Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/323B95DA9B4511EFB4986857C4F9AE02.roa
File: 323B95DA9B4511EFB4986857C4F9AE02.roa (raw, json)
Hash identifier: PklW1708WLSQjCoyOiknmMnTMivUPUCRD8r/jnY32ew=
Subject key identifier: 8B:9E:D8:41:26:4B:20:B8:89:15:CB:F1:2B:6A:7B:21:8C:99:66:8B
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0AED
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/323B95DA9B4511EFB4986857C4F9AE02.roa
Signing time: Tue 05 Nov 2024 07:11:37 +0000
ROA not before: Tue 05 Nov 2024 07:11:37 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 23686
IP address blocks: 101.97.48.0/23 maxlen: 23
101.97.50.0/23 maxlen: 23
2404:4f01::/32 maxlen: 32
2404:4f01::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 05 Nov 2024 07:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2797 (0xaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Nov 5 07:11:37 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6729c529-7da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:43:54:16:c8:c0:5e:81:5c:0d:72:55:b4:
9b:6f:fe:4f:07:52:7e:c8:24:2c:dd:bd:09:cf:01:
64:ec:74:d1:be:76:28:a8:b4:e4:3f:2f:cb:c4:c6:
cd:4a:1a:76:e0:be:2f:79:4e:e2:18:6b:ec:44:4c:
08:34:b8:0e:b8:cc:4d:fa:fe:99:79:2a:ac:ae:67:
18:87:bb:6d:27:b3:66:cf:77:7e:2d:6a:eb:6a:49:
5f:8b:16:b3:7e:dc:b0:ae:bb:ef:75:e2:29:d3:f8:
85:d3:c4:25:91:52:f0:eb:16:b3:d5:df:eb:5e:56:
94:79:a0:8b:66:7d:ad:1c:43:27:da:3c:a2:a7:db:
8a:60:05:ff:ee:d4:58:55:f8:1b:b2:37:b4:36:77:
fa:27:7a:db:69:7e:19:e1:8c:f6:fd:58:ac:d1:b1:
cf:1c:1e:82:4d:36:12:a5:fd:c9:3e:5a:bb:fa:60:
5f:88:8c:e0:82:c6:b0:3f:a7:01:f7:44:32:ce:ec:
78:de:da:20:26:77:38:de:65:23:70:21:43:88:32:
61:82:ff:eb:f9:7c:15:57:ae:88:1b:22:51:33:e4:
c3:40:2f:73:54:b8:9b:09:3e:ff:05:01:61:b4:e1:
a8:46:c3:03:82:5a:bf:f1:33:e4:ed:56:47:57:9d:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:D8:41:26:4B:20:B8:89:15:CB:F1:2B:6A:7B:21:8C:99:66:8B
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/323B95DA9B4511EFB4986857C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.97.48.0/22
IPv6:
2404:4f01::/32
Signature Algorithm: sha256WithRSAEncryption
4c:84:72:22:26:ce:ae:6e:4e:2c:6d:b9:20:00:bc:4a:ba:6e:
88:72:c9:75:ff:d4:57:b6:4e:b1:9a:b5:47:8f:d4:ae:9d:5c:
e2:9c:56:4b:32:06:3b:e1:5d:b5:1e:d9:2a:f5:f9:99:94:63:
9e:01:1c:84:a7:f1:56:57:ba:21:ed:c0:b6:65:3e:3a:b6:d8:
a7:25:a5:2f:db:05:e3:a9:ff:a8:51:0e:ce:5b:7d:3e:06:b8:
bb:1f:77:31:e0:d7:a7:2f:3b:3e:a8:ae:05:e5:c5:2e:ec:51:
e7:0f:a0:63:a4:f5:7a:ea:63:c3:55:b2:4a:ac:da:b1:57:b5:
60:13:bd:1d:e3:b9:8a:11:ce:53:d8:f5:f9:90:19:66:fb:59:
12:45:59:37:54:fd:b6:ec:02:47:59:43:a0:0f:4d:f7:dd:56:
cd:73:33:e7:3a:e7:77:44:6d:57:62:5a:7a:b6:78:b3:13:eb:
7d:bd:d4:f7:00:7f:fe:50:e9:6b:fa:ac:45:f3:7e:e1:bc:8d:
a6:77:3d:22:8e:c0:ce:ed:2f:a6:a5:68:44:e9:92:9e:b8:1d:
d8:f2:3a:83:41:94:62:bb:c4:33:a9:c6:3e:a1:c2:8e:f0:bc:
03:9b:54:94:11:03:04:cc:44:9b:24:9f:36:be:1e:bd:22:f2:
40:f0:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:31 2024 by rpki-client on console-fra.rpki-client.org