Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/843B56E29BDE11EA85D44F5BC4F9AE02.roa
File: 843B56E29BDE11EA85D44F5BC4F9AE02.roa (raw, json)
Hash identifier: cq+gsgGf0xlM6mMNEjf4nudlnuy6rL+K/G0FG3xwLns=
Subject key identifier: B5:A2:24:FD:2B:6E:79:8E:0A:28:64:16:A2:1B:16:D4:1F:C6:1D:4D
Certificate issuer: /CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7
Certificate serial: 0821
Authority key identifier: 94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/843B56E29BDE11EA85D44F5BC4F9AE02.roa
Signing time: Thu 28 Sep 2023 21:18:28 +0000
ROA not before: Thu 28 Sep 2023 21:18:28 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 9503
IP address blocks: 202.160.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 02:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AB89/serialNumber=947EFD1BF6F93A98DFEBC153DAB0DA77CC4028C7
Validity
Not Before: Sep 28 21:18:28 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6515eda4-c3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:65:3f:48:8a:fd:61:ae:20:8c:c2:64:37:
96:34:f3:0b:34:c5:be:bb:b5:98:5b:3f:cb:db:c5:
f0:ed:57:a2:1c:1a:8c:64:4e:7b:1b:50:77:f0:19:
6d:a2:84:bd:4f:0d:ab:19:b5:c1:74:07:eb:bc:12:
28:f5:55:c9:3d:fd:65:12:42:e4:2c:50:f8:cc:84:
97:ab:e9:00:ae:80:ef:e0:f0:83:93:f7:cd:75:20:
4b:ad:55:7d:7d:e8:dc:67:d5:4a:5b:65:0a:e7:46:
7d:d8:21:fa:15:82:51:85:5b:5e:71:2c:e2:f6:1e:
fb:8d:de:9a:1c:e2:94:6e:88:27:35:be:60:7a:47:
46:40:f4:0e:bd:38:b2:4c:27:df:e7:50:0f:02:2e:
8b:8c:a1:ab:ca:55:fa:d7:e6:9d:2c:c1:9a:85:7c:
b8:1d:49:a9:c2:00:c9:3b:5f:75:c5:26:22:80:88:
32:dc:02:9e:61:21:8b:10:69:80:7d:4b:ee:d0:66:
6b:5b:86:35:fe:20:e9:98:cd:42:5b:3d:70:d1:9c:
f6:d7:bf:2f:64:4f:27:b0:19:ce:cd:80:cb:23:40:
67:b6:58:bc:9f:cd:5c:8e:a5:5e:22:31:d0:dd:40:
e7:2c:61:54:62:e9:20:b5:86:ae:f5:2b:df:cf:69:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:24:FD:2B:6E:79:8E:0A:28:64:16:A2:1B:16:D4:1F:C6:1D:4D
X509v3 Authority Key Identifier:
keyid:94:7E:FD:1B:F6:F9:3A:98:DF:EB:C1:53:DA:B0:DA:77:CC:40:28:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/lH79G_b5Opjf68FT2rDad8xAKMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lH79G_b5Opjf68FT2rDad8xAKMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB89/CE06A9EC9BDA11EA82336A50C4F9AE02/843B56E29BDE11EA85D44F5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
09:52:cf:f1:0a:49:79:70:50:bc:9a:59:b8:d9:94:e9:c7:cd:
20:d8:7c:44:ff:99:dc:88:4f:80:4f:81:69:df:9a:20:be:c4:
18:83:69:1b:1c:6a:68:b8:27:7c:e8:d6:a5:1f:64:70:e1:9b:
b4:19:04:1e:7b:e4:80:a6:b4:dc:aa:94:24:19:c5:18:d6:9e:
17:20:aa:f1:29:81:45:0a:17:1a:ff:2d:f5:fa:60:74:5b:34:
49:cc:bf:ba:d8:3a:e9:a2:d7:73:70:28:9f:2a:cd:44:76:ad:
55:5f:d2:49:04:f7:92:79:28:61:79:23:88:9c:e6:6b:42:fc:
6a:a9:46:2d:15:98:02:18:10:b8:8e:66:56:34:f4:fe:15:38:
eb:f3:27:fa:09:21:77:3a:0c:2f:32:a3:2f:d9:fb:46:de:e4:
9c:a7:56:53:46:95:b0:83:27:d5:02:a5:45:ba:b2:4f:e4:9f:
54:79:a3:b1:b3:ff:ec:f9:ed:0e:d9:e0:3a:09:bb:5b:12:b7:
48:4a:92:52:b3:c8:4e:77:7c:14:1b:42:a4:ed:10:1b:c0:9d:
95:c3:e9:e9:35:b5:0e:2a:f6:3a:67:37:b5:ba:3c:be:bf:ac:
8e:2e:85:5e:c3:37:01:62:f0:cc:9e:b4:c4:eb:6d:95:87:2c:
f5:00:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 05:50:33 2024 by rpki-client on console-fra.rpki-client.org