Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/5CD4A0606ABD11EFB0544D38C4F9AE02.roa
File: 5CD4A0606ABD11EFB0544D38C4F9AE02.roa (raw, json)
Hash identifier: Ze+7uHqoJP174yRosyrgvwPZFCvtK4YaqojlTcIQI4c=
Subject key identifier: 15:01:FA:E4:AE:6F:7B:8A:10:2C:3C:09:7B:BB:E5:BF:F7:B1:02:90
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C92
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/5CD4A0606ABD11EFB0544D38C4F9AE02.roa
Signing time: Thu 24 Oct 2024 10:15:08 +0000
ROA not before: Thu 24 Oct 2024 10:15:08 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 205220
IP address blocks: 111.119.164.0/24 maxlen: 24
111.119.165.0/24 maxlen: 24
115.42.71.0/24 maxlen: 24
118.103.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 17:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7314 (0x1c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Oct 24 10:15:08 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671a1e2b-1b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:6d:25:f9:db:1a:e7:1b:8d:56:1d:ce:f1:
9d:5e:3a:23:1a:a1:6c:c8:e0:b1:9c:4a:88:f1:25:
04:eb:8b:19:65:0f:5e:72:9f:1a:5d:a7:6b:fc:c3:
f1:50:14:3d:95:28:ef:b0:96:5e:4a:d1:9d:06:e4:
83:ef:3f:28:cb:9f:03:4f:5f:6e:51:5d:22:c5:83:
8e:a4:17:65:3b:ab:a6:00:5f:e2:9c:a5:01:de:63:
28:b2:77:b8:80:48:5f:37:19:83:d6:df:29:e9:d5:
58:45:de:c4:2f:8a:43:1d:1c:d3:dc:b1:fa:b8:f7:
bb:d6:26:fe:f3:bc:c4:81:c4:b8:9d:e2:58:ab:0a:
05:03:64:9e:79:92:a8:3d:72:f2:4b:f8:53:83:60:
74:f5:20:94:1b:bc:2e:c8:42:2c:3e:93:ad:19:31:
16:98:4c:d1:e3:77:0e:61:db:d3:0f:07:c6:a7:08:
d1:aa:79:e8:61:f9:d9:93:a6:7d:3e:65:37:71:bb:
0d:04:1e:20:58:62:92:aa:18:78:ba:53:cb:0f:84:
d7:68:22:44:25:10:8c:e2:fe:ce:5b:61:68:57:e0:
00:a1:6d:a2:89:6d:a2:60:b3:6d:93:2c:2f:f6:29:
ef:64:df:1b:c5:38:c4:2a:61:e8:1a:24:27:70:ac:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:FA:E4:AE:6F:7B:8A:10:2C:3C:09:7B:BB:E5:BF:F7:B1:02:90
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/5CD4A0606ABD11EFB0544D38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.119.164.0/23
115.42.71.0/24
118.103.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f2:d3:48:95:24:b3:d7:a8:4f:f8:5c:18:9b:2d:5c:78:89:
1f:02:9d:bb:bd:20:5d:cc:ea:0a:6b:a3:11:e1:e1:8f:c4:b6:
0e:c8:cc:e6:52:05:e7:87:91:0b:53:e2:47:b5:aa:6c:4c:38:
bb:5c:9d:d4:f7:61:8c:3e:cb:15:ef:e3:3c:ba:78:c4:b6:85:
2b:2c:0e:39:43:cb:13:6f:57:64:02:2d:0e:44:dc:4f:f0:11:
d8:90:7e:99:2f:c2:9a:e5:cc:b5:da:02:b5:39:d9:47:97:1d:
64:c6:bd:ab:19:d4:28:25:8f:59:9b:6c:74:fd:38:ab:6f:a4:
5a:56:18:a0:ae:b5:43:36:27:2b:2a:e0:3e:db:c1:b0:b9:23:
68:20:8f:d8:46:b2:40:a0:ce:60:16:49:22:e9:8b:e0:3b:28:
85:f2:cb:8f:32:8a:9c:59:55:07:6f:cc:8b:75:56:a1:a6:c2:
c6:58:21:17:11:4a:62:ae:10:be:ca:24:f8:e7:be:80:a1:5c:
92:d2:cd:df:bb:bc:b7:29:3f:ec:20:eb:80:e4:6b:e6:f2:01:
c9:5f:56:d5:9a:df:14:2c:cb:42:d8:df:ae:b2:a2:18:52:68:
22:76:45:9f:bb:e0:c4:9a:d0:24:76:29:0b:86:06:24:2c:4b:
25:13:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 20:14:21 2024 by rpki-client on console-ams.rpki-client.org