Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F9A3050E36DF11ECA0E1FC78C4F9AE02.roa
File: F9A3050E36DF11ECA0E1FC78C4F9AE02.roa (raw, json)
Hash identifier: r/f3vxk0iLmlb4X3xl0ouBwIRNR55APxlSx/MBDkWyQ=
Subject key identifier: 9D:15:2B:ED:B0:1A:0B:B2:65:72:3D:73:A2:CA:7E:76:B7:CF:CB:14
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3687
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F9A3050E36DF11ECA0E1FC78C4F9AE02.roa
Signing time: Sat 08 Jul 2023 14:30:26 +0000
ROA not before: Sat 08 Jul 2023 14:30:26 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 133764
IP address blocks: 171.102.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13959 (0x3687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 8 14:30:26 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a97302-7fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:9a:6e:39:54:ce:6b:60:33:0b:23:8b:0e:
46:b7:f8:00:ca:89:8b:d2:1d:74:0e:92:49:d9:f1:
65:ba:e3:24:25:58:e5:01:40:81:58:6f:25:f7:8a:
52:76:24:31:e0:3b:8c:6a:e7:56:b7:c7:4e:85:4b:
ec:e4:d2:1d:60:cf:a5:db:76:3a:1c:2e:8a:7f:10:
52:bd:c7:d5:06:22:66:39:76:7a:7b:e5:3f:d7:9d:
1d:f4:cc:30:61:4a:52:88:b5:a1:89:c4:9d:ff:76:
10:7b:65:12:99:90:2f:90:c7:8a:5f:30:62:08:71:
e9:30:d0:38:85:db:30:b8:12:45:a2:21:92:d2:ae:
a6:99:71:40:82:57:38:3b:93:20:6a:fc:b0:57:e7:
88:3d:87:f6:6a:14:c0:a1:f3:b8:5b:fb:24:a0:e4:
4c:d3:9d:97:9d:0c:9b:f4:00:1d:33:6d:ae:cb:3d:
c0:0d:39:96:66:aa:2f:86:38:07:08:c1:da:ca:fe:
62:1d:49:89:d9:60:46:79:9d:e1:ce:af:6d:78:ba:
1c:4f:5f:9b:e3:ab:d2:fe:49:ac:63:62:bb:0f:b1:
20:04:cf:2b:2a:1b:71:77:d2:70:88:a7:32:eb:a2:
5f:5f:29:63:17:d0:a9:c2:c3:10:3d:db:3d:9f:7f:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:15:2B:ED:B0:1A:0B:B2:65:72:3D:73:A2:CA:7E:76:B7:CF:CB:14
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F9A3050E36DF11ECA0E1FC78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
171.102.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bd:07:1e:05:85:81:66:c7:71:a4:73:87:b3:16:ae:eb:6b:
51:8f:98:c8:7d:21:6a:24:b8:3c:09:29:03:2a:e6:55:58:a2:
d5:1a:cc:3f:64:a9:5d:ea:55:b3:f3:ae:6a:b5:3f:e7:8d:56:
23:38:37:f8:9c:81:86:fb:34:29:48:79:69:a8:5a:e5:3f:88:
b7:0e:f0:ba:f2:14:33:d9:d7:64:07:46:ed:ba:47:70:b8:d7:
2e:b2:28:e9:90:80:a9:64:e5:aa:49:61:ca:ec:75:b2:ae:23:
11:5c:d0:18:1f:5c:70:bb:62:fa:ff:bd:5d:a3:9f:ae:4b:65:
26:ab:81:48:1a:da:4b:ff:d4:1a:d7:c9:76:2b:b2:3d:f6:48:
7e:44:d3:4b:36:f2:3f:23:5d:5c:20:04:58:8a:c0:da:3f:5f:
5f:9e:cf:3c:9e:e3:0f:fd:5a:df:67:1c:48:56:cf:2f:c0:95:
2c:0d:08:0b:1b:b2:4c:10:39:77:7b:76:9f:eb:76:e4:06:b2:
ed:16:80:6f:14:a8:36:fd:bf:02:89:13:ba:0d:6b:07:68:1f:
0f:11:a7:12:ee:91:54:4f:88:e9:b0:79:4a:e6:32:2c:f1:25:
73:21:a2:9b:82:8c:72:5a:a2:5e:40:54:76:85:97:59:88:2a:
4d:d6:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 05:46:59 2024 by rpki-client on console-ams.rpki-client.org