Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/FEB638F6528811EEBA8CF40BC4F9AE02.roa
File: FEB638F6528811EEBA8CF40BC4F9AE02.roa (raw, json)
Hash identifier: fcDrOl99JsHfGcW1f0wB7WA/0VJq4UG6W5HmllaXq5A=
Subject key identifier: AF:4B:48:1B:2C:BF:96:4F:BE:8E:5A:49:38:F2:49:63:A6:0D:E2:52
Certificate issuer: /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Certificate serial: 05
Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/FEB638F6528811EEBA8CF40BC4F9AE02.roa
Signing time: Wed 13 Sep 2023 22:58:04 +0000
ROA not before: Wed 13 Sep 2023 22:58:04 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 4768
IP address blocks: 202.36.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 02:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7
Validity
Not Before: Sep 13 22:58:04 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65023e7b-02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:c8:a8:3f:e7:cd:d6:3a:1f:dc:c0:70:41:
2a:31:cb:25:1e:90:a6:53:23:42:29:4c:92:e0:cf:
a6:37:7a:b1:98:58:74:3a:be:29:f9:3d:77:43:79:
46:13:2b:e4:26:55:75:99:d6:f1:6f:77:6a:26:0a:
f0:00:fe:ea:c6:51:8b:00:e5:d9:a1:c0:c2:22:25:
cd:d6:de:8f:91:c3:1f:61:26:8e:e3:b1:b7:44:38:
c2:bb:65:30:e8:5a:8c:6e:84:77:56:42:0a:3e:54:
36:9f:61:11:18:9b:15:a9:de:13:06:99:6d:d5:dc:
6a:c2:e4:4f:90:7a:b8:da:dc:d2:93:32:00:c8:20:
f8:b2:4f:4b:c6:15:0f:36:53:44:3c:1b:8c:92:fd:
eb:d0:64:66:10:2a:ab:2c:8f:23:20:cb:83:f3:d4:
0c:3e:e6:ae:f7:c1:65:13:a4:cd:93:67:36:a7:14:
0f:08:85:4e:8e:0d:63:5f:bf:c5:41:41:6c:06:87:
a4:95:36:ba:87:f2:87:ab:27:68:c5:40:54:b1:63:
83:7d:de:6a:80:1c:9d:da:a3:47:fb:68:7e:9f:4f:
15:8e:3c:2c:85:f9:0c:ea:fd:8b:82:df:b0:bb:3d:
6c:2a:78:93:dd:bd:ae:6a:63:d7:eb:9f:9e:7f:00:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:48:1B:2C:BF:96:4F:BE:8E:5A:49:38:F2:49:63:A6:0D:E2:52
X509v3 Authority Key Identifier:
keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/FEB638F6528811EEBA8CF40BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.36.231.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c0:0b:1d:0a:27:30:ae:b5:c9:53:24:41:9d:df:a9:ce:73:
be:93:e3:6b:b8:7c:4b:c5:44:95:bc:55:ab:3f:e5:8b:dc:68:
76:49:d5:7c:fe:c1:b3:ef:4d:56:1e:e6:22:b1:e9:5b:27:2f:
b8:1d:52:a7:71:1e:ef:d5:8d:11:be:93:e2:ff:fd:f0:f9:e6:
7b:46:4c:a5:64:0e:90:b0:73:0a:38:1a:53:a7:73:dc:22:d2:
62:12:c2:b6:0a:6a:4e:43:24:68:af:30:f5:56:77:af:11:73:
3c:cb:b5:e6:a3:f3:e1:e0:7c:9a:f3:f3:5f:ee:d2:96:e5:62:
81:d1:d4:21:32:58:fa:df:77:ea:9a:79:b8:56:80:45:ef:f2:
95:5d:22:bb:94:a7:53:ff:58:47:2b:f9:9a:0f:1c:7e:f4:dc:
24:94:0c:7f:48:57:e5:c5:b3:66:9f:99:43:46:f8:28:a9:fa:
29:ab:cf:39:08:0e:20:cf:a0:74:a8:da:0d:a7:dc:be:c0:bf:
ba:7e:86:48:d0:c6:3e:34:8c:d0:58:24:10:e2:9b:f2:69:f4:
8b:4b:d8:3e:14:70:42:dc:8e:4d:a5:30:17:97:4f:ca:b8:23:
e0:de:17:f8:3c:c0:de:f7:39:b5:e8:ef:ed:8c:6e:43:ee:95:
e8:e9:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org