Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4FA0440EAAF011EE86C6F16CC4F9AE02.roa
File: 4FA0440EAAF011EE86C6F16CC4F9AE02.roa (raw, json)
Hash identifier: aUsXnHRaYcwcu98hNGfKxSp5KhJ2NYwCwRkzVrP2MCM=
Subject key identifier: 9B:5A:66:95:0B:BD:E5:ED:3C:A0:1A:9A:F8:C9:00:FA:88:0F:B3:3A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EE1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4FA0440EAAF011EE86C6F16CC4F9AE02.roa
Signing time: Thu 04 Jan 2024 10:59:20 +0000
ROA not before: Thu 04 Jan 2024 10:59:20 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 180.178.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 10:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3809 (0xee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 4 10:59:20 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65968f88-af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:17:57:8c:15:67:69:b6:ba:81:92:92:5c:
0c:6f:00:c9:55:15:a7:15:68:25:66:60:14:33:37:
39:f1:43:e3:f2:8d:c1:bc:3e:d7:ff:5e:92:54:26:
c1:17:cb:fa:0f:f9:f9:3a:67:fb:fe:93:50:77:2e:
f0:6b:4a:34:6b:fb:62:6e:8c:e6:82:8a:95:4d:97:
35:74:30:c8:a8:98:82:db:40:e9:28:92:87:e4:ee:
b5:5d:63:0a:eb:b2:cd:53:f6:28:71:bd:ec:cd:9f:
7f:32:c1:ac:d0:e3:31:1f:88:be:87:81:e8:61:00:
99:bd:12:6a:f6:e1:45:8b:29:e7:de:4e:76:aa:7c:
21:91:96:07:bb:72:06:55:b8:53:0f:95:30:5b:cb:
de:e3:98:b4:cc:b9:3c:6c:60:df:5d:01:98:b0:90:
97:4a:fa:fd:60:07:4e:e1:7e:e6:a8:bb:75:ab:75:
92:fd:10:a3:41:d9:c6:45:5c:84:ae:e5:10:93:3a:
50:fd:0e:20:08:a1:5c:4c:1d:64:a5:98:97:6a:63:
52:f7:de:db:87:04:c5:27:13:9b:21:5d:46:f7:75:
1c:fa:e2:49:00:09:36:cc:ac:21:3e:40:1e:c8:f8:
dd:f8:9d:71:14:bb:1c:80:38:07:28:39:30:b8:43:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:66:95:0B:BD:E5:ED:3C:A0:1A:9A:F8:C9:00:FA:88:0F:B3:3A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4FA0440EAAF011EE86C6F16CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c7:b5:58:e4:35:0b:61:02:9b:3b:75:e5:73:1a:76:4c:53:
00:c8:36:3b:ea:9b:7b:ba:ee:2c:eb:87:76:66:e3:dc:21:f3:
be:bb:5f:4c:0a:1f:a2:dd:d9:4c:3a:0d:e8:67:cb:f7:19:ac:
06:1e:fa:8a:79:e0:52:42:a7:88:06:6c:15:46:60:6e:1a:6d:
86:9e:18:db:03:58:72:03:46:41:29:b4:4e:13:de:54:21:f9:
e3:79:b9:fb:36:e3:99:75:94:b1:fb:57:39:30:78:00:ed:51:
ad:59:34:5d:f2:af:16:e6:9f:0a:9d:e0:b8:36:f0:0c:3f:31:
f5:1a:f5:16:6a:8d:57:73:b3:d0:02:95:72:7d:6c:8d:08:6d:
e7:dc:b9:1a:23:31:47:72:3a:00:7a:42:ea:91:0e:ed:9a:d4:
a8:dd:44:ef:32:34:39:91:36:ee:c0:fd:f5:fe:ec:db:bf:66:
06:12:9e:a7:f4:77:6e:90:3e:1f:0e:ef:64:3e:fa:e1:b4:d8:
65:18:9a:31:93:b0:df:ab:2a:89:b8:51:ed:3e:3e:a6:05:52:
eb:bf:dd:4d:cb:bf:3b:7f:a3:fd:6f:b2:5a:56:fd:28:74:3b:
21:7a:c9:cf:1c:3d:68:df:9f:49:ea:a4:f1:8f:fe:c3:3e:5a:
3f:07:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 15:17:35 2024 by rpki-client on console-fra.rpki-client.org