97334-939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:85:37:bd:32:c2:01:db:98:05:0c:0b:25:
39:eb:82:86:54:b8:19:2a:c2:2e:6c:ba:83:2b:d2:
74:87:c6:af:3f:e5:b9:1c:1e:85:29:b5:35:af:0f:
2e:75:c1:5f:78:f8:83:6d:f4:90:a0:01:0d:a4:33:
b9:b4:bb:5f:2c:c6:bd:4b:7c:48:39:27:48:ba:9d:
7a:28:d8:61:e0:47:0a:74:5a:75:05:19:e3:5a:53:
b3:f0:cd:77:f6:ac:57:12:d8:d3:99:fa:85:42:93:
48:e7:af:8f:13:b3:91:e7:76:10:e5:4a:60:81:6b:
47:c2:fb:bf:1d:0d:6b:d1:19:39:90:c2:b6:e6:63:
ab:e0:dd:79:57:e3:28:fd:80:c9:77:a8:08:0d:5e:
55:31:b3:c3:c9:0e:01:cd:9b:5a:cb:71:87:a7:aa:
19:c7:16:62:a0:76:77:b4:33:4b:d8:a3:be:89:91:
65:57:7d:5c:71:8c:b1:13:8d:51:36:08:d9:4b:6f:
b7:3c:25:4d:47:51:ed:b7:90:ca:af:62:7c:f0:3b:
f9:29:d3:52:d8:ed:52:e8:10:73:4a:b3:a5:d9:3c:
c4:48:b5:db:c7:a5:43:10:ec:6e:cc:97:ac:90:49:
4a:b6:4e:a9:e6:8d:cf:cd:ca:d4:4d:5e:c1:f3:09:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:18:6A:DE:C8:7A:D2:11:82:68:2C:DE:2A:D0:12:33:6F:26:34
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/AA7667B21E0211E9862ECE3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
171.102.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c2:05:d1:a9:b5:58:a6:b5:f7:5b:a1:1e:73:13:e9:2f:bb:
92:10:bb:12:b1:47:30:23:03:57:69:c6:87:2b:88:9c:96:d8:
42:b4:8b:e1:36:0e:63:4e:69:dc:83:21:ba:a5:d2:d1:ec:77:
c5:62:75:4c:0b:ae:fc:8a:32:87:65:a3:30:c4:6c:41:91:d9:
c6:88:7f:aa:fe:a9:64:c7:6a:1a:76:35:e7:b3:8d:04:18:46:
bc:95:53:7f:9e:be:23:f4:c8:dd:d5:87:4b:03:0e:a8:fe:73:
8f:df:85:0b:ef:b9:0f:d5:be:ef:51:53:53:3a:57:56:8f:d1:
da:09:ed:b4:6c:b3:32:d3:ba:12:14:09:34:7b:a8:3d:20:db:
e3:1a:ec:e3:9e:47:fb:43:1d:7b:1d:d6:d9:a8:fb:6b:27:67:
4e:16:7c:1c:f0:8c:6b:88:08:5e:d4:90:e3:07:f6:f9:e7:be:
2a:65:af:7f:e8:5e:2d:f0:72:18:fa:7f:c9:94:12:be:5d:ef:
9a:57:71:b0:31:18:ab:10:e5:e2:e2:03:da:38:89:39:e3:d7:
d8:88:6a:29:72:bf:06:47:c3:cb:c3:66:49:2e:47:a0:2f:0d:
05:9e:25:1b:cb:08:72:5e:c1:3f:6a:4d:99:96:74:cf:09:c6:
a1:00:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 05:46:59 2024 by rpki-client on console-ams.rpki-client.org