Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/6A325000A94C11EEA5337B42C4F9AE02.roa
File: 6A325000A94C11EEA5337B42C4F9AE02.roa (raw, json)
Hash identifier: KUNKAWUbqjtzdpJ/eD8t8cIVps8c7x+0AQhp/lPNzz8=
Subject key identifier: C2:F1:47:0C:7D:B6:45:59:82:4D:4A:6D:F2:3B:DF:BB:B7:E0:E8:14
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 021D
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/6A325000A94C11EEA5337B42C4F9AE02.roa
Signing time: Sun 28 Jan 2024 08:23:43 +0000
ROA not before: Sun 28 Jan 2024 08:23:43 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151499
IP address blocks: 202.12.89.0/24 maxlen: 24
203.12.236.0/22 maxlen: 22
203.12.236.0/24 maxlen: 24
203.12.237.0/24 maxlen: 24
203.12.238.0/24 maxlen: 24
203.12.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 09:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Jan 28 08:23:43 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65b60f0f-e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:a4:69:6e:cc:69:0a:ca:0a:db:d7:6b:54:
df:15:9f:c8:f6:2d:83:cf:b0:3c:6b:0c:47:5c:da:
dc:ae:cc:a4:63:42:6a:fc:1b:06:85:1f:fa:15:21:
a5:f2:84:7a:fb:c8:6b:2b:9b:9d:4d:b4:a9:12:38:
bc:bf:a4:87:a7:d5:1f:5e:66:1f:9c:99:e8:61:e5:
d5:66:e1:23:a3:6a:5d:de:6f:d0:fe:8a:60:d9:df:
0a:c3:7a:2b:e7:71:8a:40:7a:b5:65:fd:4b:3e:b1:
9d:30:c0:7d:62:43:39:c2:8f:f2:0f:d0:9e:72:eb:
9a:1e:47:23:18:ed:82:bc:3e:af:de:66:76:9b:66:
d0:07:b1:b3:3e:0a:a7:cd:3f:1d:17:fa:10:f1:8f:
68:28:11:78:53:f5:13:5b:7f:37:4d:f6:51:04:5e:
a9:0e:c7:24:79:f4:34:df:35:21:74:a9:53:80:8b:
9e:7c:81:0a:fc:b0:ea:18:6c:90:93:b6:06:54:57:
e4:1e:5c:86:f2:8c:1b:ff:e1:2d:12:1a:26:f8:c7:
fa:89:68:8f:c5:d1:46:d1:5b:e8:ee:20:a0:ed:cf:
02:4d:47:e5:11:52:82:32:67:02:a4:cf:77:0c:9c:
a9:78:9b:03:7f:c0:ef:64:73:24:f9:94:a0:18:58:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:47:0C:7D:B6:45:59:82:4D:4A:6D:F2:3B:DF:BB:B7:E0:E8:14
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/6A325000A94C11EEA5337B42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.89.0/24
203.12.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:e7:d3:88:15:44:d4:a2:a7:79:17:6e:bc:60:38:3c:38:d8:
9f:be:61:b5:1e:a2:fb:69:63:c3:e0:be:ab:06:b2:e7:9c:d3:
58:7f:7b:2b:15:88:11:6b:28:cb:e0:c9:d7:76:4b:1a:74:e4:
b4:c0:a1:b1:53:9c:54:2e:9d:69:c5:1e:49:50:7a:c8:58:b6:
f1:2d:30:bc:3e:97:57:9b:53:86:f5:f0:12:ec:53:88:62:b6:
aa:67:17:23:25:8d:7e:b3:c5:4d:bd:4b:0e:17:9d:dd:ff:0d:
2e:51:61:2f:36:55:8f:68:69:ec:13:35:1a:27:29:8e:9b:36:
87:23:90:7f:e0:1d:1a:44:6d:ea:e0:dc:57:1d:80:c2:5f:43:
a0:1b:df:8a:7c:ac:bb:a8:5a:a2:c5:02:e5:64:d4:5c:d7:6e:
a5:a6:98:51:aa:05:d4:4a:5d:a2:88:0a:98:ff:cd:bc:8c:87:
18:ae:f4:10:c8:7d:de:57:2e:b0:18:1e:b2:9b:1e:d2:2f:3d:
93:6e:b3:dc:d6:e5:51:d2:c9:36:b1:32:3a:61:9b:18:0f:1e:
b4:45:c7:bb:78:98:45:16:95:68:9d:64:ee:05:8a:22:bb:ec:
4b:66:c8:0f:51:04:17:b3:9f:e0:ff:8d:56:5f:15:9c:76:2d:
6f:5b:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 13:56:21 2024 by rpki-client on console-ams.rpki-client.org