Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/1BEFDD6E7B2411EEA8F51645C4F9AE02.roa
File: 1BEFDD6E7B2411EEA8F51645C4F9AE02.roa (raw, json)
Hash identifier: BHXhAggRllpXwjzg5YzAJfAYIYNNxIwI59drMkyXPsI=
Subject key identifier: A2:1A:96:BE:71:AF:8C:04:E9:93:9A:F5:0E:BC:CD:84:06:49:D7:CC
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: B5
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/1BEFDD6E7B2411EEA8F51645C4F9AE02.roa
Signing time: Sat 04 Nov 2023 15:09:11 +0000
ROA not before: Sat 04 Nov 2023 15:09:11 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.134.233.0/24 maxlen: 24
202.134.235.0/24 maxlen: 24
202.134.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 00:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Nov 4 15:09:11 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65465e97-b328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:61:57:e2:bd:03:54:84:85:b5:15:a9:50:
34:c6:1f:42:88:43:eb:a3:a3:e2:9c:ec:65:b4:b5:
29:22:4b:5d:2e:1d:03:ee:f6:02:53:18:44:32:ce:
6e:d2:2e:30:e1:4d:8a:d3:1a:a4:4f:bb:f0:ba:89:
5e:fb:5c:65:68:d8:2e:17:4d:ed:54:59:74:b6:b6:
f9:ad:f9:5f:b7:d1:38:0e:4e:dc:e5:00:38:f7:0b:
b7:2b:61:98:7f:96:a2:5d:e2:65:e0:08:3f:be:59:
77:31:ce:84:27:f4:b1:92:39:b6:d6:2d:65:28:da:
d7:fe:3d:9f:8c:ce:55:2b:0d:9f:d7:47:d8:aa:75:
40:05:19:37:bf:bd:1e:5e:76:54:34:a5:b9:ec:59:
79:f2:00:a3:56:28:ee:a1:c1:7c:78:11:83:91:ef:
11:0e:aa:e3:08:33:11:80:7d:d7:79:6d:e5:c4:16:
37:ee:cb:f3:47:54:b0:0c:c7:49:4d:ac:e1:31:ce:
f5:c5:e4:2c:74:b8:83:b1:3a:d0:33:e9:b7:3b:cc:
87:ff:7e:5c:bb:47:56:fc:ff:d4:16:79:36:d9:42:
ee:08:e1:ca:66:04:7b:b2:ef:f1:1a:ea:65:51:d1:
f6:31:b1:21:d6:d8:9b:b4:72:00:cf:93:66:8a:23:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:96:BE:71:AF:8C:04:E9:93:9A:F5:0E:BC:CD:84:06:49:D7:CC
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/1BEFDD6E7B2411EEA8F51645C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.233.0/24
202.134.235.0-202.134.236.255
Signature Algorithm: sha256WithRSAEncryption
86:5b:78:2e:2c:11:65:e9:cd:26:16:a9:15:75:03:1e:e0:30:
52:b4:eb:f8:ad:e5:8b:b7:ab:05:95:83:a3:0c:22:f8:2b:35:
7a:52:4c:34:9d:81:fb:af:f8:10:4b:69:28:91:ba:0f:24:27:
c1:73:3e:54:35:bb:10:a4:be:70:e8:3a:0c:e7:65:31:94:16:
37:5c:3b:9a:b4:22:3c:47:54:9f:c6:f4:cb:c8:90:d8:80:19:
e8:0d:9f:0a:b8:32:41:67:72:bd:39:69:6c:5d:bc:b1:0f:8d:
aa:d7:36:57:b1:d2:02:f7:01:79:fa:cc:43:39:cc:16:f7:0d:
b7:fe:28:7d:07:0c:29:a9:88:4c:52:94:a8:56:eb:8e:82:e4:
83:d9:7d:a5:17:a3:3c:17:e6:0d:1a:21:72:1f:e7:13:dd:2a:
87:88:e0:9d:1a:db:ee:1b:ee:d6:96:70:4f:73:f9:3c:78:5c:
68:fa:46:aa:b6:af:99:b0:92:a8:21:b3:85:9e:80:34:cf:b2:
b8:ce:52:18:8e:ed:e2:a8:fc:5e:13:82:d5:e8:c5:46:15:86:
d0:28:37:14:e6:76:8d:10:5b:e4:a9:23:62:f0:8c:e9:2e:f9:
74:a6:f7:d2:2f:96:86:61:bb:f9:2f:51:3e:7a:f1:83:ff:53:
3c:c4:af:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org