Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/40AEFA52F63C11EEB599593AC4F9AE02.roa
File: 40AEFA52F63C11EEB599593AC4F9AE02.roa (raw, json)
Hash identifier: E8HrgNs6ifBb+hfGlfc3L3Mwe1fz28BLSa4CFhUu9gw=
Subject key identifier: A5:7C:25:F6:49:80:03:07:1D:F9:DC:02:A3:64:75:A1:D3:2A:70:19
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 12
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/40AEFA52F63C11EEB599593AC4F9AE02.roa
Signing time: Tue 09 Apr 2024 06:44:09 +0000
ROA not before: Tue 09 Apr 2024 06:44:09 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152644
IP address blocks: 202.47.134.0/23 maxlen: 24
2401:89a0::/32 maxlen: 36
Validation: Failed, certificate revoked on Fri 10 May 2024 02:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: Apr 9 06:44:09 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6614e3b9-c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:ac:dc:32:4f:11:89:17:2c:ef:c8:52:8f:
0c:42:91:ba:c0:9f:c3:2b:51:ec:de:ef:22:51:20:
4e:bb:5d:f6:de:45:fc:cc:b0:93:fc:9f:df:11:3d:
e0:f7:24:93:0d:ef:06:69:01:f2:ae:1a:ed:05:eb:
6d:1c:72:17:31:22:80:47:15:7e:0b:e6:e6:09:04:
9a:56:8c:1e:59:93:42:d8:3d:8a:1e:bd:8d:dd:77:
33:5d:a4:42:71:85:b3:1b:ba:55:ef:f2:aa:5a:6a:
d4:4d:d5:f7:be:f7:e7:c7:bd:5d:c9:71:7d:66:b2:
63:66:88:cf:76:63:10:15:9a:71:21:7c:ea:ed:ea:
6d:3d:7f:86:b0:4b:2b:dd:16:12:70:4a:ea:d0:d1:
dd:ad:dc:f6:35:d1:db:4c:76:86:79:d2:a4:ba:cf:
2a:fb:77:53:fb:e0:d0:9d:4d:48:68:45:68:a1:f2:
27:0a:34:2e:75:a2:4f:b3:56:ad:c6:35:1d:2c:71:
56:53:1b:8d:9c:a3:aa:8f:88:c0:d5:92:46:49:20:
f8:c9:be:01:db:c7:b0:a1:05:85:f9:dd:8b:1d:6d:
53:de:c4:73:86:18:65:1e:9e:09:82:d0:9c:94:3e:
4a:0e:d9:ef:4f:40:2a:00:8d:74:cb:b0:0e:d0:db:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:25:F6:49:80:03:07:1D:F9:DC:02:A3:64:75:A1:D3:2A:70:19
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/40AEFA52F63C11EEB599593AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.134.0/23
IPv6:
2401:89a0::/32
Signature Algorithm: sha256WithRSAEncryption
20:4d:00:db:74:0b:a0:27:7d:41:23:e0:08:1d:98:55:29:3c:
79:b4:94:c6:c7:42:72:3e:81:d3:6f:8b:39:33:eb:50:a1:14:
02:b8:09:e5:60:31:f7:13:be:14:12:4d:fd:11:ea:63:46:de:
d4:cf:26:b5:be:6d:51:cb:37:53:e1:f1:79:15:6e:2c:e4:29:
6a:7b:a0:c6:19:25:d8:d1:7f:62:9e:66:54:5a:01:3e:d0:fc:
b9:c1:5a:76:29:91:bc:df:ae:6d:20:2c:06:ef:77:ce:42:42:
1e:9c:63:ab:1c:66:43:e7:73:2c:a5:44:16:1e:1b:a4:2f:55:
58:46:6b:20:65:a5:92:0d:2b:47:be:5b:c2:c7:a5:09:ad:40:
44:87:15:1f:de:80:9e:5c:eb:be:2b:fd:b3:45:40:68:de:f3:
06:f8:8f:fc:0c:37:05:47:b4:d4:06:c5:f5:ba:76:e6:a4:b4:
dd:5b:d4:c8:06:03:b5:8c:d6:ed:bc:bc:0a:3c:92:1b:60:e3:
05:df:bc:d0:a2:f9:d0:cf:01:75:a7:15:a8:96:16:a0:f1:42:
ff:e0:32:10:0e:fd:39:71:1b:d7:aa:df:57:21:84:17:c3:9f:
97:85:72:ef:ab:42:6e:5c:d1:c8:44:56:ed:6d:55:2c:fd:49:
5d:e7:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org