Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/C0778BA2084111EF8FCC5D0DC4F9AE02.roa
File: C0778BA2084111EF8FCC5D0DC4F9AE02.roa (raw, json)
Hash identifier: 8ZvtP0tuwvI4jNr0/VG4zS+E4RorURhYr6nYwYoP+vc=
Subject key identifier: AB:7B:56:0B:F0:DE:D5:16:19:48:FD:16:B3:BE:F5:EF:C8:08:FE:9F
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: 08
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/C0778BA2084111EF8FCC5D0DC4F9AE02.roa
Signing time: Thu 02 May 2024 05:06:37 +0000
ROA not before: Thu 02 May 2024 05:06:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 202.50.113.0/24 maxlen: 24
2001:df3:bec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 04 May 2024 14:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: May 2 05:06:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66331f5c-014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:f7:8b:a3:3f:93:50:ce:33:5c:8e:8e:ad:
09:89:5e:b4:4e:83:c7:77:4d:c1:fc:b2:5b:7f:66:
ad:b8:7e:59:a2:bf:01:f9:d2:72:91:c3:83:95:5c:
bf:2a:c1:cb:d7:67:ad:0b:4e:a0:57:1e:5c:46:6a:
1d:b3:de:67:35:3f:d4:5e:f3:a8:17:be:52:e1:f0:
7a:ce:34:c4:51:a9:7d:e7:76:da:38:e1:f2:3b:6f:
53:ef:69:ac:c4:7e:61:d5:89:cc:06:be:0d:97:d5:
74:cc:e5:c0:e3:05:9a:66:cd:20:df:b6:f6:4e:0a:
e8:a5:df:96:ec:9c:57:47:2f:7b:eb:1c:0b:52:fc:
7a:21:b7:40:02:cb:41:20:e8:66:c7:be:53:a6:2f:
ce:52:1d:d2:a0:b9:6c:e1:0a:c5:67:0c:a8:27:19:
e5:db:54:02:4c:00:8b:ca:f1:2d:f9:1a:14:09:cc:
89:b9:34:b6:12:aa:bf:01:bb:37:91:e8:46:67:ad:
c0:88:20:08:42:4f:cc:1f:ca:19:a7:c2:71:60:fb:
01:60:c6:85:4f:a4:9b:9d:62:01:36:e0:6f:9b:16:
fd:77:ab:22:d2:5f:64:df:e8:61:ff:cd:0f:c8:a0:
f1:1d:18:77:7d:25:63:ff:53:e9:ef:9e:1d:00:2e:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:56:0B:F0:DE:D5:16:19:48:FD:16:B3:BE:F5:EF:C8:08:FE:9F
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/C0778BA2084111EF8FCC5D0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.113.0/24
IPv6:
2001:df3:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
43:2d:8f:01:59:55:9e:40:29:f1:c3:a9:5c:fe:53:70:6a:fd:
f4:d1:97:af:4a:fd:70:1c:40:3a:1c:18:e9:fa:8f:5b:6e:09:
5b:c9:97:f9:a5:b6:0e:71:96:f2:75:cf:ec:00:87:c5:41:7d:
68:bc:06:63:41:4f:c5:47:84:61:1d:f8:67:c6:05:c1:80:94:
12:d1:b9:2d:9d:a9:e3:e3:12:84:cb:73:6b:00:2b:aa:00:bf:
be:35:e2:b1:a1:18:84:58:9b:c5:95:d9:55:e1:07:42:b7:f1:
a2:58:22:16:93:a2:b3:6f:a6:98:74:26:b6:c8:bf:38:35:79:
0d:53:a9:68:f1:ae:c0:ad:75:c9:4b:7c:b8:02:69:07:25:d9:
9e:ab:41:16:93:c8:69:34:53:ae:d9:c0:9a:36:93:17:99:5b:
2a:47:6f:9b:f2:7b:77:19:db:ac:5e:fa:fc:d5:96:cb:91:80:
ad:40:fe:2a:90:11:62:52:48:05:b5:02:19:d9:a5:1e:1c:b8:
28:e7:0c:61:b4:5a:b2:b5:fb:30:af:ac:8b:ff:4a:eb:67:1b:
af:45:7e:8a:2a:0a:d4:b0:9a:87:e9:9e:f4:bc:48:24:9d:d3:
1c:eb:d2:4c:23:ab:9f:07:5e:0a:18:cc:57:0a:a5:2f:5e:50:
11:bb:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org