Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EE9AED96AAED11EE8534AB68C4F9AE02.roa
File: EE9AED96AAED11EE8534AB68C4F9AE02.roa (raw, json)
Hash identifier: Z5T2EFMX9jbGKu66vxAy5pJbcz5EnJy8VrHF20MbgYE=
Subject key identifier: D9:33:07:DF:1E:DF:F3:E7:20:EB:6D:C1:AF:CB:7E:83:A7:9C:58:9B
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: E3
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EE9AED96AAED11EE8534AB68C4F9AE02.roa
Signing time: Thu 04 Jan 2024 10:42:18 +0000
ROA not before: Thu 04 Jan 2024 10:42:18 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.134.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 01:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jan 4 10:42:18 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65968b8a-b0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:56:8c:c2:02:c6:8d:97:a0:53:e3:a5:cc:
7c:0c:f4:ee:ee:9a:35:50:e3:c1:8d:4b:a8:ea:c8:
09:13:46:09:01:b2:bb:d3:96:b7:48:de:0b:a1:c8:
cf:e0:b8:30:4c:22:5d:c2:19:12:62:63:90:cb:38:
e9:12:dc:fe:65:12:42:9e:80:d9:04:f5:b8:a1:1d:
0d:62:38:08:5d:c7:e9:91:e3:54:87:ed:57:b3:2c:
b0:99:c0:68:2d:a3:c0:ef:45:67:73:7a:e1:7f:92:
4c:d9:5d:f6:be:09:f4:c1:7d:4f:7f:08:60:aa:2d:
ce:7b:51:34:11:43:99:e1:0d:09:d6:39:6a:72:2b:
e8:91:5c:0a:f6:b7:7b:b5:b2:9e:23:8d:e5:d8:d1:
7f:f9:51:d6:92:c1:cf:ac:0a:78:90:72:cd:1f:21:
d2:6e:75:b0:15:86:03:9a:d1:a4:5d:21:41:e9:d5:
d9:e3:db:32:6c:25:4c:6a:8c:9e:d2:5a:34:21:2d:
9f:d9:c3:7c:d6:e6:fa:a1:8d:03:30:5c:26:68:48:
e1:9a:a6:33:3a:09:c1:4c:5a:2e:1b:77:b0:f7:25:
e9:40:9d:8a:43:d2:9b:b3:04:eb:27:58:06:27:c6:
ae:cf:8e:2b:81:fa:51:fc:4d:42:88:5c:57:cf:dd:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:07:DF:1E:DF:F3:E7:20:EB:6D:C1:AF:CB:7E:83:A7:9C:58:9B
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EE9AED96AAED11EE8534AB68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.239.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1c:81:1d:0a:a5:ca:b7:f0:53:05:a7:4a:94:79:f4:81:e9:
b3:08:80:b1:e8:5b:cf:80:04:af:8a:5d:e7:5f:04:d6:e1:1e:
e7:85:fc:46:92:a4:4a:c8:3f:81:a4:0f:3b:b7:28:25:f6:60:
b3:78:e2:db:29:05:32:0d:c1:af:31:34:d5:17:18:6c:04:60:
78:53:ff:8a:38:59:01:ef:74:da:09:d3:9e:71:f6:be:f7:74:
ee:be:f9:eb:34:9c:bf:02:2a:4a:13:06:03:f5:a8:af:92:0e:
29:f3:35:c0:fa:ed:9c:8b:6e:4a:e2:7c:fe:e8:05:aa:f6:3b:
c2:a7:0b:dc:00:23:32:5d:81:6d:da:b7:43:8d:c3:3c:d5:8b:
5c:e0:72:da:17:fe:eb:d5:12:b8:e7:0d:ba:68:6d:04:be:80:
08:72:51:fd:bf:1d:8c:83:46:b2:e7:7a:74:6e:a9:6a:88:75:
fc:37:2c:12:23:ee:50:88:03:26:de:97:87:7e:00:78:13:61:
d9:87:fa:31:c2:b5:c1:57:6c:ea:50:22:02:96:0e:dd:89:ce:
08:8e:83:89:2d:71:1d:03:f4:bd:58:31:c6:a0:69:d1:ad:18:
6d:66:f7:a9:fb:a0:66:aa:ea:a2:e6:6d:71:bf:6d:03:eb:99:
cd:f8:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 04:49:06 2024 by rpki-client on console-fra.rpki-client.org