Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/26977EE09BDD11EAA977C354C4F9AE02.roa
File: 26977EE09BDD11EAA977C354C4F9AE02.roa (raw, json)
Hash identifier: x4lxAaGtrSeS0lrxvos3sPjAeXTdOLROpYER2mbKtLU=
Subject key identifier: 54:88:C4:33:21:2F:A0:62:DE:B9:7C:82:86:21:88:BE:93:94:D4:5B
Certificate issuer: /CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7
Certificate serial: 081F
Authority key identifier: 94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/26977EE09BDD11EAA977C354C4F9AE02.roa
Signing time: Thu 28 Sep 2023 21:18:26 +0000
ROA not before: Thu 28 Sep 2023 21:18:26 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 16509
IP address blocks: 202.160.113.0/24 maxlen: 24
202.160.115.0/24 maxlen: 24
202.160.117.0/24 maxlen: 24
202.160.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 01:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7
Validity
Not Before: Sep 28 21:18:26 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6515eda2-f199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:a6:eb:4d:86:32:8b:21:9b:0e:b6:b5:9c:
b2:1e:65:15:ad:ef:d6:73:a9:7d:2b:78:3d:47:0b:
7c:58:a4:05:bb:39:f2:21:d9:df:71:44:33:72:65:
f1:37:a5:59:f0:d4:6b:be:65:19:5f:2c:b0:40:05:
d6:cf:50:8c:07:8f:99:de:4d:76:91:0f:cc:dd:ce:
7f:26:65:f0:3c:58:f3:33:a5:fb:76:97:87:fd:47:
9b:44:96:dc:56:36:52:f8:ca:34:d8:27:ca:49:ea:
59:42:6e:45:64:8f:b0:4a:2d:f6:fc:fe:0e:5f:2b:
3e:24:36:e2:b5:32:ee:57:a5:36:29:d5:cf:ac:26:
21:9f:0d:e9:01:c4:bf:cb:bb:47:7d:21:84:ef:90:
a3:38:8f:54:4f:14:5a:e8:cd:73:ff:5a:d0:6d:f1:
08:32:0f:03:7b:57:44:bc:3c:c4:9a:08:7c:16:16:
4a:ee:fa:cf:a4:cf:e3:47:49:3a:43:66:e5:ec:79:
c2:48:f7:fc:86:9d:db:40:52:0a:e0:0a:a5:da:8f:
7a:9e:0b:2d:e7:4c:b2:89:47:ce:e7:96:b6:09:88:
94:3a:01:07:38:09:75:d5:ee:1c:ed:11:14:b4:9b:
d9:9a:9b:80:d5:10:40:64:4f:c8:8e:a5:8b:94:f4:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:C4:33:21:2F:A0:62:DE:B9:7C:82:86:21:88:BE:93:94:D4:5B
X509v3 Authority Key Identifier:
keyid:94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/26977EE09BDD11EAA977C354C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.113.0/24
202.160.115.0/24
202.160.117.0/24
202.160.119.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:26:5a:e6:3c:9e:08:9e:d2:ab:eb:18:57:78:a8:45:5b:
b6:f6:69:bb:88:e6:c7:11:a4:88:41:7a:3f:18:d8:91:78:d8:
38:07:01:f5:d8:49:5c:42:f0:12:c2:19:d3:59:ce:c9:1c:b1:
fa:05:0a:5d:64:39:9e:d9:45:e9:58:3d:ba:d9:3e:89:66:2c:
13:d4:82:63:46:59:ce:46:09:08:08:f1:06:2d:f0:26:e3:7b:
f2:69:28:d8:7e:1b:6e:37:ff:cd:61:b7:0d:dd:d9:89:f8:57:
c5:63:1a:05:e1:84:e0:d5:88:5d:c9:be:e7:77:2a:43:52:fb:
7d:bd:d1:92:8f:5f:a9:14:e2:49:28:60:db:93:aa:ad:55:01:
6d:cc:e5:42:15:ab:3a:b7:20:46:a1:32:dc:b6:79:44:a7:cc:
7f:b4:d4:26:d4:2b:cb:85:2f:5e:ca:cd:9c:85:9b:db:87:34:
ae:66:71:69:97:cf:45:c5:da:ce:69:b0:19:a7:2c:7e:75:86:
a6:28:e9:3e:07:aa:d1:d4:7c:ac:e7:86:35:8d:0b:c6:ea:a3:
b6:1f:34:34:bc:48:f7:c3:7c:57:64:2b:25:73:a5:e5:6b:9d:
07:7e:58:7f:87:3d:9f:71:df:46:50:82:39:2a:ad:d9:a1:29:
2f:62:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 04:13:20 2024 by rpki-client on console-fra.rpki-client.org