Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/7A273C887C3C11EEAA6B3444C4F9AE02.roa
File: 7A273C887C3C11EEAA6B3444C4F9AE02.roa (raw, json)
Hash identifier: wIet8qVARkftBEd3mxhkMUk7/sk1/9zS7v0DyLKGZT8=
Subject key identifier: DA:5C:27:52:22:99:DF:E5:E9:B1:CA:11:66:42:73:D8:3F:4A:5E:52
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: B8
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/7A273C887C3C11EEAA6B3444C4F9AE02.roa
Signing time: Mon 06 Nov 2023 00:36:09 +0000
ROA not before: Mon 06 Nov 2023 00:36:09 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.134.235.0/24 maxlen: 24
202.134.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Nov 6 00:36:09 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=654834f8-8821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:ae:22:62:a5:9a:bf:e7:f7:87:c5:70:48:
0c:6e:5a:cf:96:d4:bf:07:1a:54:dc:4d:26:52:07:
35:9b:77:8b:c4:8e:7a:e0:9a:f2:d6:a0:07:bb:58:
4c:89:f5:69:08:c7:cb:c3:a1:63:13:5f:7a:80:f0:
4b:1e:01:7f:7f:c8:48:26:da:79:97:4b:9b:0a:2a:
34:01:bc:40:2e:f5:23:0f:03:d1:57:95:3b:b6:7c:
44:49:53:da:31:c7:22:09:a3:d7:66:ba:a0:b3:88:
0e:99:0c:c5:e4:d1:fd:11:b8:d9:f6:5a:a4:97:51:
5f:65:37:2a:29:16:8e:87:74:22:cc:7c:5b:ae:ed:
69:10:b1:79:ca:c6:bb:7d:1e:00:93:7d:9a:af:ba:
e1:f6:7b:8f:df:1a:37:71:1d:34:c8:6a:68:b1:60:
40:19:b0:91:38:5b:cf:e9:40:80:cc:5c:88:c8:9e:
3c:78:e4:3b:85:2d:99:ac:ab:c1:9a:52:ea:a2:d7:
f0:78:d0:e7:19:e0:c7:e8:f2:06:5a:95:d7:8c:5f:
38:80:a1:48:17:99:1f:83:6b:2e:19:fa:3b:a9:03:
f6:3d:7d:c9:53:65:d3:6e:a8:4d:44:02:81:89:ae:
e0:f9:2c:bd:a6:4e:98:98:16:d1:dc:d3:1e:8c:bd:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:27:52:22:99:DF:E5:E9:B1:CA:11:66:42:73:D8:3F:4A:5E:52
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/7A273C887C3C11EEAA6B3444C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.235.0-202.134.236.255
Signature Algorithm: sha256WithRSAEncryption
9b:4d:82:2d:f6:a4:74:ea:fd:17:81:df:2a:f2:81:f1:41:1a:
ea:6b:ae:85:6e:05:cf:78:66:76:e0:2c:10:b1:53:39:3a:24:
45:bf:47:7b:61:1b:fe:05:a9:fe:08:3a:3d:dd:a6:0a:18:a8:
b1:71:1f:0e:32:70:be:dc:68:6a:5f:de:c8:87:5a:d1:a4:11:
e4:e9:41:6d:2e:56:79:9d:2e:83:1d:48:d5:bf:29:1e:77:bc:
ad:79:44:fe:cc:9b:52:83:64:07:07:29:47:8b:63:00:32:72:
86:90:90:24:03:8b:a0:f9:75:bd:53:06:71:a4:b2:57:84:3a:
37:4c:94:c0:7e:34:7d:e0:29:af:9e:cb:ba:64:d3:c8:c2:74:
47:f3:1e:13:80:11:18:32:b9:11:07:66:d6:1c:dd:6c:f1:28:
5d:cc:4c:73:a5:67:af:97:3f:0f:7d:92:bc:07:8a:09:9c:3c:
c2:1e:ec:d6:5f:0c:79:66:af:ac:ba:19:3a:bc:d7:5f:52:d1:
bd:e4:ac:74:d7:86:ef:3c:3b:b3:bd:b3:34:20:ba:3b:b7:39:
6c:0f:68:0d:ae:b3:53:dc:2f:d3:ee:aa:76:c3:cd:6f:52:93:
23:4d:03:43:92:11:09:0f:0f:7f:eb:66:4e:a1:ea:e7:40:1d:
ea:74:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 23:11:11 2023 by rpki-client on console-ams.rpki-client.org