Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/BEEE22F0522911EFA69E5236C4F9AE02.roa
File: BEEE22F0522911EFA69E5236C4F9AE02.roa (raw, json)
Hash identifier: MA85B36zkiQWSHdYFgQN8ln65oEFMq1xY0itWaEdsuo=
Subject key identifier: 9B:09:5F:B9:17:14:AD:30:46:89:64:89:43:14:C4:4C:EA:32:49:18
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0673
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/BEEE22F0522911EFA69E5236C4F9AE02.roa
Signing time: Sun 04 Aug 2024 23:41:35 +0000
ROA not before: Sun 04 Aug 2024 23:41:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 142044
IP address blocks: 202.94.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 09:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Aug 4 23:41:35 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66b011ae-b67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:b3:ee:9c:f0:76:ce:3c:cd:25:34:e1:1e:
25:12:b0:9e:f2:08:ea:12:9a:19:09:a0:62:e4:a4:
21:e5:2a:fa:50:c1:e3:31:e2:a3:34:70:12:a9:1c:
b2:8a:59:d7:2c:d3:46:c7:33:e8:40:ed:9c:34:ba:
6a:bd:43:b8:f9:a7:08:37:e7:c9:2e:87:5c:fb:b8:
cc:34:96:e3:4d:35:24:c9:fa:8e:b3:2b:06:24:ec:
4a:77:f0:c1:d7:aa:44:50:cc:f0:8b:e4:63:c0:c1:
66:e6:25:51:62:56:d8:78:97:89:45:07:ff:b0:a9:
a1:2f:25:79:29:4b:91:a0:cf:7a:f7:3e:45:ff:15:
fc:a5:49:ba:8a:08:3d:29:14:ec:3f:58:85:83:90:
2b:6b:f7:4f:e0:3b:1c:56:f3:62:4c:a2:e1:c4:98:
93:d2:5a:4d:9e:59:3e:90:b1:48:9b:eb:82:d6:86:
a3:de:f5:0d:f4:8d:94:d1:a7:93:ba:7a:90:cb:b3:
82:fa:4e:58:d9:7f:5c:bf:99:d2:3f:e2:2b:51:bd:
4a:5c:58:c4:25:15:7f:24:67:96:89:98:7f:a8:44:
67:0b:2d:d9:a3:8f:23:82:01:32:8d:2a:43:85:78:
6f:6e:fb:53:f2:03:7b:96:3a:11:cd:d2:17:40:85:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:5F:B9:17:14:AD:30:46:89:64:89:43:14:C4:4C:EA:32:49:18
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/BEEE22F0522911EFA69E5236C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.94.165.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c7:f4:74:a8:02:af:04:a8:b8:bd:ba:ab:8e:8b:a1:ba:1a:
00:ee:bb:70:ec:60:c6:24:94:af:59:78:22:be:e4:09:0a:c1:
aa:9b:48:7b:e1:70:09:57:3c:29:bc:ce:7c:7b:73:06:ea:da:
a0:9b:e3:06:11:e0:9d:e8:42:49:5c:4d:e6:89:dd:1c:40:5d:
38:b3:26:16:76:f9:30:a1:e4:c0:8b:17:81:7d:c5:af:50:4d:
ee:1b:32:d1:3d:c6:11:91:5a:39:9f:c1:3a:1f:aa:2d:15:5a:
b1:fe:4f:fd:37:cf:e9:d2:b7:61:bb:dd:7a:36:09:cb:38:12:
0f:ec:e8:58:1c:09:ad:8a:36:58:c9:52:7a:65:4b:c0:9c:8c:
bb:23:9b:d0:57:29:bc:54:87:da:8d:b0:af:df:e3:91:cd:d0:
ef:23:50:e5:cb:6e:ec:04:88:b4:f0:77:0d:d9:12:f6:dd:c4:
13:7e:d8:68:80:a4:55:4a:14:67:42:f2:ad:46:e3:76:79:90:
25:ad:f3:77:6e:3c:c5:87:4c:5c:c7:0e:39:ff:ac:90:d6:5a:
0f:2c:7a:80:65:87:c1:1f:0f:61:05:86:75:bb:fa:19:15:08:
f5:97:53:10:00:58:0a:77:ba:db:f9:d4:4f:b1:79:19:62:8f:
e7:94:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:46:09 2025 by rpki-client