Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8AD92305A5B11EBBBCAAF76C4F9AE02.roa
File: D8AD92305A5B11EBBBCAAF76C4F9AE02.roa (raw, json)
Hash identifier: 52Cz/CToCKsKg2k2O/jeq+8uFq5mohpHuFFhvf1XvH8=
Subject key identifier: D0:8A:23:98:FB:FF:10:71:FB:A0:38:B1:F0:EE:0D:A2:32:06:C0:B8
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 367C
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8AD92305A5B11EBBBCAAF76C4F9AE02.roa
Signing time: Sat 08 Jul 2023 14:30:17 +0000
ROA not before: Sat 08 Jul 2023 14:30:17 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 132479
IP address blocks: 171.102.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 08:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13948 (0x367c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 8 14:30:17 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a972f9-5450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:0e:b2:f2:71:f1:5c:9b:b6:c6:20:71:e5:
8f:0b:c5:ad:ca:84:3c:84:65:f5:b4:f9:63:2c:85:
76:d2:fa:33:60:b9:e9:7d:39:e0:37:12:89:eb:3c:
dd:fa:41:89:e5:c2:93:11:21:c4:93:87:98:fc:27:
ac:d7:e5:fd:07:ad:4c:c7:f0:c7:37:74:5c:82:69:
ac:4b:92:f8:72:d7:e7:af:aa:ae:dd:56:5f:49:23:
c7:9b:b1:d6:64:51:b0:57:da:71:20:02:c1:22:52:
4d:5d:9f:d0:a3:5f:2e:d6:3d:0c:d5:29:82:88:a9:
ef:1b:23:76:f2:b4:31:98:48:12:ca:03:23:0f:ce:
5e:24:64:ce:1c:74:c4:ec:34:1d:e9:71:8d:dd:df:
90:d5:f8:97:9e:14:62:4e:83:e4:44:73:7d:37:9a:
9d:18:e2:59:14:da:d2:d9:1f:d2:8a:9f:14:8c:ec:
55:2d:43:72:5b:55:c2:6c:de:00:3c:6a:13:ce:4b:
83:88:88:f0:96:4e:dc:a6:da:2d:c9:d9:ff:a0:4c:
41:f6:90:67:94:db:3f:b8:4b:68:3b:6c:b9:80:c3:
c0:60:3a:99:70:7b:04:c5:f1:a9:19:40:16:56:d8:
64:9a:6f:6d:80:a9:51:9e:d2:b3:dd:85:f9:68:1f:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8A:23:98:FB:FF:10:71:FB:A0:38:B1:F0:EE:0D:A2:32:06:C0:B8
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8AD92305A5B11EBBBCAAF76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
171.102.205.0/24
Signature Algorithm: sha256WithRSAEncryption
19:71:46:0f:2c:c2:e6:ef:3e:44:87:7a:28:cb:f1:c3:1a:fc:
07:9a:31:2b:e6:49:93:bd:fc:b8:da:d1:c2:c7:9a:b8:7d:59:
0b:f6:62:f6:db:d5:10:d3:20:63:ff:e1:98:42:6f:9b:aa:2b:
57:87:3e:62:3a:83:e5:fa:fd:c8:87:ef:b8:9a:e2:0f:d6:1a:
67:cd:30:9b:d4:a0:13:82:de:62:58:01:1b:9c:c1:11:76:78:
93:2c:ce:84:fa:82:c3:c1:ed:8e:6e:f8:ba:85:75:55:b2:ff:
70:09:62:08:25:ba:ad:e5:07:eb:60:5b:46:54:00:56:eb:bc:
96:d3:0c:6d:25:15:c2:c8:a9:04:98:8a:53:e4:04:2c:0a:85:
62:ca:55:db:f7:18:f0:8f:c0:ce:c2:de:22:bf:c5:eb:cd:ce:
1f:2e:63:69:fc:83:46:5d:58:78:d1:ad:c1:c3:e4:b5:20:14:
a5:de:e9:da:df:02:b6:4c:e3:4c:3a:d5:6d:a5:ed:6c:b6:9a:
9b:50:5b:95:62:bd:1d:d0:1e:b6:04:d5:09:57:3e:8a:6f:0f:
20:a6:af:a9:a7:5a:49:ac:bb:d1:ea:e9:aa:8f:f6:62:4f:8f:
bb:90:df:4a:4f:65:6d:bd:71:f9:e3:5a:5f:c8:df:ad:51:e5:
4b:b0:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org