Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F34C9F5E421711EE998FBB6AC4F9AE02.roa
File: F34C9F5E421711EE998FBB6AC4F9AE02.roa (raw, json)
Hash identifier: htvdO0hr5sV1bOVO1Jl4ByxqeTidQeXMEp79lcHKnjI=
Subject key identifier: 5B:85:66:B4:D5:9B:58:BF:EF:F4:30:A1:C7:02:11:35:6F:F8:01:7A
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3418
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F34C9F5E421711EE998FBB6AC4F9AE02.roa
Signing time: Mon 02 Oct 2023 15:10:50 +0000
ROA not before: Mon 02 Oct 2023 15:10:50 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 149784
IP address blocks: 117.121.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13336 (0x3418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 2 15:10:50 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651add7a-0229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:bc:d0:61:bb:bd:65:73:e1:68:d8:63:78:
a9:e2:38:fb:bf:5d:73:2c:92:ad:57:57:57:4e:3e:
29:cb:96:f9:01:b4:08:8a:13:90:4a:e9:26:cc:b8:
3e:15:91:ec:62:01:c1:d3:6f:f6:b3:a0:57:9e:e1:
fc:44:3c:a2:95:61:3a:e3:f2:67:90:19:81:f0:61:
91:fd:a2:71:96:af:a8:cc:10:07:29:ad:29:fe:c3:
a2:2d:f6:9e:e4:7e:22:df:42:21:a2:9b:12:c0:75:
e6:ba:71:f1:74:38:76:00:05:3f:ad:73:1a:5b:80:
3e:d9:64:da:71:26:58:b0:3b:9e:91:a2:02:a0:bb:
80:34:1d:53:fa:f0:60:db:d7:eb:19:d4:2e:c2:46:
c8:11:f3:70:1b:c9:a0:63:1e:a0:c2:e0:15:64:67:
e1:0b:8a:66:87:be:75:db:98:60:76:f4:f0:c8:50:
f7:8b:a3:c5:87:c8:59:2a:82:08:c3:64:34:c9:28:
21:32:ed:51:55:b5:ae:27:8c:9e:fe:09:50:1b:b2:
15:74:52:5e:3b:cb:58:05:4b:ff:de:82:fd:00:1b:
f2:df:bf:65:1e:b7:4f:51:e6:9e:19:39:c6:71:25:
26:26:24:45:ba:64:78:13:83:e5:ce:03:4c:3f:91:
56:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:66:B4:D5:9B:58:BF:EF:F4:30:A1:C7:02:11:35:6F:F8:01:7A
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F34C9F5E421711EE998FBB6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:60:e8:6b:86:4b:51:80:8b:cb:0d:c8:9e:c6:8f:cc:2d:23:
35:81:0f:39:2c:5d:2c:c1:88:d0:14:11:a9:d9:82:3b:7d:2d:
a6:5e:fb:d9:08:2b:a5:5e:e8:59:9e:e1:b4:0a:2c:29:93:29:
b7:df:e8:e1:ef:26:45:90:07:76:c9:1c:d9:20:67:7c:5f:17:
cc:ad:9b:53:8f:c9:a2:bb:93:0c:59:42:c2:57:89:92:a7:f6:
49:ad:f1:f1:bc:b4:1f:78:17:0f:e4:ec:10:25:bc:5e:be:21:
0c:76:0c:aa:94:8c:1c:65:39:1d:dd:6e:1c:d0:63:4d:aa:63:
d1:dc:d2:71:15:24:86:21:2c:24:99:88:6d:19:70:81:1a:b0:
38:6e:b6:1e:bc:0f:b2:a8:f2:95:f7:f5:39:a1:1e:7f:c2:f7:
94:d2:ef:72:ef:b1:e5:36:2e:39:5c:df:67:0d:51:4d:59:e3:
ec:bd:d7:cc:15:65:93:d3:02:33:e1:7b:e7:66:98:3e:b2:33:
64:20:87:25:d0:c9:98:24:55:21:ba:52:18:c2:b9:34:d2:e5:
db:ec:d2:3e:22:4b:85:c4:64:c2:68:73:95:5b:bb:49:ca:ca:
c6:92:7d:5e:af:6e:1a:15:a8:d5:8f:a9:ee:10:87:15:30:f7:
ae:fa:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 23:07:44 2023 by rpki-client on console-ams.rpki-client.org