Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/59A81A0085C711EF90729630C4F9AE02.roa
File: 59A81A0085C711EF90729630C4F9AE02.roa (raw, json)
Hash identifier: mpzlNv58XQkhdEG3yJmjFBrpbepMeqqmvmiIpYiwcq4=
Subject key identifier: 1F:7C:63:C5:76:13:EA:17:76:E9:59:09:E5:E0:02:5D:5E:C7:35:D8
Certificate issuer: /CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Certificate serial: 72
Authority key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/59A81A0085C711EF90729630C4F9AE02.roa
Signing time: Tue 08 Oct 2024 22:47:52 +0000
ROA not before: Tue 08 Oct 2024 22:47:52 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 45163
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 23:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Validity
Not Before: Oct 8 22:47:52 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=6705b698-b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:be:e1:1f:bd:4c:70:67:fe:a0:fe:a9:00:
f5:f4:fc:4c:0e:74:2c:b4:b2:05:bd:8d:e8:ba:2f:
b6:72:0e:d2:cb:e1:93:d9:7f:2a:f4:29:62:e4:65:
d6:d8:67:70:be:db:a5:1d:1e:e3:9a:ab:5d:3a:a3:
43:40:3e:0e:62:00:d8:f7:e3:af:1c:03:72:c1:e9:
c0:49:a7:7c:25:c4:c3:0b:e2:7b:4b:0f:b8:66:0e:
1b:3e:92:72:36:dc:c1:49:f7:30:8e:07:95:41:1a:
b5:76:8d:dd:4d:ce:b6:e9:27:fc:f6:67:49:38:67:
27:61:db:7f:c1:5c:63:44:cf:b3:54:7c:ac:11:ab:
d2:a9:47:30:56:1b:88:0a:90:d8:2a:49:3c:a0:1e:
fe:7b:40:f0:19:08:51:11:ca:6e:27:12:6a:17:e7:
a4:27:d4:b0:77:a1:1b:2e:83:d5:01:36:b4:23:d0:
af:de:53:9e:f6:a6:d7:a9:70:b5:f7:51:e4:54:67:
d5:af:30:ed:d9:77:34:08:ed:d8:99:ac:f1:5e:fe:
cf:90:f4:3b:3b:13:2c:e8:c3:36:8e:56:0a:93:7f:
95:9d:41:5c:51:f7:19:60:08:75:f7:5e:37:64:09:
48:5a:01:bf:a2:d8:52:ab:68:e4:6d:0c:58:73:db:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:63:C5:76:13:EA:17:76:E9:59:09:E5:E0:02:5D:5E:C7:35:D8
X509v3 Authority Key Identifier:
keyid:42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/59A81A0085C711EF90729630C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
07:68:80:5f:83:7d:0a:8d:56:bb:92:ba:42:34:f7:bd:1f:54:
f4:b8:5e:66:39:03:3f:4a:c4:54:ff:c0:ef:a1:d6:81:7f:62:
29:cc:ef:ca:e5:90:fe:d3:16:68:02:e8:a2:84:a3:ef:6a:24:
91:7c:c6:0a:37:f0:c4:67:95:5b:14:54:9f:75:e4:ef:cc:07:
08:da:04:b9:e1:e7:fd:13:d2:d8:a9:71:d1:fd:40:68:d4:f3:
a1:20:ab:da:b4:ce:66:f3:bb:4e:27:76:f9:bc:c6:03:79:f4:
a0:c5:45:6d:46:f0:11:2d:5b:d1:c3:fc:21:96:b9:ae:87:b6:
dd:f2:b6:0b:7b:ec:1c:56:8e:b5:8e:73:9e:27:59:52:f5:1b:
65:97:de:4c:04:0a:ab:b9:c3:f3:10:6c:ac:05:8c:6b:6a:ed:
f2:a1:17:44:fe:4b:e8:38:f6:78:b8:a7:7a:db:4c:bb:d8:62:
5c:7e:9b:cf:c3:96:9e:da:d6:b9:1a:7f:fc:86:b1:4d:03:44:
3e:b1:2b:74:7c:ed:00:ed:bf:d2:c4:a8:c9:34:14:08:a4:02:
b0:2f:85:bb:40:d0:fd:34:62:3d:55:de:47:c7:23:a9:6d:4d:
e5:50:79:75:5e:20:52:e5:57:3d:c2:bc:7b:b7:3e:b5:a0:45:
c1:c1:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 03:08:19 2024 by rpki-client on console-fra.rpki-client.org