Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7A59F516ABED11EE9FA6F24AC4F9AE02.roa
File: 7A59F516ABED11EE9FA6F24AC4F9AE02.roa (raw, json)
Hash identifier: SPdU/dUmiP1dQJAK1XlH3fZlb9TC+CZSOLuX9+0PPb8=
Subject key identifier: F5:3B:7F:FC:11:48:9F:69:B7:30:2A:8B:36:5B:10:21:5F:D4:2B:D0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0EF1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7A59F516ABED11EE9FA6F24AC4F9AE02.roa
Signing time: Fri 05 Jan 2024 17:11:34 +0000
ROA not before: Fri 05 Jan 2024 17:11:34 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 202972
IP address blocks: 113.203.233.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 09:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3825 (0xef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 5 17:11:34 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65983846-9aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:82:7b:11:96:a3:3b:a1:f0:84:61:bb:19:
67:48:7a:32:cb:dc:f3:25:da:ce:03:8b:4d:1c:85:
8c:04:ce:8a:1d:6c:de:bf:20:a7:99:2a:a4:ea:28:
4c:f2:45:91:0e:85:9d:e0:7b:15:f2:d2:0a:3c:db:
de:bd:d4:d7:fb:c9:8e:a9:24:32:4a:cb:7b:fa:12:
54:87:77:82:a4:8b:b9:6e:e3:c4:91:24:cc:2e:88:
2a:f6:59:e1:5d:bd:cd:75:34:7b:17:fe:08:28:d5:
a6:0a:24:08:9c:31:27:3a:3c:72:fd:5c:87:a3:83:
61:ad:b3:06:ef:cc:f9:3d:77:8d:30:5c:02:af:d4:
10:c7:5f:7e:18:7b:cc:c7:5f:50:5a:2c:7a:87:93:
60:06:89:a5:aa:a3:42:e4:63:04:5f:d3:fb:bd:d8:
46:92:ea:cf:40:25:96:d6:af:23:8d:cf:2e:50:8b:
c6:0e:d6:6e:37:ec:1b:e9:df:68:bf:a5:08:5c:8f:
c8:49:b0:1d:70:8c:10:23:43:62:0a:a6:2b:4e:a8:
af:19:f1:b8:e5:e7:dd:c6:fd:bb:a4:60:d4:f0:82:
7b:16:ab:73:ad:a6:ca:03:a8:84:3d:6c:af:80:8d:
c8:46:c3:43:23:ab:45:62:60:95:7c:6f:72:5d:9b:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3B:7F:FC:11:48:9F:69:B7:30:2A:8B:36:5B:10:21:5F:D4:2B:D0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7A59F516ABED11EE9FA6F24AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.233.0/24
180.178.185.0/24
180.178.189.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7b:7b:6b:0b:a8:f6:14:3f:7e:b4:87:ae:29:62:ba:b7:c1:
95:21:c5:4a:ee:4a:07:d0:72:72:e6:10:47:5e:5f:1b:d4:62:
fc:7d:f4:bd:81:b7:ed:26:79:7f:70:ae:0f:91:2d:a5:57:01:
8a:13:74:fd:25:ba:a9:4b:60:e7:5b:3a:3f:02:5e:82:78:5a:
a6:dc:c9:97:96:94:0e:ba:ab:2b:e9:10:db:64:be:8c:ab:b2:
aa:bc:d1:1c:fc:a3:1d:db:ca:5a:b2:e1:1e:97:6a:76:3b:b9:
7a:4a:37:a8:97:e5:11:f1:b1:8a:d0:9f:2a:f3:93:6d:ad:d6:
6b:56:9d:5c:bb:bc:36:29:12:fb:8a:1d:80:1a:d7:22:6e:04:
34:27:97:20:9c:89:db:2a:04:a3:c6:62:c0:27:e8:0a:36:ea:
f5:f6:9a:4e:e3:fc:7b:c0:c5:54:fb:d4:9a:34:9c:3f:3c:75:
3f:9e:c8:5b:04:ad:c2:97:21:ce:10:3f:e2:b5:a3:7e:b1:65:
0a:fc:16:67:7b:ee:1d:1c:be:96:33:7a:1b:4d:2c:bd:54:8b:
b2:7f:b5:f3:2b:2d:25:0c:4c:24:28:4e:7f:1e:42:de:a2:b4:
91:57:b9:17:ec:43:95:90:a6:c7:06:b1:cd:2a:a0:aa:30:36:
3b:b1:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:52 2024 by rpki-client on console-ams.rpki-client.org