Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/F08F3FB0DBBD11EA94610067C4F9AE02.roa
File: F08F3FB0DBBD11EA94610067C4F9AE02.roa (raw, json)
Hash identifier: 7ayU+ZEuPFmSbsPyWbFxV2oSswKw9dhxS0kYWhkQHe0=
Subject key identifier: 8E:B5:94:94:9F:5E:81:A4:8A:D9:03:A4:24:40:2D:1E:93:5C:E9:10
Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial: 1CED
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/F08F3FB0DBBD11EA94610067C4F9AE02.roa
Signing time: Mon 31 Jul 2023 16:33:21 +0000
ROA not before: Mon 31 Jul 2023 16:33:21 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 24225
IP address blocks: 113.208.64.0/24 maxlen: 24
113.208.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7405 (0x1ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Validity
Not Before: Jul 31 16:33:21 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c7e251-2010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:9f:33:00:d4:6c:50:72:d6:98:e1:4f:93:
12:c8:35:5e:90:69:66:d0:66:bd:57:86:04:3f:8b:
df:fc:ee:d2:68:8e:99:c8:4e:a0:1b:55:0d:e7:f3:
b5:10:09:74:eb:ca:f3:73:8b:51:58:96:89:2c:db:
fe:08:0e:f0:2e:f3:2a:ff:6a:2f:c6:9f:23:2b:92:
b3:c9:d8:8d:fa:da:02:83:0d:50:f3:34:0e:82:79:
29:76:d9:45:20:ac:2a:23:46:1f:80:4a:2a:65:13:
77:90:6f:98:01:9e:70:53:d3:a3:45:bd:e3:37:01:
db:e8:ef:4b:94:44:57:a2:64:08:fe:a1:43:74:8a:
3d:44:f8:d9:af:b8:fa:8a:2e:dc:19:40:ae:e8:2b:
48:aa:e2:54:f9:8d:18:6a:d9:49:69:8f:a4:0c:58:
d7:99:65:ba:a1:28:76:2d:49:0f:28:9b:d6:67:20:
45:6b:d3:b4:2e:da:e3:44:31:0e:e5:7f:ff:8d:5a:
71:4b:12:24:4a:e0:bf:a1:82:e0:85:78:6a:4d:fc:
4f:a0:a9:35:5e:89:a3:ac:73:44:89:24:06:ec:4c:
b8:ea:35:62:da:46:85:c1:a4:91:e6:d8:8e:32:a7:
3f:d3:ed:be:d5:b9:6a:81:e9:a9:83:48:e4:62:6b:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:94:94:9F:5E:81:A4:8A:D9:03:A4:24:40:2D:1E:93:5C:E9:10
X509v3 Authority Key Identifier:
keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/F08F3FB0DBBD11EA94610067C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.208.64.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0d:7a:d9:eb:09:18:3c:60:9d:c9:1f:f9:f2:c4:a6:22:59:
c1:01:c4:70:53:1f:c0:1d:df:b1:54:32:f4:98:ca:30:d7:eb:
af:f9:77:e9:ca:a1:d0:05:ed:dd:a0:ce:1b:f9:48:3e:52:22:
b9:f8:b3:7d:51:15:bf:ee:fb:dd:c8:d9:4b:25:1f:32:65:37:
0e:92:5f:1a:d5:80:61:87:3a:6d:0e:b6:e2:ac:16:61:e9:3a:
f3:f4:88:fc:f8:12:07:76:db:26:67:8f:f7:f9:42:54:fa:f0:
7b:39:ec:e1:5e:2e:77:68:eb:f6:8d:01:a2:ff:65:77:fe:73:
dd:28:ff:e4:30:a7:13:03:f7:24:48:07:d0:5d:1f:62:44:69:
b5:ec:62:50:3b:d8:a7:6f:49:13:dd:f1:d5:c0:12:44:59:1d:
56:e5:a0:f3:db:41:6d:88:72:9e:56:cb:f9:6b:75:49:0b:11:
19:0f:2c:9c:47:1d:96:96:72:cc:51:e4:09:ab:39:9c:4a:aa:
da:eb:e2:4a:38:7e:a8:32:7b:eb:a8:b5:c0:29:43:23:54:ca:
0f:e7:7b:48:61:68:2c:03:c8:a4:d8:d6:71:ce:b7:0c:8c:9a:
29:6c:bb:b3:50:cf:0b:d6:cd:90:1a:b9:bd:9d:47:4b:68:5c:
95:84:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 03:23:26 2024 by rpki-client on console-ams.rpki-client.org