Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/7478D3DEA2FF11EEAACCC277C4F9AE02.roa
File: 7478D3DEA2FF11EEAACCC277C4F9AE02.roa (raw, json)
Hash identifier: JzOHHnqh2iFvLCgx6cvkHyQUjlkaRWCgHvLm4r8uUlQ=
Subject key identifier: 65:48:DD:11:E3:44:9A:5B:64:8D:16:98:DB:7E:EA:AE:C9:C2:C2:82
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 64
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/7478D3DEA2FF11EEAACCC277C4F9AE02.roa
Signing time: Mon 25 Dec 2023 08:27:35 +0000
ROA not before: Mon 25 Dec 2023 08:27:35 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132876
IP address blocks: 87.124.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Dec 25 08:27:35 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65893cf7-d3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:45:ce:6d:1b:63:98:6c:4f:e2:8d:e8:95:
90:e7:51:ce:34:cb:99:80:09:44:65:58:e3:d4:a5:
45:93:14:2a:54:42:63:2c:03:ba:90:b8:33:19:a2:
c1:3f:2c:66:e8:27:a3:4d:49:43:1f:91:a2:88:fe:
29:25:23:f6:bb:ba:aa:e2:29:84:eb:bf:60:60:0c:
44:75:47:e3:cf:42:40:03:43:b7:1f:e0:21:5a:9d:
73:f6:02:80:3f:c2:57:c9:0c:d4:3a:57:c8:01:4b:
4f:57:3b:f2:8f:77:c5:38:5c:4a:a4:f1:48:52:bf:
cd:40:05:7c:f0:47:b7:62:17:48:ea:fb:03:1f:0d:
7c:b6:8b:bf:6f:d0:ff:cf:c2:f0:ce:8c:03:c4:e2:
22:cb:6b:55:c4:7a:7f:e1:bd:40:a9:5f:bf:04:6e:
53:d9:eb:f0:6d:f6:6a:63:18:6c:88:3b:ab:e8:bd:
c6:76:19:6d:00:0e:b2:b8:b1:e2:f6:23:b6:37:e9:
4a:59:5b:ab:90:80:f7:a8:26:2a:e6:8c:1a:09:46:
7f:92:45:dc:30:9a:9f:94:a8:d0:9c:f3:3a:80:6b:
4b:fa:df:53:e8:d5:2b:2b:0c:8f:ae:b7:19:75:51:
bf:99:6e:6a:55:c3:e1:37:b4:d0:fc:25:38:1c:f7:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:DD:11:E3:44:9A:5B:64:8D:16:98:DB:7E:EA:AE:C9:C2:C2:82
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/7478D3DEA2FF11EEAACCC277C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.124.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:54:01:a9:b8:41:3a:d7:a9:ab:12:5b:b9:ac:03:0b:24:ee:
c6:ef:8e:88:7a:d8:58:08:12:81:b0:b2:2e:6c:ad:0a:5c:f9:
f0:26:aa:d7:43:f7:8f:d0:a7:6c:c4:7c:15:1b:38:23:49:a0:
4d:3b:07:55:3b:88:b0:1b:fb:2e:5b:3a:72:1c:fe:23:30:a1:
c6:aa:09:4c:38:0c:4e:c2:24:a4:c6:d5:c7:b2:d3:46:7b:3c:
b8:ef:a8:53:97:2d:da:92:66:d4:a6:6e:e4:85:07:6d:3e:d6:
84:bd:87:ed:46:a6:25:80:a1:a9:7b:2a:2c:39:ce:7e:db:64:
7c:d4:45:24:74:4d:91:b3:19:1a:81:a5:85:0f:95:82:2e:98:
bd:0e:20:31:7a:bb:01:03:b2:59:05:b4:72:bb:7f:55:7e:ff:
21:01:6d:37:3d:25:87:6a:6e:1e:b5:e7:46:f8:ee:7a:f7:af:
23:77:ed:d8:5d:7b:17:f9:98:ae:9a:bf:08:7d:75:73:cc:b4:
17:aa:3b:5f:f7:58:eb:f4:ea:7e:db:f8:e5:5c:7d:52:21:8b:
f0:46:39:fa:c3:ec:b8:ee:ce:be:4c:c6:74:8b:a4:06:90:6c:
da:39:31:cf:84:e7:69:1e:6a:d9:9d:7f:20:01:aa:31:c4:71:
d8:f4:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 10:47:22 2024 by rpki-client on console-ams.rpki-client.org