Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D8D4905A1FCB11EEB409C35EC4F9AE02.roa
File: D8D4905A1FCB11EEB409C35EC4F9AE02.roa (raw, json)
Hash identifier: ZmQPCDKQe8rnoumOKjDmw1gEDvWyV9Oxd/Ij1emaBIA=
Subject key identifier: 2C:1A:B8:70:7F:2C:37:58:BE:C4:00:7D:E2:58:71:4F:31:14:34:34
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C3F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D8D4905A1FCB11EEB409C35EC4F9AE02.roa
Signing time: Tue 11 Jul 2023 09:18:07 +0000
ROA not before: Tue 11 Jul 2023 09:18:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 142127
IP address blocks: 223.29.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 06:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 11 09:18:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ad1e4f-a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:c7:65:ce:84:22:58:00:e9:59:db:22:ae:
ad:5b:94:68:f9:e8:7d:bf:13:70:99:85:72:95:ac:
5f:f6:f8:81:31:2d:bd:26:ef:5a:de:54:dc:40:fa:
69:fa:4e:5a:60:97:4b:f2:d6:cf:b5:fd:21:36:60:
3d:23:82:b5:2d:40:0d:5a:0b:76:97:ec:9b:a6:18:
80:6d:1a:71:d3:36:0a:75:e4:ec:a7:8b:22:13:15:
28:77:90:fb:96:6e:1a:f8:64:47:69:fa:af:a0:e8:
97:1e:13:16:02:4c:e2:13:2a:12:a7:1c:cb:56:53:
f7:80:2f:5d:bb:3e:0e:4c:c9:12:1b:7e:c3:b4:ca:
87:1c:59:83:b9:8a:a1:39:8b:63:e0:ea:ac:e6:85:
02:62:77:80:25:e3:40:1f:25:4b:28:a5:32:60:46:
26:87:f4:85:ef:0a:64:7c:4e:f1:11:b2:5e:3a:97:
d4:6d:7a:66:11:bd:f4:01:ce:79:e3:09:5a:8a:16:
22:79:66:53:9d:63:0b:cd:b1:74:a7:db:37:df:7c:
ba:4f:06:d1:ca:15:c6:be:ac:29:74:f6:f5:e6:42:
92:73:7d:be:0f:1c:07:48:80:14:97:e5:ac:13:b6:
d4:47:58:bf:2e:e5:ec:55:c2:f9:ba:af:77:f9:65:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1A:B8:70:7F:2C:37:58:BE:C4:00:7D:E2:58:71:4F:31:14:34:34
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D8D4905A1FCB11EEB409C35EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.224.0/24
Signature Algorithm: sha256WithRSAEncryption
17:27:73:76:22:2f:e3:61:e7:5f:34:7a:96:f4:14:9f:a0:88:
b6:96:f8:bf:01:4c:eb:b3:73:c7:53:53:3f:f4:9c:a6:df:95:
c1:7e:e1:af:b9:6e:fe:1a:dd:59:c9:aa:b0:e8:a3:6a:93:bb:
63:ac:81:2c:82:d7:20:2c:40:f8:aa:7c:0f:3d:85:94:1a:1b:
2e:e0:de:73:39:3a:88:ea:7f:1e:cb:de:b2:6f:42:73:5c:8e:
2c:18:2c:9b:ed:d7:ab:21:53:97:73:1b:c7:59:fa:f8:f2:60:
b2:5b:48:f8:48:f4:54:d2:69:a4:c9:40:ee:0c:89:3d:b9:d6:
fc:7c:3c:e0:47:f8:bc:a1:81:99:a9:97:6c:14:60:aa:78:83:
4a:16:15:5e:44:67:f0:ec:35:0a:3d:9a:ee:a7:b2:07:e3:76:
48:b4:74:36:40:43:ad:e4:a2:be:f4:ee:b5:d1:ab:05:b4:57:
8d:a9:86:3f:b3:59:d0:f0:59:ec:49:f4:ae:99:20:da:bd:4a:
03:4b:9d:60:c0:04:d4:2b:90:9c:11:6a:f9:53:05:04:c0:14:
0e:43:df:36:7c:bf:43:37:bd:a1:bf:c8:2a:05:0e:41:c9:a4:
e6:a1:97:4f:00:03:f5:df:d6:dd:61:8f:42:b9:8b:28:33:62:
14:a2:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:42:50 2024 by rpki-client on console-ams.rpki-client.org