Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/69A394D2A24311EA8AF0E273C4F9AE02.roa
File: 69A394D2A24311EA8AF0E273C4F9AE02.roa (raw, json)
Hash identifier: VLFdUY7+GBt5xnaN/unfWCmS8Hr0yiTOu/RB602xArg=
Subject key identifier: 77:61:72:B9:23:2C:5B:DA:91:BC:3C:6B:5B:9D:F5:D5:5C:C7:7C:0B
Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial: 1D4A
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/69A394D2A24311EA8AF0E273C4F9AE02.roa
Signing time: Tue 28 Nov 2023 16:43:21 +0000
ROA not before: Tue 28 Nov 2023 16:43:21 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 138311
IP address blocks: 202.179.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 05:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7498 (0x1d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Validity
Not Before: Nov 28 16:43:21 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656618a9-bb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:b0:b1:4c:a6:04:1f:67:88:72:a2:d4:c2:
01:f1:94:6b:49:40:6d:7a:0e:c6:14:0b:e1:ea:75:
9b:d4:82:33:68:2c:aa:cb:04:c4:f1:63:37:5b:52:
03:57:b2:e9:ff:87:99:83:d7:06:ad:e0:e0:4a:1b:
4e:61:4b:5a:8d:3d:8d:c3:1f:f1:54:34:6c:c1:9a:
a0:ae:36:32:62:47:16:e0:7e:7d:48:94:e1:e7:86:
73:8e:f2:1b:35:b2:91:90:97:a5:a4:86:f3:04:c7:
75:6b:fc:14:cc:78:a1:bb:6a:92:3e:8f:96:7a:ba:
46:c5:52:2e:af:5a:8b:f1:21:69:97:9f:80:b0:7d:
55:95:1d:1a:14:ab:08:fe:87:57:cb:e2:81:21:d4:
e0:7e:dd:7f:d1:4e:33:99:e0:07:10:a8:75:b7:36:
0b:04:58:5e:74:cd:ec:a7:c9:c6:a8:f3:6c:b9:63:
e4:ed:c0:63:ac:77:a5:5d:c3:6d:6e:c8:4e:74:82:
51:35:f5:a4:07:23:15:a5:9c:ca:8b:b1:da:7f:2d:
af:6d:57:c9:6e:04:68:a8:98:ef:82:b2:39:1a:8d:
47:44:a7:60:81:67:56:d3:41:c5:29:b4:fc:19:f8:
8e:57:09:6d:7b:4b:fd:91:8a:7f:b2:9e:a3:71:6a:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:61:72:B9:23:2C:5B:DA:91:BC:3C:6B:5B:9D:F5:D5:5C:C7:7C:0B
X509v3 Authority Key Identifier:
keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/69A394D2A24311EA8AF0E273C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.179.69.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4c:c8:ec:e5:12:55:56:fd:03:8a:22:87:23:9b:b5:bd:ac:
1f:2d:35:79:2b:03:88:dc:65:25:94:f3:c3:be:e1:3e:ae:d4:
7c:ce:1e:dd:dd:38:62:75:32:1d:44:f3:84:f0:45:f1:e7:10:
df:86:fe:c8:eb:57:07:b6:69:c2:81:cc:3a:03:53:d8:7d:25:
ce:fd:79:d0:6d:30:1b:09:d8:93:9b:a6:b8:a7:63:5d:8b:57:
d2:f4:31:17:fd:5e:02:21:59:6d:0e:c5:e0:72:b0:fb:1e:0d:
38:8c:2e:ea:84:b6:d6:66:bb:32:d6:e1:47:3d:b2:2b:cc:92:
44:46:0b:eb:ab:ff:23:52:9d:da:59:50:5a:49:dc:55:48:71:
1c:bd:2a:d7:60:d6:a6:9f:ff:b3:4d:67:f7:1a:5b:f6:09:c8:
e7:04:30:1c:3b:e7:91:99:a2:76:f7:d7:82:cb:5b:e8:a4:99:
4e:49:b1:f3:2e:0f:2d:67:58:b8:02:09:ee:f4:c5:20:a6:4d:
49:0f:4f:e4:00:0c:2d:90:8c:99:a0:85:7b:5a:08:db:f5:c0:
07:a0:1e:f9:d0:dc:aa:0e:b2:c0:3b:e0:9b:2e:bf:f0:8d:57:
63:11:ce:0f:fb:db:3c:42:28:2d:7f:e3:56:83:a6:28:2b:da:
41:9f:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 06:05:26 2024 by rpki-client on console-ams.rpki-client.org