Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/B840A7FA75D011EFA971985EC4F9AE02.roa
File: B840A7FA75D011EFA971985EC4F9AE02.roa (raw, json)
Hash identifier: OMmcLsR/3HvuTIvzbwwS8GixCzz5zZ7PWCE5UJpoWd0=
Subject key identifier: 62:7E:84:6C:11:C8:EB:62:7D:17:55:8F:6C:EA:68:1F:51:FE:1A:AE
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C4F
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/B840A7FA75D011EFA971985EC4F9AE02.roa
Signing time: Wed 18 Sep 2024 15:14:38 +0000
ROA not before: Wed 18 Sep 2024 15:14:38 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 131471
IP address blocks: 115.42.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 18:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7247 (0x1c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 18 15:14:38 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66eaee5d-87be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:39:4c:63:25:bd:6c:6f:e4:ab:9c:05:56:
9a:51:74:da:24:ea:a9:13:60:6f:a8:26:ce:c1:ba:
98:29:94:0f:c6:45:d8:ff:70:aa:e0:77:78:f7:ba:
1d:f2:22:7e:d0:24:a9:f1:40:57:8e:78:6d:97:e5:
b2:53:0e:ef:de:ed:79:b3:42:a8:a9:87:1a:88:a7:
2f:bc:42:7d:85:60:61:fd:7e:80:ca:83:0c:cf:f2:
29:0b:d0:db:d3:00:1b:08:ca:21:79:af:96:c8:3e:
b7:6e:22:bc:81:42:fc:35:4c:fc:c4:f2:e9:b0:34:
99:22:aa:e0:01:03:dd:91:d5:b0:76:f7:42:41:93:
21:77:af:c4:fc:73:6b:06:1a:6a:2d:5d:bf:5d:c4:
de:f3:b5:e6:3c:69:9c:9f:41:18:d2:9f:09:b9:77:
f5:5e:fc:e9:82:f8:7a:ec:5c:df:3a:f4:4e:a6:e9:
cb:a5:d1:16:3b:4b:d3:4f:76:6d:bb:6b:ea:de:82:
5c:72:16:43:ca:f8:15:55:3b:5d:e3:1a:0d:51:59:
3b:e1:70:53:dc:cf:06:c1:30:60:16:d7:cf:27:83:
11:33:62:e6:c1:8d:1e:19:a5:f7:30:86:cf:c9:87:
bc:41:13:f9:14:08:46:3b:5f:d4:08:18:71:8d:9b:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:84:6C:11:C8:EB:62:7D:17:55:8F:6C:EA:68:1F:51:FE:1A:AE
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/B840A7FA75D011EFA971985EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:9a:6d:9f:eb:e2:0e:47:3a:8b:c9:08:26:6d:b4:b2:5f:70:
d5:7a:9d:85:9e:37:34:51:e1:89:59:39:6b:d2:22:d7:b9:ad:
19:2a:fd:34:3d:4c:94:35:f9:fd:19:16:5a:45:07:f4:57:46:
ce:fa:ce:5d:1c:f0:19:67:ba:5b:f7:fd:16:7f:9c:69:35:e1:
75:0b:81:93:84:04:8b:7e:44:c8:26:4e:68:f1:0f:d9:b3:38:
e7:47:e6:82:21:c5:c3:91:cc:e2:12:a9:86:99:37:99:b3:c0:
20:db:bd:c5:99:70:b4:a9:f3:3e:e9:ae:fa:91:6b:07:48:34:
22:91:40:c2:8b:d5:a2:64:48:c1:c1:b6:62:40:0f:20:94:1c:
7f:a3:23:15:16:c6:fc:9c:c6:05:7d:92:2f:c2:2c:04:b5:93:
ea:37:17:1b:6f:98:6d:a1:98:e7:7d:43:1a:aa:1a:7a:cb:ff:
f1:0f:73:b4:0f:0c:a7:8c:8a:09:f1:ac:09:a0:fb:40:8a:82:
65:7e:44:c0:9b:8c:22:cc:4d:3a:7d:61:f7:de:95:d0:f3:ba:
93:55:56:1b:87:66:cc:43:77:bb:3f:0d:16:06:db:15:9c:62:
3f:f4:1d:90:09:04:d5:19:96:a4:de:13:fa:33:13:8a:b2:56:
bb:ba:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 19:44:47 2024 by rpki-client on console-fra.rpki-client.org