Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0F123208FBA911EEA155441FC4F9AE02.roa
File: 0F123208FBA911EEA155441FC4F9AE02.roa (raw, json)
Hash identifier: FXcLUM7nDChteXY/er5AHWxekNSMvnuB0D3IzRIKq1M=
Subject key identifier: 8B:50:90:69:55:72:B9:43:7E:FF:54:6C:84:76:23:B6:BF:25:EC:7F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 34A7
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0F123208FBA911EEA155441FC4F9AE02.roa
Signing time: Tue 16 Apr 2024 04:23:22 +0000
ROA not before: Tue 16 Apr 2024 04:23:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 151872
IP address blocks: 117.121.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13479 (0x34a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Apr 16 04:23:22 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=661dfd39-73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:ea:c7:42:38:a9:5f:12:eb:db:1a:96:c7:
e0:e2:b9:c0:38:12:07:18:b8:40:2b:18:82:ca:7e:
d3:a2:93:0c:af:17:8c:85:a0:b1:cf:10:66:ae:59:
b8:8b:b7:3f:52:d7:5e:23:1f:6d:39:11:0b:ad:7c:
81:5c:f5:de:19:eb:5c:70:95:5f:ec:e1:d7:97:ea:
7f:88:1e:a1:b7:1f:81:f0:00:36:11:61:37:f8:33:
ad:97:82:68:c1:14:16:a2:03:64:4b:04:03:ef:c9:
65:9e:88:7b:f3:76:68:d2:84:7d:70:cf:c1:69:c5:
d2:a0:37:8c:a0:65:e9:44:28:6e:82:81:a7:28:94:
29:d2:b0:04:43:62:fa:72:f6:3c:e1:8c:2b:da:6b:
01:86:8b:c4:fb:a8:ef:a2:fe:65:ad:92:f9:d6:a0:
71:5a:29:b8:61:fd:c8:3f:b4:57:31:59:43:e4:69:
9f:70:5b:6f:c1:e3:40:e4:dc:f6:97:63:0f:03:bf:
75:3c:f7:b4:28:cf:4e:18:78:7c:bc:c1:0c:b0:9c:
35:23:0f:8e:62:13:82:78:28:61:f8:26:23:e7:7b:
12:17:a1:33:1e:f5:6c:e2:b0:31:90:73:d2:05:59:
55:1c:f2:52:43:c5:58:b9:eb:e3:99:c2:a7:48:9d:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:90:69:55:72:B9:43:7E:FF:54:6C:84:76:23:B6:BF:25:EC:7F
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0F123208FBA911EEA155441FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:75:4c:63:c4:38:c8:94:7f:b0:6f:3d:c9:e6:fe:79:ca:07:
84:ba:1c:a7:ad:a4:23:72:af:29:4c:50:df:62:4b:df:43:2c:
c1:86:db:6d:b7:7e:0b:8d:2a:64:99:06:03:ee:4c:09:6a:12:
5d:47:17:cf:ac:f3:36:39:f4:85:56:ab:49:f1:7f:53:11:11:
c9:8f:27:6b:f4:5e:4c:4b:c9:56:24:55:ed:6d:47:1e:82:70:
7b:44:2f:11:bf:5a:a8:74:ef:eb:c1:b7:bf:17:14:62:e9:71:
c6:f5:ba:8d:31:ca:ee:43:07:e9:32:cf:29:f9:06:15:f2:42:
80:05:6a:4b:39:ac:fb:ee:bc:63:89:fe:6a:56:61:60:03:94:
98:3d:7c:21:c4:5b:0d:a8:9c:85:47:d2:84:7e:12:b4:b4:e6:
cc:65:e1:1a:ae:b6:bf:18:fc:c1:ac:80:73:68:ce:62:29:f1:
8f:b4:d4:af:11:0d:67:a2:df:d7:eb:32:a7:14:9e:4a:c8:54:
d1:80:fe:98:1b:eb:ff:c9:a9:ae:3f:80:56:52:6b:fc:48:aa:
94:ac:d0:61:84:de:21:3a:14:77:8e:d3:53:40:b8:83:20:80:
2e:e9:2e:42:af:00:d6:e9:18:43:14:86:80:c7:3b:7b:a0:84:
b3:0c:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 04:33:25 2024 by rpki-client on console-fra.rpki-client.org