Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/EA9B125A084111EFA32D930DC4F9AE02.roa
File: EA9B125A084111EFA32D930DC4F9AE02.roa (raw, json)
Hash identifier: 8qrwjwBUPEGYCiOwvRNpuj2PBwyWIVpT1Tck+OTR5Bo=
Subject key identifier: FD:3F:66:31:25:24:32:2E:1B:0E:69:7A:67:D1:26:1B:AA:9E:AB:5C
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: 0B
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/EA9B125A084111EFA32D930DC4F9AE02.roa
Signing time: Thu 02 May 2024 05:07:47 +0000
ROA not before: Thu 02 May 2024 05:07:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152726
IP address blocks: 202.50.113.0/24 maxlen: 24
2001:df3:bec0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 May 2024 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: May 2 05:07:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66331fa3-951f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:e6:61:cc:6b:d3:45:dd:fa:bf:dc:ed:5d:
3f:cb:ca:7b:20:c7:63:ce:5f:b0:3f:6c:8d:4b:a9:
b2:13:ec:f5:ee:f7:2f:b6:25:ec:52:0d:19:68:e6:
d6:87:48:8f:27:80:a9:8c:4d:e7:ec:45:c9:71:e7:
ab:90:7a:4c:b7:55:dc:8f:ad:b5:3d:5c:bb:f9:92:
ed:ad:6a:94:86:39:1e:a9:20:c8:8e:fe:0e:00:07:
9a:96:bc:8e:f2:d9:e6:87:48:ba:28:84:76:8d:23:
92:41:fe:b2:99:d5:60:22:34:d9:37:3c:ac:ee:9d:
9a:d7:20:7d:d4:ef:66:db:c6:b4:55:29:c3:6a:76:
a3:dd:b8:3b:5c:00:b4:97:a1:20:bd:48:19:cd:00:
6f:55:fa:16:e9:fa:3c:37:27:e6:03:91:38:af:ae:
a0:17:29:0f:06:4f:24:87:8a:2a:cc:00:ca:e0:85:
d7:35:ad:02:88:f1:a1:77:9d:7a:1c:92:37:a9:ae:
22:f9:d3:55:8e:a1:f7:94:f7:bb:08:bd:cb:41:62:
35:07:8f:50:6d:08:f3:16:a1:f3:11:32:79:bb:3d:
4c:dc:a9:f6:0f:42:27:ea:74:e4:eb:37:d9:28:a4:
59:2f:77:fd:74:58:ad:d0:0d:50:5f:97:00:51:aa:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:66:31:25:24:32:2E:1B:0E:69:7A:67:D1:26:1B:AA:9E:AB:5C
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/EA9B125A084111EFA32D930DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.113.0/24
IPv6:
2001:df3:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
34:ba:e5:07:95:b0:d9:c9:25:cd:42:c5:15:93:52:5a:cf:d2:
db:28:f1:b5:8a:cd:5f:5b:a0:ef:47:3c:7c:2c:a5:a1:d5:a0:
b5:2d:29:a6:32:99:12:96:d2:3c:63:d0:66:e9:c2:a0:d2:60:
30:3c:41:4e:7d:0c:a0:d2:2c:fd:d4:a5:75:3c:14:00:d5:2e:
ed:93:09:a1:a1:57:ba:d1:8c:74:ba:16:1f:4a:b4:2d:c6:59:
b1:7f:f1:54:53:32:6b:98:1b:26:cb:cc:2c:4b:5d:dc:dc:22:
03:24:da:f7:07:98:2a:c8:ac:a2:c9:9a:d0:db:56:82:1f:11:
43:05:f8:f7:b0:f9:b2:f1:23:7c:71:91:7a:7c:35:c7:24:7d:
79:fd:d2:15:9c:9e:bb:fa:03:4e:62:3c:3b:a5:4d:b3:54:1f:
c2:41:37:d8:a7:8d:98:44:b2:d0:cf:48:8f:51:43:06:21:22:
66:ee:ae:21:d0:2c:df:38:5d:5b:ab:18:09:2a:94:ec:99:4d:
f7:66:e4:b8:f5:0d:6e:c7:46:1b:91:84:02:d6:40:cb:1e:94:
da:5e:d0:41:e6:3e:9c:51:47:40:96:4c:ea:cb:f4:69:32:62:
ce:51:c4:82:29:5d:8f:c8:2b:79:dd:3c:be:9f:5e:84:f5:30:
4c:4f:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org