Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/57A0244A58CE11EE89D0D922C4F9AE02.roa
File: 57A0244A58CE11EE89D0D922C4F9AE02.roa (raw, json)
Hash identifier: RO7GszV0I1DbHkm9RwkfGuyvmzYGSHEQSwsFUgv6g5M=
Subject key identifier: 03:7F:33:46:78:21:BF:DF:1D:6F:06:51:8A:7B:64:82:6C:C8:68:24
Certificate issuer: /CN=A9168250/serialNumber=A45A035D655FB475A34F437F9C0AA53211EBB376
Certificate serial: 09C9
Authority key identifier: A4:5A:03:5D:65:5F:B4:75:A3:4F:43:7F:9C:0A:A5:32:11:EB:B3:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pFoDXWVftHWjT0N_nAqlMhHrs3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/57A0244A58CE11EE89D0D922C4F9AE02.roa
Signing time: Thu 21 Sep 2023 22:29:35 +0000
ROA not before: Thu 21 Sep 2023 22:29:35 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 24459
IP address blocks: 202.37.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 21:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2505 (0x9c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168250/serialNumber=A45A035D655FB475A34F437F9C0AA53211EBB376
Validity
Not Before: Sep 21 22:29:35 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=650cc3cf-a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:e1:d1:32:66:9d:b0:68:49:b2:aa:98:b6:
a2:fb:6b:fc:12:c7:04:e0:1d:cf:6e:d5:e0:b3:2e:
81:25:dc:ea:35:bd:45:8d:fd:b3:47:61:75:a0:64:
2a:af:f4:3f:77:2f:5d:70:5a:fb:16:be:bf:1a:7f:
54:0d:5f:cf:10:bf:35:41:ba:09:bb:fc:15:5d:e6:
8e:70:87:f2:a6:03:bc:1c:e4:a0:ee:75:b9:8c:2f:
58:77:e5:d8:80:31:aa:ac:c9:8c:5f:1f:83:29:a5:
63:91:5d:cd:fd:29:c4:4b:7d:9c:61:0e:6c:97:f4:
de:f0:e5:61:8e:57:3c:76:e9:7d:aa:01:c5:dd:c6:
b3:8c:57:1f:58:2d:6d:65:e2:84:ae:83:36:e6:a5:
8e:40:ac:8b:98:12:6b:97:f2:32:70:d4:2b:62:90:
04:68:f4:dc:ba:3b:b2:c1:90:15:10:2c:24:c9:54:
9a:32:2e:65:93:c6:f0:ed:b8:13:84:7b:3f:37:d4:
cc:ac:6b:5b:2b:32:d5:cb:a2:e3:52:aa:e8:32:2f:
d8:af:a9:b3:a5:f5:c4:42:17:b2:85:c7:c5:c6:d0:
1c:f7:0e:f7:ed:36:98:de:eb:25:33:bd:cc:74:b0:
7c:88:37:58:3f:7c:e1:bb:ee:d0:5e:5a:b1:08:6d:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:33:46:78:21:BF:DF:1D:6F:06:51:8A:7B:64:82:6C:C8:68:24
X509v3 Authority Key Identifier:
keyid:A4:5A:03:5D:65:5F:B4:75:A3:4F:43:7F:9C:0A:A5:32:11:EB:B3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/pFoDXWVftHWjT0N_nAqlMhHrs3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pFoDXWVftHWjT0N_nAqlMhHrs3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/57A0244A58CE11EE89D0D922C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:50:d6:32:5c:ac:9e:b1:77:27:76:70:b3:be:82:17:44:b0:
47:23:ed:5a:ae:e4:b7:b5:af:83:b7:e2:93:ef:65:6f:5c:26:
e3:73:9c:fa:fe:d9:ef:2c:f1:00:3e:ce:5e:dc:36:a0:02:7d:
b9:6a:69:fe:59:17:9b:12:7f:34:b0:4d:d6:f4:5f:b1:6f:98:
4c:d5:a8:2e:61:c2:6f:00:0d:eb:d8:b8:f2:3c:91:7c:5c:ca:
ba:58:2f:6a:c5:2e:3f:e5:48:db:82:4c:21:62:c0:be:e1:a4:
b8:79:b7:2c:88:56:b7:a6:94:c0:2e:9f:0e:39:7f:92:a2:6f:
bd:ae:49:0a:46:7e:da:a6:88:9e:96:55:50:6d:3b:0d:c8:c9:
1b:5b:99:ae:8d:87:23:81:d4:0d:56:3f:c8:91:4d:8d:c4:e4:
24:b1:1e:ee:bb:db:72:8b:cc:83:c4:e0:bb:42:0c:59:21:d0:
84:73:07:67:55:4c:22:c9:d8:94:45:c2:0c:73:23:af:93:3e:
1b:2d:de:68:ae:a6:de:c7:c6:f2:92:d9:9b:5a:5c:df:5a:65:
a6:c6:00:45:99:2d:99:4e:24:cd:d7:b2:6c:f1:97:cf:16:7e:
79:f3:a5:f3:b8:17:40:a7:5b:55:3e:f4:4c:4f:65:ba:a3:b0:
be:71:78:82
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 4 22:23:43 2024 by rpki-client on console-fra.rpki-client.org