Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/FBEB7A42529611EE8F49C985C4F9AE02.roa
File: FBEB7A42529611EE8F49C985C4F9AE02.roa (raw, json)
Hash identifier: WErDq672b5EBMabqyHI/H9HDsexTo3ENeJRkgVnpCyg=
Subject key identifier: 0C:10:BC:B1:56:1C:E0:1C:F5:E1:55:F3:01:32:BC:6B:61:6A:AE:AD
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0701
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/FBEB7A42529611EE8F49C985C4F9AE02.roa
Signing time: Wed 31 Jan 2024 00:12:26 +0000
ROA not before: Wed 31 Jan 2024 00:12:26 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 136557
IP address blocks: 210.247.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 10:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Jan 31 00:12:26 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b9906a-5d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:7c:c1:4a:b9:8c:29:a5:45:1c:a6:f4:5d:
61:bb:7b:f6:cb:88:b8:79:db:71:3d:ef:0c:bd:d1:
4f:7a:7c:d0:2c:17:81:55:c9:b2:f3:fa:06:bc:47:
63:b2:41:21:d9:c3:18:e9:6c:d8:ea:1a:fe:14:de:
e4:2e:14:16:57:16:0f:e9:7b:ff:86:e5:d8:d1:c1:
33:ff:4e:c2:fa:be:73:34:b7:75:18:c3:43:6d:2f:
9f:fa:a4:99:70:c9:db:46:01:fd:d6:e2:e5:b0:89:
9a:f1:ba:91:13:f4:f2:15:46:45:16:b6:4b:d7:86:
a6:db:23:79:12:d4:70:25:91:6f:90:93:fe:3e:3f:
4b:4e:6f:ff:d9:f3:9d:1e:7d:7f:84:fb:96:c3:d7:
04:5e:58:3c:d0:36:dd:1c:e5:da:03:8c:70:b1:10:
0f:27:ec:7b:84:75:ea:53:ce:c4:96:29:ae:cc:8f:
77:5a:29:69:8d:69:9b:65:fd:d7:df:bd:5f:c4:d1:
72:ed:8a:99:2f:65:fc:1a:61:d7:b9:64:89:f5:d3:
c5:95:34:67:d5:c4:ef:df:f9:fc:1b:68:ca:c9:61:
11:38:d7:65:03:c8:b9:8e:38:02:da:66:ef:c6:93:
6a:00:81:b7:5d:d8:06:c4:e1:8c:21:38:dc:a8:f9:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:BC:B1:56:1C:E0:1C:F5:E1:55:F3:01:32:BC:6B:61:6A:AE:AD
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/FBEB7A42529611EE8F49C985C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.247.235.0/24
Signature Algorithm: sha256WithRSAEncryption
24:56:6c:07:0d:49:ce:45:be:88:41:bc:4d:cb:35:83:da:7d:
90:91:40:19:b3:44:d3:11:8b:76:1d:d8:02:7f:a1:f5:1a:63:
68:fa:b7:b0:12:01:84:e1:7d:aa:0e:a6:f5:13:21:75:9c:71:
66:60:22:2b:85:06:16:8d:43:a5:52:79:d8:86:bb:8a:98:e9:
3d:95:8f:f7:95:67:81:33:41:36:11:90:40:65:ea:db:67:e4:
73:c3:c7:7d:bb:be:cd:2b:d5:11:1b:3e:43:af:8d:39:91:90:
4f:a7:3c:e5:1a:24:b1:d1:b0:b6:03:76:0f:a3:f0:bd:db:09:
10:9f:d7:17:a7:a3:46:4c:82:ee:01:9c:f6:c7:32:a4:0e:20:
74:f1:a2:12:fe:82:26:05:67:49:84:4e:6b:3b:7b:7d:df:a8:
8f:db:08:91:95:8d:3b:93:57:e4:5c:c1:ac:b8:d4:85:19:e0:
8b:84:ea:e4:7d:0c:1c:0a:5c:1a:d6:7b:4c:4b:d1:f0:26:bf:
71:d4:dc:95:44:c9:5f:5f:28:73:e5:b7:e0:53:78:f5:81:0f:
9d:b6:fd:e5:67:0c:8b:87:cd:31:55:fa:01:c1:75:ff:7b:e3:
b7:3c:39:86:14:92:bd:a5:d6:7a:66:6e:1e:c9:38:be:f6:4f:
e1:3d:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 13:22:56 2024 by rpki-client on console-ams.rpki-client.org