Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/119D6B669BA511EC85B5924CC4F9AE02.roa
File: 119D6B669BA511EC85B5924CC4F9AE02.roa (raw, json)
Hash identifier: KrNBrRFXGmk7dz4QkQ8aMg12riEY2d5WYb60QFSzVsc=
Subject key identifier: 79:5F:34:5F:A3:AA:99:53:EB:F9:0D:DF:38:E8:B3:99:FB:8B:76:6A
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1D6F
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/119D6B669BA511EC85B5924CC4F9AE02.roa
Signing time: Thu 28 Sep 2023 16:33:36 +0000
ROA not before: Thu 28 Sep 2023 16:33:36 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 135596
IP address blocks: 43.92.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 02:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7535 (0x1d6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Sep 28 16:33:36 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6515aae0-dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:52:c9:9f:26:49:20:f5:55:5e:94:d8:ba:
97:c7:2d:a9:ac:6b:81:68:6b:1a:c7:09:9f:7d:9e:
a9:76:1e:50:67:f1:59:23:a7:67:90:06:a2:7f:5a:
ab:6c:63:c2:d3:07:81:70:0d:e8:53:7d:dc:e4:6f:
d3:5d:71:67:91:32:11:15:af:0b:13:53:8d:d3:4c:
8d:91:57:1b:45:98:ca:3e:fe:a4:e5:4d:fd:63:46:
a4:ef:cc:7c:19:f7:c1:fd:9b:8c:28:50:9e:52:0c:
79:c7:2e:17:49:f0:3b:da:6e:a2:9d:29:1e:39:ad:
39:3a:29:ec:04:eb:62:2b:f6:99:35:1c:2d:fe:fb:
aa:cd:86:eb:23:82:ff:f1:90:4c:30:04:00:e1:35:
11:3b:96:19:83:29:0c:7a:50:4a:ca:57:5b:49:9d:
4b:5b:c4:10:9a:ad:de:19:6a:37:e9:4d:e9:1e:88:
74:4c:0c:85:59:a8:be:58:52:c2:eb:a3:4d:ca:66:
15:e3:f0:a2:7b:5c:11:ab:9f:5c:a5:a8:aa:ea:5f:
b4:30:3b:83:71:69:64:e4:48:e4:ab:de:0b:2f:f5:
18:22:29:d9:21:5d:ba:ac:78:30:30:4c:be:fc:90:
40:89:d0:60:29:b0:bf:7a:a7:68:43:8e:59:e5:f2:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:34:5F:A3:AA:99:53:EB:F9:0D:DF:38:E8:B3:99:FB:8B:76:6A
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/119D6B669BA511EC85B5924CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b5:e0:66:f6:de:f4:d4:46:20:1c:0d:44:cc:d8:7f:1a:41:7a:
53:23:a4:aa:cd:89:2e:f2:85:b3:db:90:4a:3b:70:a7:10:dd:
52:d5:65:88:c4:5f:e0:92:6d:18:0a:45:a6:34:b9:95:4e:b3:
1e:92:e3:dd:a2:19:30:b5:d3:c5:9b:69:b5:69:f4:0e:fa:72:
cb:2a:eb:06:4d:96:78:54:07:5f:5c:5a:73:a8:a4:82:81:5b:
d3:9f:9b:1d:b0:68:2f:04:ce:9f:26:41:02:4d:49:13:b1:2d:
67:ed:ae:7e:b7:9f:b5:0d:4b:42:f5:ce:a6:33:f0:fb:ca:bc:
65:7c:d3:a8:c4:ef:f0:23:ad:76:57:a1:04:6e:ee:eb:97:4b:
f5:97:6f:66:de:bf:9c:47:6a:71:69:dd:a4:58:2e:d2:be:be:
c7:0c:85:94:7a:17:44:c9:f2:fe:53:8c:69:29:68:ac:b7:16:
ad:ce:e1:24:df:2f:cb:aa:46:74:cd:f0:de:bf:fe:f8:51:ed:
34:94:7d:dc:78:c7:5a:e5:0f:24:d6:60:73:d4:ee:1d:6c:8a:
82:c0:a6:1c:8a:18:2d:d6:bb:b2:02:74:6d:cd:94:76:62:21:
98:f3:77:80:7c:d1:27:64:36:6b:42:2b:97:6c:30:4e:4f:b3:
6c:b4:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org