Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/52515F8A0E7811EF93B1657AC4F9AE02.roa
File: 52515F8A0E7811EF93B1657AC4F9AE02.roa (raw, json)
Hash identifier: 7j9iB6iisAFobxUPrqJpiG1IIjFNeUTn1zOt9llCPJc=
Subject key identifier: 92:91:5C:44:F4:90:35:30:21:78:3E:E4:82:FA:BF:1A:F8:AF:40:44
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 23
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/52515F8A0E7811EF93B1657AC4F9AE02.roa
Signing time: Fri 10 May 2024 02:52:21 +0000
ROA not before: Fri 10 May 2024 02:52:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152644
IP address blocks: 202.47.134.0/23 maxlen: 27
2401:89a0::/32 maxlen: 36
Validation: Failed, certificate revoked on Sat 11 May 2024 05:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: May 10 02:52:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=663d8be5-ec8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:25:c9:2d:ca:78:7f:ee:6d:ca:b0:b4:e0:
7d:0e:32:0b:a6:da:5c:c6:87:0f:43:3b:1e:34:a0:
2e:bd:c1:ed:48:32:e3:2f:59:88:2c:0a:d7:98:77:
7c:11:fc:71:e7:90:6c:65:63:1b:4f:d3:44:8a:56:
be:7d:69:44:df:14:c4:d4:88:dd:9f:ab:26:7c:be:
50:00:2c:3d:ce:38:11:e3:f2:3b:0b:52:d5:4a:85:
da:a6:ec:1b:0b:73:08:a3:87:e4:17:d1:ab:9f:70:
21:cb:ce:01:68:a1:98:92:13:0f:e9:de:42:09:60:
e8:29:a2:2e:23:d2:1d:97:7b:3e:2b:bf:25:7c:42:
be:1b:87:da:66:70:b1:ad:93:db:86:bb:a9:e3:43:
a2:ed:50:11:98:3c:71:98:5e:26:1a:e9:5c:7d:59:
c3:65:65:6c:3d:a1:6c:25:54:60:d8:2e:d7:f0:60:
63:34:a6:28:e7:b3:66:e2:6d:be:74:c6:e2:2f:75:
f4:e7:1b:12:e0:9e:34:14:d3:1f:9b:34:af:1a:63:
46:03:5c:a3:7f:e0:2b:2d:46:e8:f1:12:ff:3b:59:
49:ea:48:91:40:df:6b:4f:af:19:2b:8d:44:da:ad:
d5:43:07:fa:d2:8c:a0:ca:d4:e1:ed:21:0e:db:86:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:5C:44:F4:90:35:30:21:78:3E:E4:82:FA:BF:1A:F8:AF:40:44
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/52515F8A0E7811EF93B1657AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.134.0/23
IPv6:
2401:89a0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:79:5e:cb:4f:7d:25:5c:d1:74:ca:ff:73:23:ef:b8:a3:4b:
ff:54:9a:1f:dc:6e:ce:5f:d5:dc:8d:ad:41:aa:28:54:f8:4c:
87:b4:f9:d2:39:e0:1e:6d:9d:22:4e:ca:32:6c:ef:2d:d4:1e:
4a:b9:76:a0:32:3a:da:91:e9:b8:3e:2d:d1:9c:22:35:3d:a3:
90:33:28:f7:6c:f0:d4:17:8a:54:b2:cc:f7:c9:46:e3:5d:94:
ea:aa:e5:2d:ea:48:fa:5e:dc:a2:99:30:3d:28:91:6b:53:69:
b1:7b:4f:0f:78:f3:35:79:65:69:27:46:53:23:2f:9c:90:d3:
4f:50:ec:2a:d9:02:c8:c3:e8:85:8a:6f:a9:84:70:18:8e:82:
54:18:cc:30:d4:88:b8:10:5f:55:98:30:d3:25:5d:42:1d:c9:
f9:47:5b:1a:36:53:25:bf:66:6b:09:b4:2b:89:16:e5:67:a4:
a7:f2:9f:93:d9:d6:d2:f3:91:8f:ff:d0:6b:e2:ca:d8:31:2c:
b2:65:47:62:ca:1f:b5:9e:da:ca:6d:26:7a:cf:30:68:b8:80:
e0:a2:25:21:b5:77:1f:70:bd:63:cd:3f:8d:b5:bb:0e:44:56:
51:7c:e5:84:05:57:18:5f:58:a1:ba:20:b1:63:67:2e:13:2b:
fe:d6:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:14:13 2024 by rpki-client on console-ams.rpki-client.org