Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/7D560B4EA97011EEBF85FB74C4F9AE02.roa
File: 7D560B4EA97011EEBF85FB74C4F9AE02.roa (raw, json)
Hash identifier: SdfQ1Nu/ajGs6/zaUruepMI4ikdcTCr+z3DW3Y4D8Ck=
Subject key identifier: DB:AC:65:2B:C2:2C:C3:B7:12:B5:04:F6:9A:E1:69:2D:77:E0:05:50
Certificate issuer: /CN=A91CA5DD/serialNumber=F13E906F158C757583A8DA0A6D56DE91ABA014DA
Certificate serial: 04DB
Authority key identifier: F1:3E:90:6F:15:8C:75:75:83:A8:DA:0A:6D:56:DE:91:AB:A0:14:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T6QbxWMdXWDqNoKbVbekaugFNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/7D560B4EA97011EEBF85FB74C4F9AE02.roa
Signing time: Tue 02 Jan 2024 13:11:50 +0000
ROA not before: Tue 02 Jan 2024 13:11:50 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 56196
IP address blocks: 203.78.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 04:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA5DD/serialNumber=F13E906F158C757583A8DA0A6D56DE91ABA014DA
Validity
Not Before: Jan 2 13:11:50 2024 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=65940b96-e91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:6e:c4:2d:f1:e7:d0:61:4c:18:d4:ef:aa:
80:2e:5a:56:67:cd:07:48:f0:3f:37:b3:96:50:43:
91:3f:d0:7f:f7:dc:19:85:48:de:02:af:49:b8:cd:
95:9b:2b:21:47:11:e3:97:30:24:e0:9d:62:75:b3:
3a:0d:f3:de:f5:cc:63:b0:71:a3:01:60:15:f4:2a:
f2:2b:37:5a:ba:11:20:69:49:4e:84:f0:63:83:31:
81:b5:d1:29:a8:00:ba:af:07:07:0e:2c:70:12:d5:
34:1f:1c:85:44:34:94:89:cd:6c:66:5a:76:fb:a3:
32:0c:f4:84:56:d9:4e:14:c6:ac:f2:a8:92:48:7f:
ea:1a:73:12:86:c4:18:8c:fd:eb:12:dc:44:11:1a:
f0:04:b7:b0:7f:0a:10:23:52:0f:d6:53:ca:15:f4:
7a:8c:08:f1:25:7a:1a:69:aa:69:8c:21:bc:59:0d:
a0:93:2a:da:03:a9:88:fb:05:fa:31:62:7d:50:78:
fa:e1:68:5d:82:60:b3:14:ec:3d:e4:db:ac:95:77:
58:6f:32:d7:ee:35:b0:2c:c3:ff:01:e2:4c:02:34:
7a:8a:2b:8c:6f:9d:4c:af:29:e2:4f:be:08:a3:65:
46:5c:ed:eb:66:d8:27:fc:0b:b4:7b:13:f8:db:c4:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:65:2B:C2:2C:C3:B7:12:B5:04:F6:9A:E1:69:2D:77:E0:05:50
X509v3 Authority Key Identifier:
keyid:F1:3E:90:6F:15:8C:75:75:83:A8:DA:0A:6D:56:DE:91:AB:A0:14:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T6QbxWMdXWDqNoKbVbekaugFNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/7D560B4EA97011EEBF85FB74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5f:d9:f9:64:b8:3c:7b:af:01:f5:3a:10:2f:f2:4e:ba:57:
f4:92:97:6b:bb:07:52:96:53:56:0a:60:dd:9c:ed:df:90:7e:
eb:85:17:8b:a4:f7:2a:e8:13:30:9c:5d:e6:b5:8a:52:be:91:
2e:ef:63:36:1f:1a:67:8e:33:64:58:ec:3e:6e:eb:a6:69:20:
61:18:fd:94:39:a3:3f:2f:24:c3:65:06:af:52:86:32:2c:66:
ad:2b:80:de:9c:f0:b5:6c:d9:2f:e9:72:e8:5c:e0:75:1e:a1:
44:05:e7:00:83:ee:60:52:3f:f7:04:f5:f4:64:cc:4a:73:28:
9c:b0:73:d2:3a:e1:21:d7:26:5e:17:2f:56:84:2f:77:cb:0d:
13:c1:e7:c2:94:aa:af:07:0e:f0:4e:a5:a7:90:db:c5:2c:78:
9b:4f:3e:84:68:e8:21:13:11:9e:55:d9:28:b3:ea:67:bd:13:
a0:05:ac:d9:14:c8:b3:1e:7c:e6:83:c9:8d:67:56:16:71:96:
e8:6c:4d:0b:23:22:f3:ca:a6:f3:aa:31:40:10:ab:1b:94:f8:
6e:eb:0e:f9:87:08:42:97:d5:1d:18:51:b7:51:f2:4d:d5:6f:
8c:09:43:6e:67:9d:d5:d1:c9:cf:bf:16:71:5b:be:18:66:45:
3e:eb:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 05:38:26 2024 by rpki-client on console-fra.rpki-client.org