Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/8B24B24886B511EFA9C61071C4F9AE02.roa
File: 8B24B24886B511EFA9C61071C4F9AE02.roa (raw, json)
Hash identifier: m596AJd75VK2hbrdDkVeNYoFTvHvTXcSPv/DzI7eGro=
Subject key identifier: 23:1A:70:26:2E:F8:7F:63:85:37:B5:17:95:CC:78:AA:69:AA:A1:27
Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial: 1A
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/8B24B24886B511EFA9C61071C4F9AE02.roa
Signing time: Thu 10 Oct 2024 03:12:55 +0000
ROA not before: Thu 10 Oct 2024 03:12:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4913
IP address blocks: 111.92.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 03:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913819A
Validity
Not Before: Oct 10 03:12:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67074637-3b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:38:ec:59:80:e8:97:07:f2:9d:21:79:5c:
4d:77:d7:c4:30:de:de:3d:9e:3d:73:74:c4:20:81:
bc:ad:fb:b7:e7:25:85:ba:33:5d:c2:67:9c:6d:59:
7d:72:1c:64:c6:72:c6:e5:f8:46:b9:1b:cc:8c:e3:
17:1f:b4:2a:d5:0e:29:67:8a:ac:ed:9b:ca:c8:95:
09:61:07:e2:4d:92:d2:fa:5a:c9:dc:14:7e:83:b1:
a6:31:5d:4e:9d:be:e6:bf:8f:e3:ac:5b:29:75:d7:
d9:85:ab:26:8f:bd:c0:a6:f4:51:cd:b4:32:50:7d:
c9:f8:ec:34:6e:ae:3c:2f:1d:8e:6f:af:31:c1:a8:
d2:83:45:dc:b2:10:e9:c1:c8:eb:e2:f9:43:f4:0e:
03:43:8f:56:20:ac:0b:c9:fa:de:62:8e:46:59:c5:
27:e8:ed:db:dc:0d:89:ae:46:78:70:0e:9a:88:a1:
80:1e:54:57:e6:74:83:01:b0:71:a9:eb:43:4f:3f:
a9:69:9f:b4:96:e9:4f:41:08:26:13:31:4e:cf:dc:
83:92:ad:22:cd:4c:f2:b3:63:8e:91:a0:91:36:a2:
ec:5d:9a:71:f8:67:7e:58:21:7b:0b:0f:af:cd:44:
9c:0a:1c:68:39:df:76:4b:05:84:ae:f3:9c:49:59:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:70:26:2E:F8:7F:63:85:37:B5:17:95:CC:78:AA:69:AA:A1:27
X509v3 Authority Key Identifier:
keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/8B24B24886B511EFA9C61071C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.92.178.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2f:16:ac:30:2f:c8:10:41:67:75:bc:37:14:e5:75:03:5b:
53:d8:33:12:15:07:e5:ad:d6:7b:c7:09:58:8f:cf:b8:b2:21:
77:13:f8:f3:60:ff:3d:bc:79:38:e6:84:3b:d7:33:b2:34:d2:
ad:76:bf:56:c3:72:da:f5:b4:c2:f5:9e:da:1c:23:00:f9:3e:
4a:d5:67:75:dd:e3:d9:aa:3b:22:a2:f5:3d:94:fd:1b:e3:d4:
ee:87:3e:72:e0:0e:18:07:cc:c2:5c:7d:6e:64:ac:ba:02:57:
9d:25:b5:d4:6d:eb:aa:db:7b:5a:28:33:dc:85:f6:03:70:60:
bc:76:0e:97:ac:1c:f3:f3:ee:81:bb:be:a5:58:a4:36:b0:99:
fc:0f:32:3f:b2:f6:ba:ed:aa:5c:49:e0:7c:29:cf:d9:64:39:
73:59:1b:73:90:9a:01:24:73:56:f6:68:d0:30:d9:29:78:78:
c9:73:74:51:bd:55:51:22:fd:5f:e6:7d:cb:d4:60:94:ab:e0:
f9:e7:8f:bb:0f:df:7d:00:72:13:d1:37:cb:cd:1b:5e:97:dd:
24:8f:58:f0:95:c3:12:57:e1:91:ec:d4:7b:6f:ed:c2:1a:8c:
0b:43:1d:f1:69:d1:72:45:8e:4e:0d:51:4f:92:39:da:80:66:
b3:b1:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:01 2025 by rpki-client