Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/AC98F354BF3711ED8D820C0AC4F9AE02.roa
File: AC98F354BF3711ED8D820C0AC4F9AE02.roa (raw, json)
Hash identifier: rIXZUNADPz/ZzxU5UjwHuAFOjyepQR4f1rDPZOHAoTI=
Subject key identifier: A0:9C:DF:E2:E7:3E:FF:49:CF:2E:9E:88:1D:A4:F8:6E:E5:D9:BC:E3
Certificate issuer: /CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1
Certificate serial: 8C
Authority key identifier: 7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/AC98F354BF3711ED8D820C0AC4F9AE02.roa
Signing time: Sun 03 Dec 2023 05:35:42 +0000
ROA not before: Sun 03 Dec 2023 05:35:42 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 150788
IP address blocks: 203.0.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1
Validity
Not Before: Dec 3 05:35:42 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656c13ae-760d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:28:0f:79:55:65:cf:e5:ab:c7:a9:88:de:
0b:ce:68:20:6f:7e:6d:8d:83:cd:63:fe:49:80:2c:
3b:66:23:b8:d3:8f:75:b1:37:2a:20:dc:9c:e3:62:
7c:a0:68:34:70:1e:fe:ed:20:95:57:27:66:1d:b7:
94:79:34:28:d3:15:67:8b:fd:50:c3:fc:eb:7f:06:
be:33:6c:6c:02:3b:3a:5e:02:4e:8a:4e:4d:a2:0f:
47:a8:62:64:d3:55:03:19:5b:4c:c4:e6:fa:9e:81:
3e:9d:c6:85:5c:47:27:1d:8f:45:5a:95:e0:da:7a:
5c:c8:c5:31:ea:8d:6a:89:e5:c1:95:8f:4a:d7:d8:
d2:ef:f1:de:91:59:b4:9e:d0:d4:ab:d4:8e:5d:97:
02:23:1c:8c:ba:ba:06:aa:c2:c2:96:68:02:46:ad:
a5:7b:24:fa:40:a1:60:ca:11:6c:5b:b4:6d:a6:40:
e9:dc:e0:bc:3a:c5:70:3f:f3:8d:22:7e:c8:1c:72:
98:10:b2:49:a8:1f:77:c2:f7:61:bf:90:22:0e:ec:
ad:8b:d1:cf:fc:21:6a:14:c6:c8:e8:36:44:e2:77:
b0:b1:23:f9:1c:dd:cd:cc:65:98:2b:c3:5b:8c:2d:
b7:b6:08:62:6e:c4:93:71:53:b7:ab:ee:d3:d0:db:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9C:DF:E2:E7:3E:FF:49:CF:2E:9E:88:1D:A4:F8:6E:E5:D9:BC:E3
X509v3 Authority Key Identifier:
keyid:7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/AC98F354BF3711ED8D820C0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.0.139.0/24
Signature Algorithm: sha256WithRSAEncryption
19:69:d1:05:06:f2:23:ac:b6:49:c9:5c:7e:34:2c:25:e5:6d:
1e:41:0a:1b:26:f7:00:65:88:5c:62:52:c0:b5:85:17:15:41:
8e:99:21:ff:b6:69:9e:53:2b:7f:a3:20:aa:de:d4:44:17:79:
87:b1:ea:e5:5e:77:5e:c6:41:1e:7f:ad:85:97:24:c3:07:43:
4f:3e:e6:b7:e0:1c:79:c8:e8:f6:b5:cc:31:81:0f:04:dc:ed:
bc:39:ea:38:b3:7c:30:9d:7b:9a:b7:c9:b6:80:4b:e6:ca:2d:
a9:05:cb:f3:4d:62:aa:f8:e4:96:fa:5a:92:31:2f:e8:6b:07:
eb:0b:08:53:55:c5:ea:02:67:cb:f4:07:2a:e5:f3:27:cd:f1:
19:43:a4:c6:8c:45:b9:88:c5:b3:bb:68:e8:0a:7e:98:b6:0f:
87:d6:2c:82:bf:95:dc:8e:ff:c8:d3:cc:ac:2e:ba:63:e1:6e:
96:ab:4c:41:fd:2a:0e:a2:71:0a:d4:d8:ab:a4:55:b7:7e:b5:
75:5d:63:ce:b5:9f:f7:b0:62:a5:3f:3a:7e:9d:11:55:97:d2:
ac:ec:18:6b:d0:d1:77:34:5e:33:96:b5:96:31:a5:7b:a7:88:
16:4f:36:72:af:4d:7b:0e:96:42:01:f8:bc:4d:d3:1d:ee:d7:
13:e6:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:23 2024 by rpki-client on console-fra.rpki-client.org