Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/14B88300EDAA11EDBE91BB82C4F9AE02.roa
File: 14B88300EDAA11EDBE91BB82C4F9AE02.roa (raw, json)
Hash identifier: NISj9O3hAvEvNvvf4ZFyhXMn0Z77761zT7BNo1tJqZA=
Subject key identifier: 4A:C7:99:C2:93:0F:A0:8F:CE:AA:50:39:04:FD:9B:2C:36:B0:5E:9A
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3471
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/14B88300EDAA11EDBE91BB82C4F9AE02.roa
Signing time: Thu 04 Jan 2024 14:50:35 +0000
ROA not before: Thu 04 Jan 2024 14:50:35 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 142127
IP address blocks: 116.90.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 07:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13425 (0x3471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jan 4 14:50:35 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6596c5bb-191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:11:d2:7d:b4:13:a1:9d:4d:a4:08:80:e5:
69:80:59:c8:35:15:7a:d8:f2:48:09:f5:17:2e:f7:
e4:e0:c1:26:df:61:e0:98:a7:56:0f:d3:a0:0d:91:
cb:77:28:64:06:06:0e:e5:d7:20:6c:19:26:95:b6:
38:0a:a6:ca:e4:12:a8:96:f4:ba:b5:b3:69:3e:36:
d7:2f:43:03:45:5d:ef:f2:ff:fa:53:0e:0f:6c:2b:
e9:e3:e9:dc:2e:13:63:8e:ac:32:67:2d:2d:56:33:
9d:23:a6:ef:7a:63:cb:80:d7:5d:32:f7:13:87:4e:
fc:46:6e:58:43:98:8a:d9:d0:5f:d3:a4:5e:07:2a:
21:05:51:88:03:2b:71:4e:3a:d8:d5:72:f3:79:87:
46:5a:af:d0:55:0e:e3:5f:8e:c5:e1:cd:5f:a0:8a:
f5:aa:9f:ad:9e:2b:01:ad:06:97:1b:04:96:4c:f6:
21:6d:78:c4:af:52:0e:ee:5d:a3:c6:c9:9f:cf:19:
5f:5c:2f:75:1b:9b:28:c5:03:56:85:de:82:32:d9:
e7:fe:75:58:89:e4:69:09:ca:15:d6:86:86:39:2c:
fa:c9:11:d2:30:8e:68:22:c5:d9:45:0a:d6:cc:8a:
88:fa:00:a8:63:12:4e:68:99:73:1c:b7:05:ea:c3:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:99:C2:93:0F:A0:8F:CE:AA:50:39:04:FD:9B:2C:36:B0:5E:9A
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/14B88300EDAA11EDBE91BB82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.119.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7f:12:38:89:22:de:52:c9:a5:bd:a9:1a:07:68:a3:7c:d6:
3f:f2:ee:14:33:bb:87:da:f4:aa:9a:86:86:18:dc:7b:96:bf:
2a:c0:b1:4b:a6:65:2a:4c:4a:7b:61:c7:3d:21:24:b0:3b:98:
13:97:5a:e8:ed:72:a7:21:fb:82:cb:03:f0:52:1a:c3:e0:40:
0f:65:3c:bd:9e:e8:64:be:38:53:07:dd:23:0e:62:58:aa:55:
93:e9:65:a8:9c:f1:fd:1c:e7:95:90:51:1b:a1:6d:9e:1c:7b:
1a:ad:f1:48:3f:cd:c3:fd:24:47:6e:19:80:bb:91:1d:72:2d:
a2:a7:65:7c:14:a0:13:68:7d:a5:e7:de:03:14:03:5d:89:8f:
8d:77:f8:8b:84:87:e1:08:5e:63:aa:a2:56:d2:e1:fb:c6:d9:
b9:37:3a:45:ea:3e:ce:45:86:7b:80:ee:4b:a8:12:be:2c:b9:
c3:ea:fb:bb:fe:1d:59:98:8c:49:ca:48:dc:e4:89:e0:f1:30:
47:97:aa:b9:40:dc:77:5e:df:ad:f0:d3:e6:05:c2:40:46:c7:
29:49:dd:b5:f5:9f:37:18:42:f6:62:08:d3:56:e4:c3:2a:1e:
97:21:8e:7b:96:da:7a:c3:f1:74:f6:ac:7b:91:4e:20:c2:c9:
33:8c:72:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org