Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F3F63EE5B7C11EE92CC780EC4F9AE02.roa
File: 6F3F63EE5B7C11EE92CC780EC4F9AE02.roa (raw, json)
Hash identifier: Bb+bP23VyoRENRmy6gz9m21Kvhmhgm5Wu9COZCtrwH8=
Subject key identifier: 8D:80:22:48:22:C7:B6:5A:6D:0C:CF:FA:4C:0D:3D:64:06:84:A8:02
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0D42
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F3F63EE5B7C11EE92CC780EC4F9AE02.roa
Signing time: Mon 25 Sep 2023 08:20:50 +0000
ROA not before: Mon 25 Sep 2023 08:20:50 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 131275
IP address blocks: 223.29.232.0/24 maxlen: 24
223.29.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 07:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 25 08:20:50 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=651142e1-f3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:48:f0:22:83:9a:1d:0e:e3:95:ea:b0:b3:20:
3a:3b:db:c6:75:9c:e0:3a:9a:c7:33:38:ae:fe:f7:
b4:b1:3b:9b:60:4d:b3:de:b1:21:7c:d5:f4:94:d0:
5c:a8:7e:18:f2:5c:9c:36:6a:81:21:29:70:ce:ca:
65:a2:38:bd:1a:fc:4b:dd:c7:5b:4c:e2:1e:55:6b:
da:3f:93:14:b8:a9:2d:c0:f8:f9:c0:47:26:d6:ee:
eb:8d:31:4a:3a:29:ff:28:94:d0:12:c6:2e:f1:d4:
f7:b3:58:c6:92:8e:45:cf:51:03:a1:e9:4e:7c:25:
7d:a2:ad:9d:e2:2c:db:4e:24:17:d4:97:95:b6:a1:
91:11:5e:fe:5b:43:e0:0b:86:16:a0:0b:3d:11:db:
55:83:80:ac:d3:75:78:ad:4a:02:f8:da:7f:7c:eb:
cc:e9:1c:4c:77:ff:63:34:8f:f8:9c:54:cd:06:06:
49:ed:63:c1:d6:13:68:87:7b:d0:03:34:3a:aa:f8:
2d:99:2a:ed:8c:17:3f:4b:2a:5a:1b:b8:32:ce:f8:
01:0c:22:fc:a3:2d:68:11:cd:2e:a2:7f:48:77:02:
fe:3c:9b:c4:c2:58:43:f2:f2:56:06:f7:0e:90:22:
fd:14:53:6b:95:fc:da:75:94:7f:0d:2e:70:fc:9b:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:22:48:22:C7:B6:5A:6D:0C:CF:FA:4C:0D:3D:64:06:84:A8:02
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6F3F63EE5B7C11EE92CC780EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.232.0/24
223.29.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:83:63:1f:51:26:a4:8d:e0:9c:40:ca:8b:b5:40:ae:77:ae:
05:46:08:37:a7:13:39:7f:57:fd:d8:15:6d:4d:f5:10:a4:45:
b5:ec:b1:1f:09:b0:30:8e:47:08:e8:e6:22:69:52:99:79:16:
87:7b:2e:7a:e1:67:14:c6:14:36:1f:80:6a:40:b1:86:43:d4:
0b:85:f1:85:52:5c:f9:78:8d:bc:f5:79:6b:ad:94:ff:98:99:
5c:b2:ae:e1:43:93:be:c1:21:0d:58:e0:93:46:1e:b8:6a:a0:
26:6d:e9:b2:1f:49:99:f5:89:b9:4e:8a:54:8d:ec:55:4f:ad:
f2:c0:de:32:53:45:2f:1c:1a:8f:d3:97:89:ec:a4:2b:d4:be:
b6:64:49:7b:47:6e:87:e5:fe:27:5c:83:16:55:41:2a:9c:48:
7c:dc:95:af:6f:dd:d7:25:f4:ce:8d:3b:b5:5b:20:72:66:27:
e8:17:8e:1f:ab:a6:5e:b1:3b:42:5a:cc:55:d8:37:bd:da:d6:
38:f0:82:96:1c:3d:87:b6:3b:25:8e:72:1e:26:57:bb:5e:39:
8c:96:0b:a4:9b:63:5f:84:3a:16:99:d3:eb:af:7d:e8:e8:ac:
52:eb:ac:7e:e3:2b:d4:a5:69:d2:59:1b:74:67:3f:26:a1:6a:
9a:26:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:19:55 2024 by rpki-client on console-ams.rpki-client.org