Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/50DF588C5F1211EB92B3F220C4F9AE02.roa
File: 50DF588C5F1211EB92B3F220C4F9AE02.roa (raw, json)
Hash identifier: WoRACCRGP6Fo+lb4ZbUZKqBYF4bk/GVEUZ8JX9zwSp8=
Subject key identifier: 5E:1F:1E:BE:4F:F7:F7:B0:8B:58:74:B4:6E:76:D5:CE:8E:1E:42:67
Certificate issuer: /CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Certificate serial: 065D
Authority key identifier: 62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/50DF588C5F1211EB92B3F220C4F9AE02.roa
Signing time: Thu 26 Sep 2024 22:21:50 +0000
ROA not before: Thu 26 Sep 2024 22:21:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38491
IP address blocks: 121.127.4.0/24 maxlen: 24
121.127.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 10:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1629 (0x65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Validity
Not Before: Sep 26 22:21:50 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f5de7e-aafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:3d:0d:93:ce:75:d3:67:ef:db:ed:98:84:
e2:d6:84:c5:b6:9f:0f:04:5d:6a:b6:84:cc:62:57:
c7:09:20:8f:84:29:56:f0:6e:9c:b0:a4:9b:22:8a:
8f:3b:44:71:08:d0:2c:d3:bb:15:15:c0:af:e1:d9:
c5:9f:34:eb:0c:d2:26:d5:b9:43:37:a7:ca:3e:3b:
64:0d:5c:b8:34:9b:b0:8b:65:75:43:16:cf:e6:96:
0b:3c:78:5e:7a:91:de:e8:9b:2e:67:27:fe:0c:07:
b1:6d:90:a7:0a:ca:f8:3e:58:6d:d7:81:5d:5f:39:
0b:26:99:a1:48:20:69:29:25:4a:bb:8f:f3:ea:ce:
3d:80:5e:af:0e:17:33:d3:ae:46:84:01:6a:e0:8f:
d4:aa:f9:c1:58:26:39:31:61:48:d6:de:c2:1b:c4:
81:40:a4:cf:84:fd:a2:0c:17:da:75:4b:54:94:0e:
7e:ea:b4:3d:95:53:af:e9:59:e8:36:e8:3e:fd:7b:
8d:a7:9d:f6:59:c1:1d:10:80:d4:4d:ce:67:fd:81:
28:b5:c6:65:40:69:74:53:e8:08:7e:f8:3c:17:4f:
a9:2e:50:ed:da:1d:43:fd:13:15:02:7d:aa:48:e1:
2f:38:eb:6e:c4:a7:50:b8:9c:f2:6c:73:93:cf:b0:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:1E:BE:4F:F7:F7:B0:8B:58:74:B4:6E:76:D5:CE:8E:1E:42:67
X509v3 Authority Key Identifier:
keyid:62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/50DF588C5F1211EB92B3F220C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.127.4.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:8b:85:08:85:0b:99:86:cf:24:02:88:4b:e6:e2:eb:42:6d:
c5:1c:31:a8:b7:99:6a:74:3e:e6:11:09:46:a1:ab:9f:ed:aa:
6c:fb:64:b5:9b:f2:e9:74:26:0c:83:25:1e:c4:f6:4f:1a:7e:
66:a5:9c:59:80:d8:2f:3f:22:94:9c:85:01:d8:3f:80:0f:47:
de:a6:58:75:d6:e9:59:24:79:d3:52:02:c9:75:7f:bd:39:a7:
cd:00:52:f8:bd:b0:e6:43:25:47:2f:03:9d:16:04:75:d7:a8:
fb:d5:4a:98:b1:78:2a:34:27:a0:2f:b9:9b:08:b4:6d:e5:2e:
10:65:af:3d:24:76:4d:69:1a:be:71:ae:f7:29:76:cc:16:d9:
8b:21:09:2f:e5:f5:d8:f7:5b:26:62:f7:06:ce:d3:ce:8c:24:
5a:05:85:1a:36:fb:c4:64:b6:db:ed:d5:31:81:2e:78:12:b9:
f8:13:e8:b6:5d:a7:db:bb:a2:fd:62:cc:2f:5b:8d:b4:a4:29:
07:1e:76:ac:dd:e9:e2:fd:85:c2:6c:03:7f:ff:34:82:94:be:
d5:e5:39:ae:53:54:59:47:58:6d:50:f6:74:98:b2:1f:0b:6a:
fe:91:97:df:92:32:c9:62:d1:10:e7:c9:0a:74:88:83:6c:05:
c4:16:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 14:42:40 2024 by rpki-client on console-ams.rpki-client.org