Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/1DF58D2AF13D11EBA3C7A631C4F9AE02.roa
File: 1DF58D2AF13D11EBA3C7A631C4F9AE02.roa (raw, json)
Hash identifier: dhJeHbJTs5IWwlYikmSeAOE5+RSjKRRDktWN6BIXqzE=
Subject key identifier: CD:7B:40:B7:34:37:8E:F2:3C:B0:AC:C6:44:37:48:F4:28:9F:DD:32
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 33BF
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/1DF58D2AF13D11EBA3C7A631C4F9AE02.roa
Signing time: Thu 12 Oct 2023 15:00:47 +0000
ROA not before: Thu 12 Oct 2023 15:00:47 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 133066
IP address blocks: 61.5.192.0/24 maxlen: 24
119.59.81.0/24 maxlen: 24
119.59.83.0/24 maxlen: 24
119.59.84.0/24 maxlen: 24
119.59.85.0/24 maxlen: 24
119.59.86.0/24 maxlen: 24
121.100.51.0/24 maxlen: 24
121.100.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 09:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13247 (0x33bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Oct 12 15:00:47 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65280a1f-8cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:3a:84:f3:fc:2d:62:a5:8b:4c:00:9b:d0:
e4:d5:82:ba:bd:52:97:37:c0:56:84:fc:f7:af:b4:
5d:45:12:9f:66:d6:36:58:11:94:57:d5:02:b3:4a:
76:29:e5:9d:7f:17:3f:40:ed:15:4f:ac:e8:0a:08:
ca:3c:9a:49:9c:21:de:5f:21:59:2f:65:ba:67:e7:
30:89:85:9b:ad:42:64:d3:c8:b0:fe:c1:fd:49:66:
7b:28:a3:b1:a9:37:4d:cd:d4:6f:48:0e:78:10:da:
e2:01:a5:71:c4:f6:5d:32:28:9e:18:1b:63:29:90:
30:12:e6:f9:5b:e1:d1:b4:fd:ef:e4:c0:97:85:de:
6d:f8:67:42:58:78:1d:9d:10:d8:96:39:34:c8:a0:
d5:66:d3:b2:cd:60:d1:4d:af:f3:c5:4b:33:7c:3f:
e3:4e:d6:07:9c:48:50:f8:a6:2a:23:a2:f2:d6:59:
4f:92:db:49:66:b7:17:51:e5:b3:c9:fc:12:95:c0:
f6:9a:fc:53:70:9d:e3:f8:89:ca:6d:a2:d1:e6:28:
cb:7b:f5:5a:99:a6:ed:a9:96:0c:a9:52:af:ed:13:
89:c2:78:81:25:db:81:57:00:71:e2:52:20:00:fa:
1f:48:0e:78:e7:b5:38:8c:bf:a2:57:21:cc:c2:c8:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7B:40:B7:34:37:8E:F2:3C:B0:AC:C6:44:37:48:F4:28:9F:DD:32
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/1DF58D2AF13D11EBA3C7A631C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.5.192.0/24
119.59.81.0/24
119.59.83.0-119.59.86.255
121.100.51.0-121.100.52.255
Signature Algorithm: sha256WithRSAEncryption
3c:60:a7:b6:4e:a7:56:68:44:00:57:d1:81:96:a5:68:6d:c9:
e3:07:f7:bc:a3:05:7b:26:65:47:c1:e7:1a:ea:f6:c1:03:b5:
fb:f6:ca:7a:c8:f3:c9:61:41:0b:e6:4d:94:b8:9d:e4:da:74:
1f:cd:10:31:47:77:ce:1d:82:b1:cc:a2:10:80:f0:13:f0:42:
89:87:1e:ca:2b:b5:f9:f0:cb:70:68:36:de:9c:4b:61:0b:b1:
23:f4:e9:88:db:1c:1b:4c:e3:dc:8d:d7:00:29:1a:6a:17:00:
40:bc:18:77:22:9b:91:11:06:18:19:98:26:91:b1:10:c4:20:
e3:cc:d3:9f:3c:0b:f0:ef:a3:fb:ad:86:77:43:89:c6:2a:bd:
ee:35:6d:51:c6:2f:8e:d0:82:8f:81:f1:34:50:e1:f8:1d:c3:
3d:8d:e4:05:8d:b9:e5:ac:e3:2e:07:e4:65:1d:f0:de:ff:a6:
da:f3:28:ad:02:ef:3f:91:27:e8:99:15:cb:ab:4d:8b:91:e4:
38:d6:2e:ba:ee:d0:c0:0a:d7:19:24:2a:30:4e:4d:c1:90:28:
8f:8b:47:fe:d3:48:1a:01:d4:ef:21:fc:1b:e6:90:d6:c0:e6:
f8:85:b8:9d:7c:d4:83:01:e8:3f:6a:11:e4:90:6a:50:1e:30:
c2:de:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 12:02:13 2024 by rpki-client on console-ams.rpki-client.org