Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/5E5F280A4BFB11EF9D692745C4F9AE02.roa
File: 5E5F280A4BFB11EF9D692745C4F9AE02.roa (raw, json)
Hash identifier: +0c64pxJNLgmOufwLsRsbEaoLn5lv91q52SYJ3eD+h8=
Subject key identifier: F5:AD:33:63:A6:49:E6:CB:B2:B7:DC:4B:AE:76:FF:94:3F:88:62:8D
Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
Certificate serial: 34D5
Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/5E5F280A4BFB11EF9D692745C4F9AE02.roa
Signing time: Sat 27 Jul 2024 09:34:06 +0000
ROA not before: Sat 27 Jul 2024 09:34:06 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 4795
IP address blocks: 202.155.0.0/22 maxlen: 22
202.155.0.0/24 maxlen: 24
202.155.2.0/23 maxlen: 24
2001:e00::/31 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Jul 2024 03:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13525 (0x34d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
Validity
Not Before: Jul 27 09:34:06 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a4bf0e-a4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:c9:23:63:e4:bf:13:35:05:35:47:12:f3:
d3:5a:0b:50:77:eb:12:22:10:13:ef:c8:8d:cb:a4:
4a:7e:c5:26:81:ab:27:78:5e:c5:57:d4:98:36:4c:
8a:8e:d1:3f:da:b0:64:02:aa:9a:f0:a3:c7:d1:52:
2b:99:fc:08:8c:66:96:57:6d:74:57:44:db:2c:9e:
c2:cc:94:90:6d:51:a1:d9:84:3a:fb:40:94:72:98:
35:2b:b6:0f:0b:fd:11:23:d7:1a:ea:40:85:8c:6f:
26:d9:c9:eb:9f:90:d4:38:f4:ea:63:e5:02:38:ce:
f3:cb:9b:a2:e0:eb:46:83:e6:e9:8d:c8:3f:b7:d1:
00:6d:a7:1b:a6:24:8f:0c:6b:f8:67:13:50:e1:33:
1a:b0:d8:6b:bb:5d:e3:19:70:3b:1f:4e:67:e8:11:
72:b2:a1:02:45:74:cc:6b:97:a2:67:f0:00:f4:eb:
85:ed:9e:2f:cb:dc:84:3b:b1:64:d4:a5:90:13:c5:
5c:c7:b8:6d:a5:6d:30:92:51:c6:ba:ed:fd:91:f5:
bb:f7:d6:a3:93:43:26:3e:d5:85:61:1f:4b:a7:69:
ca:c3:ea:74:a5:e2:dc:66:ce:90:50:19:d7:62:7b:
bd:7a:10:bc:30:f6:23:70:65:1a:2a:96:fd:1f:76:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:33:63:A6:49:E6:CB:B2:B7:DC:4B:AE:76:FF:94:3F:88:62:8D
X509v3 Authority Key Identifier:
keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/5E5F280A4BFB11EF9D692745C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.0.0/22
IPv6:
2001:e00::/31
Signature Algorithm: sha256WithRSAEncryption
a9:00:8e:3d:71:3d:14:ba:80:02:b5:57:97:63:65:7d:d2:49:
c7:3e:58:e8:43:87:27:32:65:2d:d5:49:24:47:d1:2d:ef:f1:
36:4f:f9:5c:5b:83:c6:c6:56:49:19:54:85:7a:05:5a:92:db:
3a:57:b5:37:f4:95:14:a5:82:93:c3:31:ec:8c:16:ca:db:19:
d8:62:34:b2:79:f7:10:9a:91:f9:7b:9f:10:05:48:48:e3:13:
aa:2e:06:a1:ec:78:33:22:ad:31:08:3c:91:0e:7b:34:af:34:
1c:54:0a:86:16:fe:a7:13:de:31:f2:49:b0:03:8e:5a:c0:73:
4b:6b:ac:96:6b:7a:99:04:82:17:04:94:55:3d:46:9e:bb:0e:
3b:99:72:64:b8:df:59:40:59:3f:51:d5:cd:67:da:f2:27:d9:
04:96:cd:e9:7b:fb:b9:0f:8b:b9:d5:82:d9:44:d3:46:da:b1:
32:05:f3:97:fd:25:74:55:1f:26:da:ea:c5:38:9b:47:64:ac:
d2:ab:2f:c9:c2:74:cd:8b:82:50:73:d5:fd:e3:57:6b:c0:e4:
f8:de:d8:f5:3b:0b:85:07:52:cd:38:5c:4a:c7:d7:ee:1b:24:
49:95:f9:27:e6:77:3a:19:82:b2:20:fd:a4:8e:52:72:43:84:
e0:b1:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 05:18:11 2024 by rpki-client on console-fra.rpki-client.org