Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/E9999B86DB7A11EEB98B6A64C4F9AE02.roa
File: E9999B86DB7A11EEB98B6A64C4F9AE02.roa (raw, json)
Hash identifier: rj9zMB49EigS8xOVB8klVifitZZhIRhaP3bet4uXrE8=
Subject key identifier: 02:89:16:8B:35:06:5C:D7:DF:39:CA:FA:67:86:42:AF:6A:47:68:AB
Certificate issuer: /CN=A918C287/serialNumber=355AC83FAA75D7DA7AC861DB2007F62600BA4292
Certificate serial: 67
Authority key identifier: 35:5A:C8:3F:AA:75:D7:DA:7A:C8:61:DB:20:07:F6:26:00:BA:42:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NVrIP6p119p6yGHbIAf2JgC6QpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/E9999B86DB7A11EEB98B6A64C4F9AE02.roa
Signing time: Wed 06 Mar 2024 05:32:25 +0000
ROA not before: Wed 06 Mar 2024 05:32:25 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 0
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 01:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=355AC83FAA75D7DA7AC861DB2007F62600BA4292
Validity
Not Before: Mar 6 05:32:25 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=65e7ffe8-c533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:19:32:9a:e2:c5:0f:a6:37:3f:fe:73:d7:
6c:b3:a4:a7:b1:b0:cf:03:d6:f2:23:61:ec:34:2e:
d4:24:a8:ea:3c:f6:58:6d:ad:85:e0:8a:69:fb:c3:
e2:7b:c7:48:f0:d0:0a:c4:94:0f:4c:72:31:ec:a7:
b1:33:ed:fc:27:e7:0d:22:2b:57:18:a5:73:38:93:
e6:c4:7c:53:a1:b9:f5:1c:4a:73:b5:33:8e:73:3e:
39:93:f4:09:80:72:80:01:34:aa:2a:4e:0e:06:07:
bd:3c:60:6f:be:90:df:fb:e4:09:28:b4:ad:76:ce:
ec:3a:f4:76:43:35:26:b1:cb:75:30:41:94:80:c6:
0a:40:1b:76:37:bb:e6:c1:7d:02:22:ce:43:a3:f9:
a1:98:81:63:77:b0:8b:95:74:e3:a5:94:69:26:eb:
ee:93:7d:bc:e5:26:a9:47:70:1a:76:f8:6a:d0:ff:
c2:76:dd:9c:9f:83:65:7d:58:e5:29:c3:d0:5a:41:
d7:8c:ce:62:cf:aa:43:77:4f:46:a5:e3:1a:95:d3:
ad:1d:f2:d5:f0:a7:19:31:f0:b7:3f:05:1f:f7:e7:
0f:78:71:de:cc:47:2e:50:b7:ec:99:ab:8d:21:e4:
0a:22:e3:68:31:0f:d2:1c:4b:c0:15:72:5a:0f:63:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:89:16:8B:35:06:5C:D7:DF:39:CA:FA:67:86:42:AF:6A:47:68:AB
X509v3 Authority Key Identifier:
keyid:35:5A:C8:3F:AA:75:D7:DA:7A:C8:61:DB:20:07:F6:26:00:BA:42:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/NVrIP6p119p6yGHbIAf2JgC6QpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NVrIP6p119p6yGHbIAf2JgC6QpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/C963CF266CB711EEA88AC06CC4F9AE02/E9999B86DB7A11EEB98B6A64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
35:67:31:f9:4b:2b:63:f2:92:30:23:49:3b:7d:54:af:ea:10:
00:4a:25:d5:03:55:d5:6d:12:4a:ab:36:89:93:f5:04:41:60:
35:40:ef:79:8c:83:34:83:16:c4:9c:ac:0d:37:26:27:e9:18:
79:af:99:2c:ad:81:5d:be:81:70:9a:2f:94:3f:21:98:e4:6d:
a9:c7:69:a3:b1:59:33:eb:fc:64:d4:73:93:3f:6e:5e:0e:cf:
3a:c4:09:44:76:b6:ea:e9:65:37:4e:ca:a7:96:fe:09:32:6b:
9b:b3:69:56:9e:5a:89:0a:11:1b:2d:cc:4c:cf:4d:e8:23:1c:
28:b2:b8:65:57:da:93:72:24:c1:f7:7d:d5:d2:c8:a2:da:11:
86:a2:ed:fe:f2:ac:21:dc:66:5e:67:51:ac:cb:ab:d9:cd:7b:
ae:ed:0d:4a:bf:80:f8:50:cf:e7:f7:70:33:7d:e0:37:b5:ae:
c2:c3:d9:c8:e5:33:d5:62:06:36:32:a2:da:6c:a8:87:ea:12:
94:a9:dc:5b:5e:fb:bf:b6:b8:3c:c5:2c:0b:cd:79:44:5d:18:
41:83:79:0a:f1:fd:61:42:06:90:67:8a:56:7e:ff:6c:45:f4:
32:7d:d3:1a:4e:c7:aa:14:dc:7c:a7:e3:f8:40:25:eb:23:af:
13:e6:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:06:18 2024 by rpki-client on console-ams.rpki-client.org