Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/850E279092E611EE96987619C4F9AE02.roa
File: 850E279092E611EE96987619C4F9AE02.roa (raw, json)
Hash identifier: ousvyXnS/YYtMe4xRtRXujTGpecIy2uxN3CKbFCJmpQ=
Subject key identifier: E6:48:D6:D9:7B:3F:81:57:FE:A0:1C:00:93:5C:A4:EA:99:AB:91:4C
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 013D
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/850E279092E611EE96987619C4F9AE02.roa
Signing time: Mon 04 Dec 2023 20:48:47 +0000
ROA not before: Mon 04 Dec 2023 20:48:47 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 9009
IP address blocks: 203.33.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 21:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Dec 4 20:48:47 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=656e3b2f-af44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:69:9a:7d:6b:62:9b:53:d4:95:d0:93:d7:
2f:33:3a:85:e0:23:fc:21:f2:d8:23:25:6f:27:75:
8c:d7:d6:2e:24:e3:08:91:de:40:1a:d3:06:a6:41:
a4:42:1f:bf:ea:cf:1e:b5:8e:24:21:20:64:9c:73:
ce:dc:4c:13:4c:c0:7d:6f:69:a8:01:14:b4:3d:14:
07:fe:8e:74:86:c4:df:23:7c:67:2e:42:68:82:b1:
d9:47:51:54:b4:00:fa:fe:89:40:d0:68:66:d2:4c:
83:38:d3:44:68:9b:c9:c2:66:40:73:3a:a3:e1:ef:
4e:3b:ff:fa:63:ee:f0:aa:77:56:a9:cc:42:05:75:
c5:2b:13:6e:bc:ee:96:5e:47:4e:c6:77:28:76:ac:
63:b8:57:67:31:4f:de:fe:ff:cf:53:3d:41:df:e6:
90:61:7b:4b:62:20:af:48:6f:bb:76:3a:e1:4a:8d:
f7:3d:b1:8a:ed:79:d5:19:95:c0:e1:d8:bd:e0:34:
2a:d2:6e:f7:cf:39:1f:e5:52:18:55:23:eb:68:f7:
c2:de:f1:dd:6e:af:92:0f:18:17:c5:33:e6:86:4b:
50:e7:17:52:ca:05:82:8a:f6:b6:48:d0:10:39:ca:
f5:f9:83:b9:06:a7:e5:60:cd:9f:d3:c6:45:41:cc:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:D6:D9:7B:3F:81:57:FE:A0:1C:00:93:5C:A4:EA:99:AB:91:4C
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/850E279092E611EE96987619C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.33.239.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3a:50:0e:99:26:42:e0:2b:f1:6e:de:11:45:b9:51:b7:3a:
80:c9:c2:39:1b:8d:e3:63:f7:80:88:ff:74:24:f1:cc:74:48:
78:ec:d9:73:6b:86:14:51:e1:7c:b1:0a:b7:a1:58:29:8f:f9:
59:16:89:95:f6:3d:b6:28:92:5d:be:90:8b:e5:f2:71:b4:bb:
fa:b9:c1:d3:f9:60:e3:1f:b5:4d:68:2d:1d:bc:0f:59:4b:61:
eb:50:79:68:93:8e:c0:7e:54:42:14:93:62:a0:1c:09:db:ca:
57:8d:50:bd:c9:89:ff:5e:93:24:f2:99:80:90:d4:e5:02:63:
16:da:7f:6c:f7:3c:08:70:9c:d9:7a:40:95:92:a4:5f:a4:c2:
f3:86:6a:61:72:48:47:e5:c8:91:98:a2:60:fe:40:80:bb:63:
de:6e:f2:bf:7d:a5:16:0a:e0:3b:69:99:a5:fb:42:e2:67:57:
6a:a4:aa:b4:ae:99:db:e9:6f:f9:38:c9:19:ae:c0:0e:a3:da:
8e:19:7d:2a:d3:bc:a6:e2:9f:36:98:8e:25:ce:3f:11:03:b9:
f2:0b:53:1a:44:2b:77:8a:2b:6f:ab:a1:3e:43:20:0b:6f:b2:
78:98:12:77:00:42:51:a7:54:35:c2:a2:e8:73:46:fc:c1:51:
b7:0a:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org