Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/45337A141FDE11EF89EC375DC4F9AE02.roa
File: 45337A141FDE11EF89EC375DC4F9AE02.roa (raw, json)
Hash identifier: RxkclmYLKJ/Sp4b4vDMIbuf1WbI9Sivu4AmA3khhHzQ=
Subject key identifier: 9D:C3:A3:31:84:3B:9D:F9:0C:84:FD:75:DD:4D:95:6C:3C:06:F8:BA
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: 22
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/45337A141FDE11EF89EC375DC4F9AE02.roa
Signing time: Sat 01 Jun 2024 06:14:58 +0000
ROA not before: Sat 01 Jun 2024 06:14:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 215177
IP address blocks: 202.50.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 18:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: Jun 1 06:14:58 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665abc61-2e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:cd:ec:4f:c0:c1:63:14:09:21:1b:9b:7a:
3d:62:8d:d7:0b:6b:61:af:4b:e3:be:73:ad:7d:08:
5e:d7:83:b9:16:32:c3:fa:57:ef:16:4e:a5:b5:d5:
4a:14:31:89:92:1e:9a:4d:17:b7:31:ba:c3:76:a1:
82:c0:c7:2f:91:24:7d:25:a5:83:78:d1:90:a0:2a:
ac:6c:d8:80:9f:47:12:29:a6:71:92:68:b8:ed:0e:
ce:f4:1f:8e:b6:08:ba:01:78:a8:86:27:05:71:70:
b1:96:15:bb:82:44:4a:5c:72:b1:d3:45:a3:91:9f:
67:8b:bd:63:d4:2f:e1:91:95:1f:b8:f6:61:6f:36:
c3:1a:ce:ef:dd:57:77:ab:9e:36:00:53:85:9f:7e:
7a:09:66:2d:53:9f:36:75:87:79:85:69:a8:70:f2:
75:00:bb:52:03:ed:41:04:af:25:8c:c2:ab:10:9a:
0f:83:90:25:59:98:b9:c7:ae:7f:eb:6d:22:55:d5:
64:48:a0:e9:4e:dd:ee:8f:64:29:da:8a:a2:40:95:
5d:51:ad:1c:c9:f6:23:7d:5b:8b:e8:16:50:46:0b:
8b:c3:6b:70:d1:12:cf:50:cf:c2:76:9f:2a:3c:5e:
25:cc:58:48:47:10:21:6d:47:a6:77:f3:04:1e:3e:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:A3:31:84:3B:9D:F9:0C:84:FD:75:DD:4D:95:6C:3C:06:F8:BA
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/45337A141FDE11EF89EC375DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:89:20:b5:9d:07:83:85:1b:ee:5f:45:e8:52:d4:5f:80:3a:
56:9e:88:8b:14:99:33:c8:f2:c6:96:63:18:1f:ab:c8:4c:40:
bc:5b:52:88:c1:a0:16:5b:e7:59:cf:d9:17:42:c3:84:9f:08:
21:e6:8a:6d:2c:76:0d:bf:90:35:be:ec:d0:22:1f:27:83:32:
96:52:c0:d3:d9:84:00:0c:5e:76:a9:68:17:94:24:85:7f:ae:
a2:ad:69:90:6b:75:f9:de:67:5d:c9:b4:39:c7:2f:4a:0a:f6:
d0:a5:8e:5f:77:ec:78:a9:73:25:89:a2:8c:03:a8:c4:81:bf:
54:26:de:d0:17:17:9c:55:d3:f3:f8:86:ae:cc:ec:8b:51:ea:
e7:90:e4:85:c7:7c:5e:8d:cf:8c:94:b5:61:6e:cb:fa:ab:9f:
13:9a:8b:70:ba:01:8c:ce:a8:48:59:eb:84:d0:a5:b9:13:c7:
42:42:7e:16:a0:ed:a0:ce:63:b8:c6:18:81:6b:7a:06:40:06:
b6:f3:68:63:69:7a:0f:da:f2:04:58:6f:5c:c1:2e:25:cc:a0:
ad:01:4d:53:0f:df:c5:39:58:f8:90:91:09:ed:0f:9f:eb:ac:
a0:cd:4c:32:10:3d:3b:15:d9:0b:5c:b4:e1:20:4f:34:1f:ea:
e6:30:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org