Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/DF9C0F1E18CF11EFA9AB1358C4F9AE02.roa
File: DF9C0F1E18CF11EFA9AB1358C4F9AE02.roa (raw, json)
Hash identifier: rQ/VuJtBrQlYZbb1qmWV76iQ4z/17jYRXUFSmluBFWk=
Subject key identifier: E5:A9:09:CF:04:A4:DE:E3:77:57:2E:45:BE:B1:9A:BE:45:9F:5B:32
Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Certificate serial: 06
Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/DF9C0F1E18CF11EFA9AB1358C4F9AE02.roa
Signing time: Thu 23 May 2024 06:47:47 +0000
ROA not before: Thu 23 May 2024 06:47:47 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152647
IP address blocks: 202.61.112.0/23 maxlen: 23
202.61.112.0/24 maxlen: 24
202.61.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 10:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Validity
Not Before: May 23 06:47:47 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=664ee692-ecbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:17:a3:cc:d3:a4:5f:1e:4d:9d:a2:f8:84:
05:24:53:bc:a6:71:09:7a:ad:24:49:e4:2f:05:0e:
28:ab:96:d1:b4:53:ac:68:a4:bd:8b:f0:51:6b:55:
db:61:e7:12:fa:9c:61:46:86:35:c0:32:ff:a5:f5:
06:0f:93:1f:bc:36:3e:76:d4:ea:58:f4:6d:7a:27:
4f:53:9b:9d:13:c5:80:cc:ee:68:08:49:cf:8f:4f:
da:72:16:38:7e:a8:0a:d9:8c:1e:b5:a7:1f:07:91:
18:7e:5c:a6:59:8b:8f:7d:84:dc:0f:29:41:9b:cc:
b2:34:f6:85:c2:8a:a1:a7:dd:b0:37:a0:4e:88:53:
2c:a4:d7:38:8d:b5:6d:dc:99:33:76:1e:1e:b4:b1:
f5:7f:8c:8c:de:30:76:67:39:0d:2d:55:00:c4:34:
b3:39:a0:ff:f5:22:a3:ad:b3:39:c6:f1:79:29:c2:
4e:e0:8f:9f:cd:6b:25:4a:9a:66:55:0b:23:75:a1:
05:7b:6e:2b:42:39:d7:9f:7d:80:c5:df:63:ae:70:
3b:d4:90:dd:74:7d:80:8d:ce:a3:d1:17:9d:9a:c4:
32:12:b3:c4:b7:e0:b6:2d:06:81:40:4c:22:74:81:
27:88:18:36:7e:25:35:57:8c:00:c5:09:8c:b6:47:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A9:09:CF:04:A4:DE:E3:77:57:2E:45:BE:B1:9A:BE:45:9F:5B:32
X509v3 Authority Key Identifier:
keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/DF9C0F1E18CF11EFA9AB1358C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.61.112.0/23
Signature Algorithm: sha256WithRSAEncryption
97:d6:78:71:7d:ef:7a:8e:4a:4a:f1:57:b8:45:b8:d1:5a:9f:
a2:8e:2a:3c:c2:d5:87:9d:99:25:83:25:b0:5d:a2:2e:4e:26:
16:8e:8b:45:b0:7d:7a:1c:73:b8:44:49:b1:53:6b:20:1f:64:
1b:39:8a:eb:07:be:48:32:c4:54:06:45:41:11:f8:21:d1:e0:
e5:1d:93:cf:f8:d6:c8:68:7e:b3:ae:6c:fb:07:9c:a6:75:5c:
06:92:03:50:d8:1c:f4:67:ed:7a:2c:65:fc:a2:cb:d9:98:8f:
ca:7f:2f:91:f5:c9:02:d3:13:bd:bb:25:79:fd:d8:84:4e:0a:
0f:ba:42:5a:00:b7:7b:af:d1:cf:d2:5a:2b:af:73:ab:33:e5:
52:5a:e9:da:7b:1e:23:e0:ad:9c:31:a4:35:fa:28:d5:55:28:
bc:cf:78:57:1d:e7:e5:dd:e1:d6:fb:a8:e0:be:f4:53:eb:ae:
b0:55:af:fa:8e:5f:b8:02:2b:7d:c6:cc:13:3b:89:34:a5:f7:
21:ea:d5:b1:29:8e:71:c3:0d:98:a5:21:b0:76:a8:d8:3b:24:
c9:3e:32:a2:56:b5:15:33:62:d1:01:1a:69:13:35:43:90:ec:
56:37:16:db:b3:1b:a4:c0:fc:7c:c1:23:2a:64:fe:c7:eb:c7:
50:12:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org