Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FBE279DAA3ED11E99F59303AC4F9AE02.roa
File: FBE279DAA3ED11E99F59303AC4F9AE02.roa (raw, json)
Hash identifier: 12jNFwIOSxFt4Q26sLiqGPF6xM8mbtcS0r5VdmPlKzg=
Subject key identifier: 9D:D1:B7:8A:69:A5:EF:68:00:46:2F:70:00:5D:FB:B0:15:24:E8:BD
Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial: 33BD
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FBE279DAA3ED11E99F59303AC4F9AE02.roa
Signing time: Thu 31 Aug 2023 14:40:25 +0000
ROA not before: Thu 31 Aug 2023 14:40:25 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 131293
IP address blocks: 118.174.9.0/24 maxlen: 24
203.113.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 06:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13245 (0x33bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Validity
Not Before: Aug 31 14:40:25 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64f0a658-b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:23:30:67:b9:9c:35:f2:2b:b1:a9:f5:25:
ae:12:47:ec:3d:ec:79:d1:a5:a9:15:8f:ae:fb:87:
33:3c:9f:b4:3a:3e:69:5f:0d:5b:d4:94:cd:36:67:
9b:ff:e3:9c:86:fa:42:c1:34:72:85:cb:f8:26:93:
f9:6a:86:e9:73:b7:d5:f9:1a:20:5d:55:c5:63:36:
53:8d:a0:d9:8b:e7:13:dc:76:a9:79:51:80:49:1e:
c9:c3:84:8a:a7:c4:50:47:b0:3f:62:11:ab:70:8a:
0c:4f:44:9b:c0:31:f8:8e:4a:4b:39:a9:0d:b6:c8:
c0:ab:25:b7:ff:97:cb:67:80:88:46:22:6e:ab:99:
3d:13:76:05:61:ff:64:74:3a:9c:f0:20:9c:7a:ed:
a8:1f:c3:b3:57:a3:ea:f1:9d:7e:2c:ca:11:36:95:
71:5b:8f:6a:84:c9:92:b6:b0:7a:62:5f:61:d3:9f:
9f:b0:dd:56:0a:de:74:13:48:ec:7e:b2:d0:cf:b2:
a4:54:a7:7b:a1:9c:10:a1:c8:75:4f:f2:a4:8b:1f:
5f:52:25:f3:d2:30:87:cb:13:ab:24:63:e6:a7:1c:
b1:6f:50:35:b1:dd:34:28:45:84:d2:f3:d9:ff:7e:
7d:0f:96:b4:a9:69:e3:c4:c9:f2:a5:56:78:bb:5b:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:B7:8A:69:A5:EF:68:00:46:2F:70:00:5D:FB:B0:15:24:E8:BD
X509v3 Authority Key Identifier:
keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FBE279DAA3ED11E99F59303AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.174.9.0/24
203.113.124.0/24
Signature Algorithm: sha256WithRSAEncryption
78:81:61:9a:52:70:c3:07:32:e0:ce:0a:6f:c0:c3:e7:c7:0e:
20:0d:90:d4:0a:f0:aa:43:26:9e:b3:bb:b6:2f:19:11:47:63:
7f:ae:ba:57:4e:97:47:81:9f:d6:89:6b:3f:8f:93:6e:5e:80:
b0:e3:0d:e6:6d:2a:19:17:6b:4a:ab:15:6d:2d:96:cd:dd:69:
97:e6:94:8a:9a:78:4c:94:b8:9f:e3:b8:d5:5d:5e:0e:58:d1:
d7:d4:23:55:eb:f0:bf:bd:84:6b:75:5e:c6:db:09:8b:d7:4c:
68:9e:2a:47:5d:81:09:c0:d7:65:6f:25:99:63:30:74:f8:71:
4e:2a:78:a0:1e:8a:e6:2f:06:71:c0:d5:ff:6b:20:78:a1:b5:
5d:79:17:c1:c5:1d:77:2b:1f:4f:0b:13:a2:e4:30:76:f9:06:
d4:b5:8d:bf:0b:02:cf:7b:f7:bb:10:9b:37:8b:e2:db:ed:22:
bc:e1:8c:3d:fe:cd:d2:3b:d9:46:bd:57:b4:84:a4:4e:03:a4:
1a:f9:59:63:aa:90:98:a4:af:70:f9:2f:9c:51:e5:97:5a:14:
c1:96:6f:aa:f6:24:0f:07:26:0a:22:4c:be:d5:e1:25:a1:ba:
7f:25:74:a8:04:8e:b5:61:fe:a9:8f:fc:a4:04:fe:45:68:d5:
fb:4d:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 07:59:42 2024 by rpki-client on console-fra.rpki-client.org