Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/777E73D8D61A11EEA6BD5228C4F9AE02.roa
File: 777E73D8D61A11EEA6BD5228C4F9AE02.roa (raw, json)
Hash identifier: pX44fYQ8qUyHZcoHeL9VVe57FRbOGZPUb79a4pWXuBg=
Subject key identifier: D7:12:B2:9C:8B:94:93:F0:88:05:B7:99:73:81:D3:76:A5:E6:4F:73
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3526
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/777E73D8D61A11EEA6BD5228C4F9AE02.roa
Signing time: Wed 28 Feb 2024 09:19:26 +0000
ROA not before: Wed 28 Feb 2024 09:19:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
111.88.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 11:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13606 (0x3526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Feb 28 09:19:26 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65defa9e-8503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:a6:de:82:77:07:bd:85:68:b6:e9:67:f3:
45:9e:2c:84:16:9f:7b:85:db:8d:02:cb:ba:1a:27:
6b:f0:f8:2d:ee:e4:2e:0e:47:d1:21:27:ef:a6:94:
9c:af:00:82:9e:16:f8:eb:9f:6f:8a:dc:7e:09:5b:
3b:9b:c7:d7:f8:3b:b0:12:f2:86:75:4d:ae:d1:5e:
56:60:d9:a1:e3:5d:21:c9:2b:21:9b:0a:f0:aa:53:
73:fd:a0:ef:b6:de:27:28:de:5f:56:22:1c:5c:59:
7d:1e:e1:33:d6:44:56:93:ae:eb:57:c7:46:f1:97:
a1:83:c8:e3:f0:fe:bc:75:5c:9d:c1:aa:d1:a5:b4:
df:1d:01:53:f9:fb:7c:a0:22:55:21:05:3b:57:2d:
3f:bb:2c:c6:a5:f5:15:9c:cb:57:62:70:79:0b:f7:
23:b1:f8:20:1f:17:81:93:63:d5:ab:62:a7:bf:e9:
8d:ba:b7:d6:68:d8:6d:4e:30:2d:48:ba:ff:9b:8f:
8f:de:32:9d:42:81:07:0f:e6:29:7a:c9:7a:71:0d:
f4:0f:25:ff:c4:1c:25:22:50:1c:62:93:f3:0d:de:
55:a2:ac:2b:f6:58:11:7a:2e:eb:ef:d6:8b:47:cd:
93:47:3a:ab:7a:0d:71:6d:f2:f5:57:cd:b9:bc:ae:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:B2:9C:8B:94:93:F0:88:05:B7:99:73:81:D3:76:A5:E6:4F:73
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/777E73D8D61A11EEA6BD5228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.138.0/23
111.88.166.0-111.88.171.255
Signature Algorithm: sha256WithRSAEncryption
ad:0d:41:b6:3a:c8:65:03:25:8b:ea:4e:af:78:df:b0:df:0c:
39:1a:c4:21:47:d9:f3:81:84:af:ce:cc:58:4f:e7:0d:e1:77:
44:87:7a:75:2b:53:f9:30:6e:da:ca:bd:d5:02:2d:18:cc:1a:
78:51:d1:e7:20:31:62:ef:66:0f:f9:c4:8a:f8:09:d2:42:98:
a8:fd:96:5f:ee:2f:1c:31:31:d8:94:0f:23:1c:c4:1c:f0:bc:
4e:62:f9:2c:91:11:4c:05:27:6a:4c:90:88:0f:7c:73:14:09:
15:c5:9c:33:3b:44:a1:90:46:f3:0e:6e:a1:b2:60:f8:7a:03:
34:1d:58:02:ae:55:9c:d2:f9:00:3e:cb:06:3e:56:aa:69:1e:
73:bb:eb:f0:21:de:81:3a:ba:50:13:c8:d7:6f:2b:85:b0:a2:
f7:d9:43:e3:d3:e8:fb:5b:ce:6c:56:51:95:5e:77:cb:61:35:
3c:0b:21:8b:6c:57:ed:cc:6a:62:19:8f:f3:32:dc:fa:8f:52:
d6:4f:82:e7:0c:30:61:9f:9b:32:5a:5e:9a:4d:97:2a:f7:47:
a9:07:a7:8b:13:58:d9:0d:3e:22:73:dd:05:15:0a:07:e6:aa:
18:54:3a:bd:ca:02:9b:af:5c:41:04:9e:94:be:ed:b9:c7:49:
6f:08:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 17:00:27 2024 by rpki-client on console-ams.rpki-client.org