Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/0CB6E400F84311ED9A637A17C4F9AE02.roa
File: 0CB6E400F84311ED9A637A17C4F9AE02.roa (raw, json)
Hash identifier: c5Q9970tFzoXDZQwvmWeLndzEeewgxCn1KtkPQqVz6A=
Subject key identifier: AA:B0:A3:03:6D:C7:A4:C9:CD:A8:43:8D:CB:B3:98:9A:A1:83:64:E9
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 04BD
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/0CB6E400F84311ED9A637A17C4F9AE02.roa
Signing time: Fri 01 Mar 2024 06:57:21 +0000
ROA not before: Fri 01 Mar 2024 06:57:21 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 14618
IP address blocks: 1.44.96.0/24 maxlen: 24
203.17.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 00:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Mar 1 06:57:21 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65e17c51-5611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:ff:68:87:b0:12:71:ab:67:7b:1f:c5:3d:
27:40:b8:03:d8:f9:3d:f0:c3:45:66:42:70:2d:16:
39:e3:9b:b2:a5:0b:47:62:7b:de:13:ba:f8:03:a2:
55:2e:95:73:67:5e:4e:3e:6c:dd:17:a0:0e:dc:dc:
ac:b4:fb:b6:d3:c9:68:b7:f9:be:f5:7b:d7:87:fb:
1e:cd:18:30:83:1e:f4:86:4a:1e:a5:90:71:6a:a4:
e0:59:f4:82:8c:bd:a0:bd:47:60:e7:c5:6e:87:99:
34:43:91:c4:a7:dd:66:06:56:bb:26:25:ea:3d:7e:
12:99:3d:73:29:cc:2a:79:7a:1e:47:ac:34:bc:88:
bf:1f:5e:24:9d:78:ca:d4:4c:e6:72:03:20:bd:c3:
35:eb:1a:d8:9e:0f:9d:70:70:ce:bb:0e:bf:f8:b1:
1e:c6:c1:17:9d:f4:10:3d:72:69:09:5c:d8:bf:00:
99:db:f0:6e:78:0c:23:19:7d:21:c8:ad:00:8f:26:
08:4a:c4:3f:6f:4e:f0:a5:6c:c3:07:c1:04:55:c8:
d2:18:8b:ff:fa:fc:1e:c9:00:0f:70:4f:33:48:66:
79:37:3e:96:4f:3c:98:e9:9a:f7:4d:de:52:c7:bb:
a2:66:e0:e7:bb:8a:fc:65:e6:3e:d5:84:c4:b3:cc:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:A3:03:6D:C7:A4:C9:CD:A8:43:8D:CB:B3:98:9A:A1:83:64:E9
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/0CB6E400F84311ED9A637A17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.44.96.0/24
203.17.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:00:3d:02:fc:46:f4:dd:d5:26:1b:33:6e:af:d2:11:9e:55:
df:8d:cc:0b:7a:b3:bb:a2:32:81:a5:c8:68:dc:52:60:11:cb:
56:c5:ce:0f:bb:50:e7:b3:ed:b3:65:3a:20:9f:ef:1d:81:c0:
1a:f8:7d:b1:66:ef:1a:d1:7c:d5:58:22:1c:95:99:c1:06:e4:
2c:b0:f6:06:6f:b7:54:50:ae:e0:0c:d1:5e:13:80:7d:96:3d:
9c:b6:91:2a:37:e1:88:4c:5b:36:c3:d2:6e:c4:eb:ee:0f:eb:
10:a6:f3:22:c5:e3:03:a0:0f:b2:df:5c:d1:b9:85:10:e8:c2:
15:02:48:72:bc:88:57:31:cc:1f:b6:84:f8:f1:d7:62:d4:b1:
ab:be:fb:f9:52:67:3b:7c:32:9d:e6:91:28:35:e0:be:38:ba:
ce:dd:5a:7b:96:aa:5b:b5:e6:29:2e:a1:02:8e:02:41:4b:9e:
a7:1c:87:7b:4b:ce:e7:82:cd:2f:dd:29:73:07:b2:45:42:21:
d9:c5:fd:2b:87:dc:a5:be:c1:8e:8c:38:ba:bb:a5:37:b5:0d:
a9:c9:bc:2d:c1:df:0f:64:8a:bf:aa:14:d6:52:ac:c4:6d:e7:
2b:91:4b:a0:5c:18:06:d7:ec:df:41:09:ea:06:da:b4:8e:67:
8b:c8:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org