Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa
File: E56FCF286F9E11E9B98EF633C4F9AE02.roa (raw, json)
Hash identifier: PJmMh/qwguNTQZCz+vQpF8XUxuvLAkJ+96AJoCXgVLo=
Subject key identifier: 54:40:E8:56:4E:15:57:01:02:3C:E7:05:BC:17:E0:5C:D2:6F:DD:01
Certificate issuer: /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
Certificate serial: 0EDD
Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa
Signing time: Thu 24 Oct 2024 17:56:08 +0000
ROA not before: Thu 24 Oct 2024 17:56:08 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 134684
IP address blocks: 193.119.0.0/24 maxlen: 24
193.119.1.0/24 maxlen: 24
193.119.2.0/24 maxlen: 24
193.119.3.0/24 maxlen: 24
193.119.4.0/24 maxlen: 24
193.119.5.0/24 maxlen: 24
193.119.6.0/24 maxlen: 24
193.119.7.0/24 maxlen: 24
193.119.8.0/24 maxlen: 24
193.119.9.0/24 maxlen: 24
193.119.10.0/24 maxlen: 24
193.119.11.0/24 maxlen: 24
193.119.12.0/24 maxlen: 24
193.119.13.0/24 maxlen: 24
193.119.14.0/24 maxlen: 24
193.119.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 16:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3805 (0xedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7
Validity
Not Before: Oct 24 17:56:08 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671a8a38-05c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:1a:97:66:7d:ac:40:de:97:4d:48:55:52:
63:35:8e:76:26:11:71:11:b5:86:ee:c8:9b:33:64:
35:e6:16:90:05:66:0a:d0:ec:53:18:6d:e5:47:1d:
9a:94:6e:00:47:64:da:63:09:21:1f:ca:5e:67:7e:
23:5a:4e:08:57:c3:79:62:6f:da:22:f2:e9:70:c4:
0c:c3:ad:eb:ff:4f:bd:6d:57:f0:06:1c:ef:06:58:
c6:6e:33:ac:fe:18:91:54:ff:cd:f3:41:42:cc:74:
ab:37:54:08:d5:9b:45:d0:97:d4:d3:4b:5e:69:98:
5c:33:fa:e4:9d:c8:82:0f:6e:ad:f3:11:ab:34:fd:
5d:5d:58:1f:c8:fc:87:a4:da:01:47:d8:9b:08:39:
db:39:a3:6b:34:b3:1d:3c:15:6a:c7:84:7a:70:0e:
22:33:9d:5b:e9:83:6c:97:4b:3b:e6:2b:cc:81:47:
9e:c4:67:35:ba:b6:12:1c:2f:8d:b7:81:55:c2:3a:
c8:9b:69:00:b1:6e:df:da:1b:25:f7:a5:93:9b:06:
70:46:5d:de:e9:f6:3d:b3:89:d0:1c:66:98:cb:2e:
de:aa:14:ae:5a:cb:43:3c:44:30:f7:9f:f2:a8:24:
28:20:35:0d:a9:ba:87:fb:e8:1b:f0:61:12:c2:cc:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:E8:56:4E:15:57:01:02:3C:E7:05:BC:17:E0:5C:D2:6F:DD:01
X509v3 Authority Key Identifier:
keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
193.119.0.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:49:59:0c:13:ea:45:03:44:b6:cd:2f:cb:66:2a:c2:0f:c6:
2b:99:1e:98:64:d5:c7:a5:84:87:53:bb:2c:77:0f:21:31:3c:
55:d1:c0:2c:98:07:72:7a:21:fc:d3:3d:fa:9a:e7:7d:fd:3c:
d9:6f:4d:de:a6:ea:a6:d8:5a:30:c8:44:19:d4:46:05:cc:4c:
29:15:57:7a:bb:99:b8:52:c1:44:15:48:e7:ac:5e:98:48:2e:
38:4e:b2:55:57:23:32:d0:36:88:2c:b5:9d:1d:e9:1d:ae:47:
44:07:dd:36:ac:02:7d:5c:dd:14:0c:64:bc:9c:42:7e:ab:6f:
30:9b:d9:d3:16:e6:8a:be:dd:9c:8c:4c:6e:c1:eb:76:59:cc:
3f:01:f9:30:04:3e:8f:12:ea:4e:fa:db:e7:e5:6c:1e:25:3a:
d1:e6:b3:ea:2e:bd:ff:f4:1a:9e:f4:0d:ba:3f:31:37:88:2b:
71:23:bb:64:ad:eb:5a:c6:44:6d:c4:e5:c2:1a:cb:0d:0d:bf:
6a:e2:07:dd:02:39:9f:25:a0:11:7c:7b:ed:b0:67:37:a9:87:
1b:c2:29:cd:91:53:8f:ce:10:5f:13:b6:d0:2a:ce:d5:17:9d:
82:2c:db:c0:6b:3e:f2:1e:cc:c5:01:a5:49:71:5a:ab:8c:ee:
77:7d:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 20:03:55 2024 by rpki-client on console-ams.rpki-client.org