Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/7590BAA2F5B911EB90F4A13DC4F9AE02.roa
File: 7590BAA2F5B911EB90F4A13DC4F9AE02.roa (raw, json)
Hash identifier: Z5o4KZ81fyjSRNljCQPVCYxqvkRzQQUbScC6NcQbojM=
Subject key identifier: 96:88:9D:8C:18:DA:3C:E2:08:69:A5:DE:4C:3E:D2:D5:82:F5:F9:88
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 33FF
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/7590BAA2F5B911EB90F4A13DC4F9AE02.roa
Signing time: Thu 08 Jun 2023 15:20:52 +0000
ROA not before: Thu 08 Jun 2023 15:20:52 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 141433
IP address blocks: 114.130.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13311 (0x33ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Jun 8 15:20:52 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6481f1d4-f2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:0d:34:b0:1c:f5:8b:13:94:4e:24:ba:17:
2a:7a:f0:43:e6:37:9a:4f:c0:31:d6:9f:d5:3b:8a:
e9:ee:65:5e:61:cb:75:30:58:f2:16:b0:48:f0:05:
3a:ee:ad:41:79:71:b2:ac:2d:0a:27:50:c1:72:77:
5c:db:43:dd:3f:9e:dd:bc:17:a8:5b:d3:1a:45:47:
fc:5c:24:a4:c3:1f:1a:f3:34:6f:d5:ac:07:39:a4:
76:2f:a1:5e:dc:34:db:61:ef:c4:4c:68:9e:2a:48:
7c:42:4b:a0:72:1a:2c:3d:15:28:52:a3:db:8c:9f:
e4:9d:94:16:54:30:53:81:49:58:cb:6e:4c:b9:ea:
98:23:99:11:26:91:cc:50:14:c0:8b:9e:76:6a:b6:
7c:dd:22:8f:18:5d:4f:f5:3c:f5:39:36:52:00:bf:
43:fc:7b:b6:61:83:58:f1:5c:44:e7:91:54:be:84:
2d:53:21:57:a2:ad:7d:b9:2a:1a:d3:07:a3:77:eb:
17:12:69:ce:cf:db:cb:ba:cc:83:fb:0e:86:b5:c2:
b8:91:9b:85:fb:cd:36:17:94:f1:ff:f6:b3:a0:cb:
0c:6d:13:8f:f0:b5:ca:8a:54:1b:5f:76:b1:ce:7e:
f9:97:76:ca:13:02:e4:6d:9a:3a:9f:a0:92:be:d9:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:9D:8C:18:DA:3C:E2:08:69:A5:DE:4C:3E:D2:D5:82:F5:F9:88
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/7590BAA2F5B911EB90F4A13DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.130.68.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0c:9a:9c:e7:bc:e5:71:e7:54:42:65:f2:db:eb:c0:1d:c3:
1f:3d:6c:05:b3:4f:3c:90:47:bc:47:2f:40:a7:05:2f:74:8f:
8e:48:52:cd:ab:91:3f:63:8a:44:7d:b0:7f:05:b2:ee:a9:9d:
9f:2e:5a:fe:1f:3b:3b:67:34:d5:2a:51:44:89:0c:3d:64:37:
7a:b5:b9:77:1c:11:3c:38:90:6d:8d:39:94:7b:f9:3b:85:f4:
a3:7f:63:60:0f:82:a9:82:ce:77:a7:98:9c:14:77:ce:10:55:
3d:78:bb:51:64:16:cd:63:88:48:77:a9:16:53:53:f7:cb:d3:
88:5e:16:bf:33:c7:43:eb:6e:ef:f1:74:6f:94:5b:29:54:b5:
6f:cd:af:c8:6b:1b:02:ec:f6:13:61:2c:33:6f:cb:84:68:f2:
32:c8:d0:d8:f3:4e:8e:53:7f:4f:e4:0b:81:35:9c:04:cb:46:
9f:43:e8:60:87:71:8d:62:e7:95:6c:57:e8:01:8a:13:0f:cc:
5a:45:d2:c9:9b:91:f0:ea:15:24:5e:98:d5:66:8a:1d:26:06:
1c:be:60:7d:f2:c6:85:86:9a:c0:78:b3:df:72:0e:40:1d:44:
7d:2e:66:56:5a:7f:08:21:c7:25:e6:6e:e5:78:7b:b2:e7:2d:
61:8a:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 11:34:57 2023 by rpki-client on console-fra.rpki-client.org