Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9A8B203844F111EFA2E5F548C4F9AE02.roa
File: 9A8B203844F111EFA2E5F548C4F9AE02.roa (raw, json)
Hash identifier: mccsWHStYdX0rQp/VBM8k31xnwsZgsbhc+7G2Im7/Ik=
Subject key identifier: CC:34:FD:8E:7F:68:06:54:CC:54:1F:55:EC:B1:1D:6C:0C:EE:29:AD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1472
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9A8B203844F111EFA2E5F548C4F9AE02.roa
Signing time: Thu 18 Jul 2024 10:36:34 +0000
ROA not before: Thu 18 Jul 2024 10:36:34 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 180.178.147.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 04:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5234 (0x1472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 18 10:36:34 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6698f032-c263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:0f:55:b6:01:4b:7e:5e:af:08:e5:9d:be:
a1:9a:44:ce:5f:4f:e0:b4:15:9f:7e:b5:10:89:8b:
1a:a6:eb:a1:a4:b6:24:02:b2:25:5b:cc:bf:40:15:
60:93:e1:95:c5:7f:bb:ca:f8:82:1d:76:34:b6:1a:
4b:6b:53:36:b6:ba:04:c7:c4:72:08:c3:6b:b8:d6:
e0:25:19:ca:7f:fe:4a:48:fe:8e:4d:f0:5a:4f:e3:
39:89:9b:b7:23:b2:de:03:dc:a5:17:fa:d0:44:16:
3b:5f:f7:7a:45:62:48:1e:8a:9c:27:2e:0b:05:b7:
39:d2:ba:d2:38:bd:e3:ba:f6:4d:b0:9d:84:02:da:
1a:6c:0f:97:2b:8b:3f:6d:52:3d:3e:5c:fe:bc:20:
01:c2:4d:41:0c:87:d4:22:49:a3:5b:69:4a:1c:35:
49:7c:24:7f:57:b0:93:df:99:8e:06:3d:73:c9:02:
82:fb:82:6b:91:48:ba:a2:82:f8:6c:75:1e:2d:fd:
55:18:d1:16:d9:6c:6f:be:a6:b3:28:92:18:b4:e5:
56:15:56:33:55:9a:70:a6:41:69:7a:e3:0e:81:50:
1d:71:61:ed:20:68:f1:18:18:86:87:d0:cf:5c:d0:
b4:9d:46:73:1b:76:43:1d:2f:27:95:31:6a:00:fe:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:FD:8E:7F:68:06:54:CC:54:1F:55:EC:B1:1D:6C:0C:EE:29:AD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9A8B203844F111EFA2E5F548C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.147.0/24
180.178.188.0/24
Signature Algorithm: sha256WithRSAEncryption
64:61:c3:36:89:c0:22:0d:87:56:66:da:11:64:66:ff:b0:c7:
30:c7:6b:a5:eb:de:5c:d9:d6:6d:60:fc:1e:65:fa:a8:4c:4b:
25:08:a7:20:50:e9:a7:39:bb:75:60:f2:87:a0:c4:0f:81:c3:
5a:57:05:2d:a5:d5:0e:cd:f0:bd:fa:49:c4:56:0d:ca:b0:cf:
be:e4:28:29:0d:9e:99:f7:d2:14:c5:10:4a:64:ba:63:8c:9b:
bb:f5:9e:e3:6c:e5:91:7a:d0:ef:28:0b:83:05:8b:6a:01:ea:
32:d5:68:25:13:f3:63:90:65:b3:c4:30:59:37:06:8f:db:73:
c4:52:cf:a0:c0:d8:c5:e8:98:91:b2:1f:3b:dc:4b:45:2d:ff:
d4:9f:12:cf:7e:ef:74:71:11:9c:ca:69:5c:92:9c:5b:ac:9b:
54:42:55:66:44:26:f9:07:34:15:c3:0f:e7:e6:f4:8b:ad:9f:
b5:09:d9:0b:5c:db:23:e0:d4:c3:46:c5:78:78:f9:1a:be:9b:
2d:e2:36:10:e1:00:4f:37:a1:96:e6:77:3d:00:ad:51:1e:19:
8f:b3:e9:67:1f:4e:d0:09:9f:a3:8d:e7:5b:fb:9b:cc:32:e2:
8f:62:ab:d1:b5:ee:d5:ed:a0:ad:12:21:2a:bf:73:46:80:f6:
2c:8a:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 06:59:40 2024 by rpki-client on console-ams.rpki-client.org