Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/C887D3BE6B2A11EFA4286D17C4F9AE02.roa
File: C887D3BE6B2A11EFA4286D17C4F9AE02.roa (raw, json)
Hash identifier: 1X7G+58E9olNyHLqsXAseWeniBSOVXEID1Q7bNpjAQU=
Subject key identifier: 9F:77:81:7D:6C:50:AD:87:73:DC:A8:8E:C7:7A:BF:FC:33:18:14:E0
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C44
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/C887D3BE6B2A11EFA4286D17C4F9AE02.roa
Signing time: Thu 05 Sep 2024 02:01:37 +0000
ROA not before: Thu 05 Sep 2024 02:01:37 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 214941
IP address blocks: 115.42.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 15:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7236 (0x1c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 5 02:01:37 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66d91101-43f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:9c:ee:39:c1:8e:72:ec:70:24:91:4e:e8:
e0:c4:6f:0a:f1:79:51:66:cb:86:f8:f2:39:d3:76:
84:17:f6:cc:ce:0c:7b:09:6a:57:d5:07:4b:36:1f:
a8:98:51:29:39:38:a3:45:6d:51:f3:45:ad:e1:e0:
10:64:68:74:16:06:2c:86:cb:62:25:2e:08:f1:5b:
e7:d7:43:30:26:0a:86:81:41:eb:78:31:34:55:1d:
03:9a:aa:bb:28:45:ac:44:de:02:57:71:4c:15:a6:
71:5b:fe:0b:3c:29:5a:2c:86:3a:d9:c1:60:03:88:
2c:3b:9e:c2:08:87:0e:42:9b:8c:55:84:26:99:87:
ff:a0:06:06:51:b2:43:4f:01:fe:be:ea:20:e3:45:
17:9f:7e:f5:a9:0d:71:d2:1b:ba:08:9a:31:05:3f:
2f:34:84:ca:c6:64:7b:d0:e2:6c:81:72:6f:e0:3b:
00:09:45:57:90:03:7b:64:90:cb:d0:ec:6c:d4:07:
4e:d4:28:09:82:97:cc:3a:b5:67:55:5b:c0:3e:4b:
5a:7a:18:a0:d5:5c:5b:49:7d:a8:ee:72:16:1c:bb:
49:e1:8d:2b:22:51:06:44:23:38:bd:8c:da:a0:9a:
cf:72:f4:f7:5d:6d:99:b4:ed:bb:a7:a2:4d:69:2e:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:81:7D:6C:50:AD:87:73:DC:A8:8E:C7:7A:BF:FC:33:18:14:E0
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/C887D3BE6B2A11EFA4286D17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4d:1c:50:f6:33:1e:f6:e6:7f:44:d8:1d:dd:97:70:4b:91:
2b:65:e0:1b:8b:ef:99:aa:48:28:0e:b1:85:01:3a:7e:f8:bf:
b5:7f:16:e6:bc:b8:d9:c7:6e:9f:ae:4b:c8:81:34:f4:88:41:
27:de:55:62:9f:fe:fe:7a:ba:a8:44:4e:62:d3:04:67:76:4b:
6b:99:ce:57:fd:92:87:2c:67:12:8c:e5:6d:20:1b:af:c7:f8:
9f:1d:b0:89:a0:40:eb:98:aa:a8:97:e1:33:79:91:b8:7e:6f:
a8:66:6a:46:aa:32:96:92:53:eb:f8:ee:fd:9c:59:37:9b:0d:
39:41:c5:5d:29:a9:c6:e6:e3:95:c6:8d:de:72:de:b1:75:dc:
2c:c2:10:4b:e6:56:77:48:44:71:9f:c1:6a:1b:d6:0f:d2:8f:
87:cb:f1:96:05:b2:a6:25:08:08:c4:94:df:87:73:df:19:de:
7f:a3:a9:5b:f6:f8:25:87:a0:56:68:5d:35:13:5b:63:fa:ba:
41:2f:54:ac:47:f1:e7:c6:a3:59:c0:2a:07:fc:29:81:96:fe:
67:a8:19:02:d9:22:85:c0:61:f1:0f:0a:ce:09:5d:14:9a:46:
34:88:88:b4:0d:b6:f5:a4:37:87:7f:24:00:23:0e:ab:81:18:
3e:45:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:29 2024 by rpki-client on console-ams.rpki-client.org