Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/01C9F0C2AE4611EA8B726A0BC4F9AE02.roa
File: 01C9F0C2AE4611EA8B726A0BC4F9AE02.roa (raw, json)
Hash identifier: hNLf7wCo6SJhKe4HZda4vuGkL9fZCW6Q4TT9dafuTNk=
Subject key identifier: 8E:35:8C:CC:72:DF:46:26:23:64:3B:8C:21:83:00:96:AE:84:13:37
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3531
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/01C9F0C2AE4611EA8B726A0BC4F9AE02.roa
Signing time: Mon 16 Sep 2024 14:51:14 +0000
ROA not before: Mon 16 Sep 2024 14:51:14 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 61102
IP address blocks: 182.54.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 13:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13617 (0x3531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Sep 16 14:51:14 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e845e2-486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:e6:5e:2d:a9:1c:0d:e5:3c:0e:e7:09:9a:
4f:e5:ed:c5:85:3b:38:3e:55:79:43:83:dd:85:6a:
2a:a2:2c:e4:5e:99:b1:0c:d6:a7:ef:8d:a6:0b:8d:
a1:4a:8d:44:83:97:e8:e1:dd:4c:ff:49:56:dc:b5:
c4:b1:7e:18:74:8a:c7:65:0a:c8:9e:61:ee:bd:af:
7c:84:3b:d4:b1:0b:44:7d:5f:f6:d0:98:b2:be:27:
32:bb:bd:83:25:30:de:19:d3:2b:31:86:ba:93:f8:
5c:66:17:13:54:0d:97:39:6e:97:14:5a:16:d1:b9:
70:5d:71:c0:5c:2e:01:bb:a6:65:6c:56:48:8e:c0:
5d:12:db:ac:7b:22:b3:40:9b:3b:74:44:91:e0:3d:
9f:58:b1:f7:5d:e8:62:2d:9c:02:3e:d5:84:e5:b1:
8f:23:a0:7a:21:94:29:a9:8e:12:e8:dc:d5:10:02:
28:e2:ee:37:4c:0a:e6:f4:0c:04:01:d1:5d:47:d6:
71:74:13:d5:ac:9f:0c:40:a4:f5:f8:ad:f0:69:39:
e2:01:7d:05:b6:45:67:ea:55:aa:1b:0a:c2:0e:28:
77:02:c7:9b:60:c8:8a:2f:a8:23:8e:1c:b5:05:14:
a2:d3:c5:5a:b0:33:76:6b:23:88:ae:09:0d:31:ca:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:8C:CC:72:DF:46:26:23:64:3B:8C:21:83:00:96:AE:84:13:37
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/01C9F0C2AE4611EA8B726A0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.54.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:77:b2:9e:9e:cf:55:e3:9e:39:6d:38:13:89:0a:cb:b5:83:
13:96:b2:42:74:df:e2:7c:d7:29:e1:83:e6:6a:7a:62:03:34:
5a:0b:28:ff:24:79:04:bc:76:8a:11:61:de:d6:30:49:0c:3b:
b8:0a:11:ca:45:64:25:dc:aa:f1:b9:81:d6:3e:c3:89:71:9d:
d6:7c:81:f2:61:ba:c9:1a:d8:8a:05:e3:3e:c1:7e:c0:d2:e2:
f8:06:38:a0:64:80:9b:b2:82:c0:d4:63:e4:c4:d0:5c:cb:11:
ff:c7:70:81:1f:12:14:de:d9:64:63:eb:06:ce:0a:22:58:6e:
ea:f0:59:0f:6f:b7:28:75:02:8f:38:b4:c4:2e:30:41:62:81:
4a:72:6d:fb:ac:e1:4c:62:a0:14:1e:5d:69:ea:61:a8:3b:08:
f5:03:77:fc:57:4f:55:94:c0:14:8e:c3:6a:41:24:e3:bd:68:
11:2b:51:9e:be:5c:ab:e0:59:2f:49:71:2a:01:62:4b:d8:31:
8d:ec:fe:ae:db:2d:74:46:f2:80:f9:3f:5a:aa:49:f3:db:25:
15:65:ab:20:16:76:ec:b3:64:10:b9:57:6d:6a:41:24:14:a8:
cc:cf:95:cb:be:0e:54:d2:ca:bf:1f:0d:6c:0a:69:6e:0e:5f:
8f:f0:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:12:24 2024 by rpki-client on console-fra.rpki-client.org