Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/34A72B6CE91C11EE9B414882C4F9AE02.roa
File: 34A72B6CE91C11EE9B414882C4F9AE02.roa (raw, json)
Hash identifier: Zq/+AgOhBffzLdQjdoIACGz5ZCl7XU2xvZuyO9SftWo=
Subject key identifier: F0:79:DC:0E:06:90:F5:D8:AF:9E:B1:8A:CB:03:37:9F:27:E9:8A:20
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 0919
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/34A72B6CE91C11EE9B414882C4F9AE02.roa
Signing time: Sat 23 Mar 2024 14:06:59 +0000
ROA not before: Sat 23 Mar 2024 14:06:59 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 152194
IP address blocks: 134.122.128.0/17 maxlen: 24
137.220.128.0/17 maxlen: 24
143.92.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 12:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: Mar 23 14:06:59 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65fee203-de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:6d:e8:7a:c9:db:1e:32:6b:fd:77:ab:5d:
d4:be:a1:75:23:5a:d3:53:88:90:25:62:74:95:58:
83:8e:cd:f6:38:a8:d6:35:a1:45:7c:ad:53:51:b3:
bb:95:2a:22:db:c7:50:a2:69:57:84:03:d6:5b:9f:
a4:8a:3a:2c:5d:92:78:eb:a8:4e:e5:1f:82:d1:d0:
e0:6a:17:82:2e:f7:01:bf:08:88:79:67:42:f6:e7:
0e:1b:9c:74:23:89:cc:87:33:5f:2b:dd:11:6c:f3:
a0:05:b7:a4:f3:36:ae:37:55:ed:b9:d4:15:e9:b7:
fe:e8:03:64:81:62:72:28:63:71:0d:a6:2c:a7:d1:
d5:77:a4:b4:f4:18:a7:95:82:4a:b2:65:f0:b5:86:
08:d8:25:99:82:72:84:2d:f5:81:8e:2b:d1:23:57:
88:3d:fe:29:ab:4d:21:db:af:bd:1c:bd:10:b8:07:
a7:45:06:ec:37:39:01:64:38:24:7e:55:4a:9a:ce:
7d:a0:43:81:5b:7d:5e:8f:63:c3:47:ac:e4:db:ea:
32:32:54:5a:f4:0e:3f:7d:e6:ee:78:73:3a:b8:4b:
db:b5:1c:70:30:af:fc:7c:f4:48:84:bd:32:74:89:
30:e5:5a:9c:b7:a3:6c:70:35:5f:c0:4e:bb:19:0a:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:DC:0E:06:90:F5:D8:AF:9E:B1:8A:CB:03:37:9F:27:E9:8A:20
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/34A72B6CE91C11EE9B414882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.122.128.0/17
137.220.128.0/17
143.92.44.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a4:11:57:ce:d4:3f:65:dc:cb:73:81:03:c4:6b:46:36:9f:
cc:3f:f9:2e:5b:62:80:96:f6:2e:f7:7b:ed:d0:ac:cc:70:7d:
02:43:12:ae:b3:bb:6d:5a:87:27:76:ca:42:fa:4c:06:c9:84:
b6:88:23:1b:d5:6d:d6:fe:f0:c7:a0:fb:d0:de:a6:27:1b:6c:
ba:08:89:b7:c6:10:4e:0d:f6:bd:49:a6:25:8a:4b:4d:ef:71:
33:6c:b6:d1:6f:c3:52:60:58:48:89:0b:8e:09:b7:7e:aa:18:
fe:32:b4:b8:44:3c:04:0e:08:44:17:2f:4e:bd:37:b7:5d:0d:
78:ef:79:08:56:03:2b:4c:6c:4d:04:80:c6:34:b1:44:6b:4a:
b6:6a:3c:11:19:4f:0c:c6:7c:1b:1b:7b:44:51:87:1b:26:61:
2d:83:28:30:fd:33:81:12:ca:ed:36:3d:76:7c:5f:bd:45:0c:
80:fe:50:57:71:ef:a1:a8:29:de:c0:23:23:06:e7:df:64:b3:
ba:c9:fb:f3:8d:28:19:c1:24:a7:66:f3:9b:51:5b:73:a5:8e:
4d:d7:bb:7a:60:25:3b:47:69:0a:2e:6b:27:09:ee:21:b9:03:
06:d0:8e:39:9f:c1:31:2b:31:49:0d:e5:ac:10:7c:a1:0b:97:
66:0d:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org