Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/07F1D2F242F511EE9EDF4960C4F9AE02.roa
File: 07F1D2F242F511EE9EDF4960C4F9AE02.roa (raw, json)
Hash identifier: Rw8FgIa3S/3/7Fy6Om/O4uepYrbsXOa1MUqV+g91uzo=
Subject key identifier: 08:10:97:33:CA:B9:E2:CA:7C:5A:67:BE:04:81:F3:C8:FE:78:52:7C
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3414
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/07F1D2F242F511EE9EDF4960C4F9AE02.roa
Signing time: Mon 02 Oct 2023 15:10:46 +0000
ROA not before: Mon 02 Oct 2023 15:10:46 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 135027
IP address blocks: 117.121.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13332 (0x3414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 2 15:10:46 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651add76-ed50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:4b:79:b7:2b:7f:88:06:ed:45:27:50:a7:
bd:4c:0b:60:3a:33:6d:14:74:23:12:95:5e:e4:d9:
f6:3a:91:2e:d0:dc:bd:45:7c:f6:ac:f1:5a:6a:01:
16:1a:2b:16:49:07:a0:86:94:2c:e3:58:c3:7c:2b:
d8:71:a4:d4:b3:2e:ef:82:1a:72:0b:9f:f8:15:08:
21:fa:95:82:80:55:23:c5:ac:4c:30:a7:ab:da:54:
a2:02:53:55:f1:c7:27:ab:ea:55:74:c3:f3:90:e7:
57:dd:1c:67:fb:dc:27:d7:19:9d:1c:02:c1:c6:5f:
b7:c5:a7:80:c3:96:d8:29:18:f9:b6:1b:44:4d:c9:
91:82:78:8e:ad:71:a9:24:15:3a:30:82:a4:40:d4:
6a:53:39:c1:1f:01:0b:b6:6d:67:8f:24:21:5a:dd:
27:d6:c5:34:42:ee:ce:67:07:20:63:b9:39:50:8a:
8c:76:cd:f0:c4:a7:0b:f5:04:60:93:b7:7d:b9:ff:
13:2a:28:66:0a:65:b4:b6:61:ba:b1:26:6e:fd:37:
f2:11:a8:e0:e7:18:4f:69:de:ae:73:03:1c:a3:d1:
7a:a7:49:fc:80:2a:2f:3f:bd:44:4a:53:35:d2:bb:
6d:45:93:1a:9e:ef:8b:bd:93:f5:b5:03:4c:85:19:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:97:33:CA:B9:E2:CA:7C:5A:67:BE:04:81:F3:C8:FE:78:52:7C
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/07F1D2F242F511EE9EDF4960C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.243.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8b:e5:b0:f0:c6:c3:a5:60:34:f9:d2:36:e4:c7:2a:a6:e6:
e2:ba:74:8f:c4:e5:67:09:d4:dd:ea:13:27:9e:00:14:8f:ff:
a1:e9:d4:26:bb:af:9c:6f:7b:d0:80:a7:c7:31:c4:92:de:2a:
54:4d:cf:13:4b:bf:fa:e0:fd:f1:13:dc:02:e8:c8:92:46:51:
bc:44:47:e1:81:b1:cc:f9:75:74:96:77:84:ff:08:60:20:3c:
71:db:97:bc:54:e6:af:2f:65:c3:97:36:3d:ee:da:61:00:30:
90:83:4f:6e:99:b6:18:28:da:9b:1e:ff:37:a4:5f:f7:bc:81:
06:c3:73:be:3b:fc:d6:be:24:6f:c9:25:6f:0f:84:a9:71:58:
9d:cd:11:53:a7:5f:e0:b6:ee:55:f3:5f:58:a7:3a:36:f0:ba:
e3:f2:74:bb:2a:ef:cc:70:af:59:ad:1c:37:18:5e:06:4a:a0:
fe:c2:a2:55:05:23:dd:ac:b4:b5:71:da:fc:ab:9f:55:5a:88:
ce:70:f2:e1:79:1d:18:33:55:a2:b9:d7:ef:c1:5d:f4:6f:03:
78:9f:55:20:0d:0d:12:e2:94:69:16:10:aa:cc:d3:40:02:e7:
d1:12:52:fe:4a:60:b4:6e:28:44:92:7d:11:65:a1:76:a1:4e:
d5:6d:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 23:04:59 2023 by rpki-client on console-fra.rpki-client.org