Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/F78E194C7F9F11EEB27F2334C4F9AE02.roa
File: F78E194C7F9F11EEB27F2334C4F9AE02.roa (raw, json)
Hash identifier: 0Nz2APBlXd+sMGnxjmfORc7ktU6rBWC+QJsJ3H5PPuY=
Subject key identifier: BA:FC:55:1B:FC:9F:FC:01:2F:89:99:63:6E:CA:B7:5C:B9:4B:7D:A4
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3420
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/F78E194C7F9F11EEB27F2334C4F9AE02.roa
Signing time: Fri 10 Nov 2023 08:05:52 +0000
ROA not before: Fri 10 Nov 2023 08:05:52 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 174
IP address blocks: 116.90.100.0/24 maxlen: 24
116.90.101.0/24 maxlen: 24
116.90.105.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13344 (0x3420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Nov 10 08:05:52 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=654de460-330e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:1c:38:25:31:55:97:bf:15:d9:1e:42:40:
a3:db:9b:a6:01:a5:e9:2f:86:bf:8a:fa:c5:28:aa:
c2:04:21:5c:2a:d5:d5:dc:8e:df:15:fb:d3:98:5e:
36:22:76:5b:83:2f:71:1f:75:27:5d:b5:7c:d4:2b:
08:ff:61:02:a7:a7:ec:cb:24:3e:86:6f:d7:73:27:
ba:c6:d7:57:75:97:ce:9f:69:71:84:0a:4b:dd:e4:
6b:5a:09:31:1d:92:b7:41:e8:ea:a8:5a:56:8d:56:
90:33:a2:93:d1:70:b2:a2:ab:c6:f5:2e:5f:62:37:
e5:7b:4f:67:58:d3:96:f3:c8:fa:98:52:75:45:46:
1a:40:39:8c:23:fd:d5:8a:51:71:2e:10:a7:81:af:
30:8f:29:6f:9b:95:2a:b4:45:fd:e8:87:82:3c:1a:
68:01:c5:c5:98:31:a8:7c:f6:66:42:63:e4:da:43:
8f:de:de:45:e4:26:33:f5:41:31:df:2f:43:03:7b:
67:9c:71:75:02:41:2d:c3:73:22:6c:5b:b2:cd:96:
e7:7f:f7:45:e4:8c:09:5e:d9:f7:ec:3e:55:59:00:
44:56:c7:f2:71:a0:b0:8c:d6:96:f3:99:d2:8a:8d:
10:a7:ba:1a:1f:29:f6:37:43:aa:7e:37:00:06:fa:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FC:55:1B:FC:9F:FC:01:2F:89:99:63:6E:CA:B7:5C:B9:4B:7D:A4
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/F78E194C7F9F11EEB27F2334C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.100.0/23
116.90.105.0/24
116.90.115.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1d:58:03:4a:ed:9c:e6:0e:e0:0c:32:0b:29:e3:0f:49:2d:
5b:c6:f6:ec:43:78:23:d3:27:4f:e6:e2:f8:a1:de:9c:25:40:
c7:bf:74:0f:b3:b8:95:f9:af:33:7c:a9:01:c1:28:b4:f7:dd:
ba:5e:2a:7e:57:e6:2a:c7:b0:85:39:58:05:f7:bb:36:ef:28:
88:e9:61:23:d2:7e:96:11:9d:47:dd:54:d4:95:c2:af:e6:fe:
6b:80:82:62:9f:20:e6:c9:f7:71:87:e8:27:79:b5:97:71:53:
2e:2b:8b:31:a4:89:f1:c3:0d:6f:f3:54:b7:6d:95:9d:a0:37:
ba:a3:1d:f6:f5:aa:5c:74:3b:05:28:b0:b4:aa:ad:a8:40:ed:
72:fb:a3:f2:4c:5a:e9:5c:57:1e:79:52:5d:b6:76:ac:81:dd:
ca:b3:9c:ed:48:cf:12:b4:67:b5:b6:67:01:c3:37:09:9b:31:
f4:be:15:d1:02:c0:f4:4d:81:3c:bc:22:67:73:8a:b8:97:3d:
e4:58:87:ba:1c:4b:97:b8:1b:69:4b:d3:33:5d:87:de:c3:cc:
6b:10:72:be:0e:01:13:26:53:93:9f:8a:96:ab:c7:fc:80:23:
bd:06:6c:da:8d:6b:51:bc:9c:5d:bc:94:68:4a:68:fb:2f:b2:
c3:d4:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 11:30:05 2023 by rpki-client on console-ams.rpki-client.org