Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/359ECC3E517111EE801C616DC4F9AE02.roa
File: 359ECC3E517111EE801C616DC4F9AE02.roa (raw, json)
Hash identifier: Cjtwd4Kftq/3O26Djy9dBUuqDA1rPx26cu3wFuV5Ci8=
Subject key identifier: 87:2F:40:2D:11:C2:16:5D:33:57:51:53:08:C7:2F:50:69:CA:0E:BE
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 09C1
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/359ECC3E517111EE801C616DC4F9AE02.roa
Signing time: Sat 02 Mar 2024 21:29:54 +0000
ROA not before: Sat 02 Mar 2024 21:29:54 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 141432
IP address blocks: 27.255.16.0/24 maxlen: 24
180.92.134.0/24 maxlen: 24
180.92.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 09:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Mar 2 21:29:54 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e39a51-7c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:d2:6a:b2:cc:07:83:9f:d7:85:8a:e3:8e:
af:8d:0e:ae:a2:43:15:e0:78:4c:7b:eb:fe:9a:a6:
48:8c:1a:ab:ad:2d:20:05:14:79:0c:80:9f:0d:90:
ce:53:8e:fc:29:97:68:a5:b6:33:9f:3c:fd:38:12:
9b:0d:b9:8d:3e:b9:e0:9c:e8:74:96:4d:2d:0f:f0:
99:c2:23:15:74:e4:5f:74:18:46:9c:c0:b4:de:9c:
cf:6d:1e:63:6e:16:73:d6:78:35:4f:11:bc:7c:00:
d7:0f:5e:3b:51:01:52:e5:cf:27:a9:45:d1:31:b9:
d2:64:d6:a0:20:55:ea:ae:43:0f:6e:94:eb:91:7d:
60:55:ba:2d:c2:7b:f6:28:4f:e7:f5:a0:69:a6:7e:
94:00:1f:cc:0f:d9:5c:c0:30:d7:13:76:cb:bf:8d:
30:37:f5:8d:85:68:0c:1e:e6:b8:85:23:2e:7a:8d:
f3:bc:10:7b:de:c6:b5:27:63:d9:30:43:68:fa:75:
14:79:4c:79:23:d3:90:8f:84:60:1a:a1:fb:60:54:
41:7c:78:68:72:73:96:8e:dd:c8:15:3c:fc:d0:4f:
20:18:79:a5:fe:f1:50:41:de:6d:a3:a7:b7:77:77:
5a:ef:f0:32:e9:80:96:cf:54:44:02:06:c3:e9:6c:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:40:2D:11:C2:16:5D:33:57:51:53:08:C7:2F:50:69:CA:0E:BE
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/359ECC3E517111EE801C616DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.255.16.0/24
180.92.134.0/23
Signature Algorithm: sha256WithRSAEncryption
50:32:ef:9b:23:33:df:9e:13:5b:ab:9b:ab:fd:48:50:54:0a:
1d:b4:ed:7c:7e:9e:2f:46:e0:1c:61:1c:03:3d:a4:ec:9a:ff:
7a:f5:95:de:66:b1:4b:d3:10:2f:f3:93:e3:b5:a9:86:b3:4b:
ba:dd:0c:48:8b:6e:c6:ce:0c:29:0b:61:c3:86:f9:30:87:13:
27:32:30:5d:63:10:d4:48:6a:28:a7:b5:69:e8:ce:d8:fd:17:
f1:4c:0e:11:7a:37:2c:b9:bd:aa:86:61:49:31:4c:cc:0a:1e:
24:86:3a:0a:92:86:87:44:ec:16:52:69:e1:eb:97:35:35:f0:
6e:ea:af:ae:b7:f9:ee:69:ff:24:64:ce:3e:1f:f3:c1:fe:50:
c8:f9:03:89:89:c1:dd:c6:86:d6:5d:cc:8b:c3:38:26:6e:3c:
27:18:cf:11:66:c2:a4:71:ff:2a:ed:a6:86:03:f5:b7:6f:e8:
54:16:5b:11:ff:c8:ea:c7:1d:5b:55:6f:95:27:8f:e9:5d:91:
2a:8e:61:2b:9f:46:72:28:f9:e9:d6:08:8d:f9:ac:10:d3:6c:
37:7a:36:ad:03:7e:53:4d:ce:90:5a:8a:94:81:8a:ab:c1:05:
33:f7:ba:b2:33:65:5f:c8:ef:4b:8a:7d:e9:33:59:a6:72:1f:
c1:ca:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:59:33 2024 by rpki-client on console-fra.rpki-client.org