Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/253F13182E9711EFB53F6C6BC4F9AE02.roa
File: 253F13182E9711EFB53F6C6BC4F9AE02.roa (raw, json)
Hash identifier: xNN8zqeWEMKZIHQkkOFReAt7bNFvGFnMa7Dv3tgRvXM=
Subject key identifier: 64:87:8A:89:F0:12:95:E5:9D:62:FC:04:03:78:D7:71:7B:0E:35:FE
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0181
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/253F13182E9711EFB53F6C6BC4F9AE02.roa
Signing time: Tue 03 Sep 2024 07:13:38 +0000
ROA not before: Tue 03 Sep 2024 07:13:38 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10103
IP address blocks: 202.134.242.0/24 maxlen: 24
202.134.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 09:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Sep 3 07:13:38 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d6b722-99d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:da:d6:70:27:a8:78:fc:cc:26:fc:5f:de:
90:2d:56:3c:62:75:01:4b:46:a9:b2:bb:21:83:22:
19:43:f0:c0:d6:6e:5e:7c:87:e1:0c:a4:c5:b7:c5:
be:ff:5b:82:71:24:ef:88:38:64:4a:0a:5a:65:22:
f9:15:9e:90:d8:b8:4d:10:40:e4:93:a5:ea:cd:0b:
2b:cb:ac:2c:09:17:73:84:6d:2f:30:c1:c7:06:14:
a7:a7:c7:6b:19:68:b6:63:20:f7:fb:0d:82:68:9b:
8f:4c:3c:e7:c5:9d:bb:9a:37:09:83:b5:5b:33:c4:
aa:99:7e:b8:4f:27:cb:33:1e:15:7e:6b:24:10:6f:
8c:8d:01:9f:fc:45:9d:da:12:a9:79:0e:cb:5f:f1:
6f:15:e1:fc:4a:ee:ac:52:b3:db:15:69:45:20:99:
04:e8:8e:fb:0f:aa:f6:78:da:1c:56:65:dd:94:05:
08:9c:c8:1c:b5:c8:88:a6:fb:16:73:4c:dd:8a:83:
55:d1:ec:91:b6:5e:13:b2:8e:64:cc:e0:63:5a:42:
1e:06:55:b7:8c:d0:31:e6:8e:0a:a6:4f:30:2f:99:
56:86:82:6e:88:d0:0a:af:ea:f2:88:73:f9:1f:ed:
14:cd:c8:45:9f:e2:95:9b:4b:13:04:b4:bf:0a:c4:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:8A:89:F0:12:95:E5:9D:62:FC:04:03:78:D7:71:7B:0E:35:FE
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/253F13182E9711EFB53F6C6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.242.0/24
202.134.249.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7f:9e:8e:29:23:98:10:53:ba:f1:0d:f7:04:90:65:6d:6f:
73:e8:00:51:03:9c:4f:ac:b9:19:26:b0:25:17:9b:84:13:ad:
6b:6e:36:8a:48:86:ba:38:68:12:09:d7:7c:af:c8:fd:cb:45:
08:94:fa:27:c9:49:1e:69:0a:53:71:f4:f3:c2:11:96:85:e3:
f1:40:b2:1b:08:c6:b6:d5:15:27:cb:c3:06:68:2e:b1:98:d4:
31:60:d9:c1:4b:45:71:46:a7:c1:7a:4d:98:92:39:f7:20:aa:
a4:7f:85:b1:a4:e6:fd:6b:03:d0:e3:fa:7a:dd:75:a7:4d:eb:
e8:e1:4c:e1:f8:d6:14:fd:dc:cd:f3:e9:f7:5f:cb:b4:8f:f5:
c4:f1:26:83:7b:8d:6a:f6:9c:8f:88:7d:04:ec:fe:44:59:38:
3f:9d:cb:f7:7a:0c:d8:6a:c0:41:2c:b3:9c:29:4e:53:12:6d:
73:ec:4f:27:e9:b6:3c:5c:56:28:f2:d3:5e:78:ec:83:7e:e4:
15:49:78:60:b4:5c:aa:7b:c5:a8:46:c5:d2:2c:cb:91:cd:56:
10:7b:4f:92:d9:2d:fd:7b:82:25:d6:6f:e2:e1:43:35:db:04:
73:ad:60:d6:a8:40:20:1b:f7:68:a0:aa:60:d1:d5:3c:52:74:
85:16:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:07 2024 by rpki-client on console-fra.rpki-client.org