Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D571EF8806D511EFB6CFDF2DC4F9AE02.roa
File: D571EF8806D511EFB6CFDF2DC4F9AE02.roa (raw, json)
Hash identifier: BjvZpPN/jaHpj21NLP9DYQbYmO8mmSNe5X98v4T2WO0=
Subject key identifier: ED:31:5B:87:B9:9A:F2:6E:08:F2:BA:EF:2E:22:4B:3F:1F:2E:50:54
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 34EB
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D571EF8806D511EFB6CFDF2DC4F9AE02.roa
Signing time: Tue 30 Apr 2024 09:41:35 +0000
ROA not before: Tue 30 Apr 2024 09:41:35 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 140045
IP address blocks: 116.90.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 May 2024 08:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13547 (0x34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Apr 30 09:41:35 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6630bccf-902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:00:ac:e2:b7:0b:6e:2a:2a:74:bc:3f:fa:
ac:c7:ad:f3:27:ab:83:26:42:a2:23:ce:b9:6b:aa:
16:7e:97:b0:fa:24:76:70:4c:eb:04:bd:bb:b8:36:
99:7a:13:76:f2:db:3b:22:38:c3:a7:ff:f2:29:fa:
e3:1c:dc:df:37:0c:b0:0c:12:d9:1a:bc:84:c1:e4:
a0:1c:4d:96:d8:42:bf:b1:62:81:0e:16:cc:68:3c:
c7:a2:e3:2a:0c:dc:2b:94:ec:9a:bd:b9:16:4e:29:
55:06:c4:e3:9b:3a:f1:22:6c:47:f6:06:95:99:25:
d7:11:d3:05:1b:87:40:f0:a1:28:65:11:8d:b0:1d:
9c:fe:2a:8d:6e:f4:0c:c7:f5:f0:c1:a6:65:f1:e6:
23:c3:85:36:e4:0c:21:1f:fe:20:5e:ec:d1:23:07:
b7:99:9d:12:7c:29:57:db:c6:f1:74:68:37:c2:fc:
8c:b3:87:97:77:e4:a6:58:fe:52:d7:19:bd:4a:84:
72:b5:74:19:62:9c:db:66:d6:10:7f:21:37:47:3a:
5a:21:49:17:25:71:a3:94:58:2a:d7:98:f9:f7:93:
ab:e9:44:3b:23:8c:88:6d:0c:3d:2f:1b:50:19:d5:
ce:6b:07:03:65:4e:53:01:fe:81:9e:66:08:01:3e:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:5B:87:B9:9A:F2:6E:08:F2:BA:EF:2E:22:4B:3F:1F:2E:50:54
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D571EF8806D511EFB6CFDF2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.116.0/23
Signature Algorithm: sha256WithRSAEncryption
83:26:7e:87:a7:e2:a4:be:63:f5:2f:25:c1:fd:8a:46:fb:42:
5f:1a:60:fa:e9:07:18:61:ee:cd:c3:7c:b6:0e:72:3b:53:71:
33:c6:af:94:10:4f:da:c4:2b:4b:12:e8:22:9e:93:7a:40:b1:
7e:0d:d4:1d:c1:ca:5d:02:01:20:28:52:ae:08:ef:cf:97:af:
67:4c:e7:ed:ae:fc:e7:34:0c:79:c8:c5:5f:1c:e0:90:98:74:
24:da:ff:78:4f:44:5f:5d:1a:e8:97:4e:cd:d5:0f:c6:95:42:
06:43:e5:8c:0f:cf:dc:a8:95:89:53:34:91:e2:e1:1e:d0:ae:
0e:31:9a:ab:ed:cd:b4:59:e0:02:be:7e:33:2d:ae:8d:bc:c8:
fa:73:f3:60:4c:8f:25:49:ed:16:92:82:ba:ec:ba:fa:8b:9a:
8a:b2:a2:ee:86:7d:3b:6b:e8:3b:bc:b4:94:0c:0d:62:f2:ab:
bc:f6:2e:03:9d:8a:5a:6f:ce:9c:7b:da:e3:dc:2b:5e:0b:52:
8d:88:53:51:b1:6c:1d:af:c8:3c:00:dc:e5:41:99:02:34:c2:
fc:31:19:8f:a4:2f:0b:42:56:f5:a6:3a:e0:ff:6c:58:36:b7:
2a:f9:be:e9:1c:5b:b5:ef:ad:73:23:7b:3a:82:51:f9:7b:25:
72:f2:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:31:43 2024 by rpki-client on console-ams.rpki-client.org