Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/7C1665022DF711EE8B7A6210C4F9AE02.roa
File: 7C1665022DF711EE8B7A6210C4F9AE02.roa (raw, json)
Hash identifier: NTdCytfTbA1x9R+t+Mz80Pkt/I1hjFJbUSOK4lQmA+M=
Subject key identifier: 9C:04:A8:F1:BF:92:59:5F:10:FC:9F:4C:BC:CF:D7:C9:EE:B1:BF:A1
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3472
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/7C1665022DF711EE8B7A6210C4F9AE02.roa
Signing time: Thu 04 Jan 2024 14:50:36 +0000
ROA not before: Thu 04 Jan 2024 14:50:35 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 142559
IP address blocks: 116.90.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 07:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13426 (0x3472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jan 4 14:50:35 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6596c5bb-30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:e3:29:7a:45:94:69:d0:9b:7a:c4:10:25:
a8:72:24:e4:c8:97:87:2a:92:5d:50:a0:ff:ea:f9:
86:78:ce:52:c1:1a:ac:d4:8d:98:69:50:e0:8a:c4:
d4:59:00:fc:8e:b1:c1:a1:65:c0:25:eb:8c:75:f2:
f2:9e:c8:10:25:15:63:a2:68:6d:3f:04:4a:f6:1d:
38:3e:fd:9d:e5:21:ee:2e:9e:89:5b:e2:1b:e3:09:
69:d9:0c:93:31:f3:46:89:3a:d5:1f:b3:c7:1b:59:
f0:60:d9:6c:ed:85:a6:27:a0:e4:93:b5:c9:20:8c:
2b:6b:c4:99:9d:e2:a3:97:86:33:77:10:af:51:f0:
5c:8b:61:c6:98:1b:d0:32:bb:39:08:ca:6d:ab:a7:
08:db:0d:2e:b1:f4:66:0c:af:85:55:92:d4:50:fb:
9e:7c:0c:18:3d:a3:ca:72:53:9b:e9:92:67:75:fb:
5b:4a:0a:9f:8c:38:b9:8a:6a:2c:7f:b0:34:fb:47:
6d:2d:03:8c:ab:4c:8d:a0:4c:d1:6f:8a:b3:83:9a:
33:f0:2c:01:ed:28:51:3d:2a:72:57:b4:b0:a5:08:
fa:03:f8:41:60:b8:aa:c6:13:66:98:83:c5:1c:92:
69:3e:52:27:a1:9d:97:4d:e7:8d:51:5b:2a:11:01:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:A8:F1:BF:92:59:5F:10:FC:9F:4C:BC:CF:D7:C9:EE:B1:BF:A1
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/7C1665022DF711EE8B7A6210C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.119.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ec:20:a8:2e:f8:ed:4f:58:c9:45:58:68:8b:a9:40:f0:92:
46:26:67:2d:70:e3:4d:d9:ee:f2:97:fd:b3:4b:65:5c:90:8e:
f7:9f:9c:3d:2b:c3:ff:c0:e6:43:ca:20:7b:99:c0:30:12:08:
01:e8:4c:be:95:0d:08:41:af:2a:20:47:f7:57:0f:9c:38:92:
aa:6b:aa:0f:89:81:46:03:6e:23:26:d9:52:86:03:fb:5c:ed:
52:e8:2d:9c:8f:fd:6c:c0:b5:c0:2c:fe:7c:cc:68:45:b9:79:
ac:cb:d1:0a:81:16:90:ff:3b:8c:58:d9:68:78:80:1f:a5:2f:
87:ae:c8:4a:7e:18:98:73:bf:8b:14:3b:1d:09:8e:48:e8:ec:
e3:3c:67:5e:c5:98:b8:e9:57:e8:5b:e5:77:bc:93:73:05:69:
8d:4d:1a:62:72:aa:07:da:29:67:3f:b3:17:72:fe:6f:f7:3a:
8b:5c:2c:39:75:25:f2:18:31:23:ce:a7:cc:44:11:52:c4:1b:
ed:0f:28:2c:3b:48:e0:ba:17:31:e5:73:b6:24:38:63:9c:d6:
0b:b8:d9:c4:ec:88:60:42:e5:57:f2:d6:0e:a0:5a:f2:b4:13:
47:f8:15:a2:86:21:5b:79:a3:ce:c1:06:39:12:b9:e8:f3:4b:
6f:ca:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:42 2024 by rpki-client on console-fra.rpki-client.org