Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/0A8790AE602911EF84AD3928C4F9AE02.roa
File: 0A8790AE602911EF84AD3928C4F9AE02.roa (raw, json)
Hash identifier: 8IO0PQ05g5tZYeBpt2rHCezffWDowElJIttcN/6Yf4I=
Subject key identifier: 28:83:E5:80:B5:38:0D:60:5F:94:19:C4:3B:10:E5:C2:7A:AC:AA:47
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 078F
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/0A8790AE602911EF84AD3928C4F9AE02.roa
Signing time: Thu 22 Aug 2024 01:51:26 +0000
ROA not before: Thu 22 Aug 2024 01:51:26 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 38880
IP address blocks: 203.56.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 05:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Aug 22 01:51:26 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66c6999e-4230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:d8:70:dc:10:0d:8d:d7:67:5e:ad:78:b9:
d8:19:a6:b9:8d:06:ca:91:00:b6:b7:51:99:c5:c9:
f5:58:fd:6b:77:48:b2:89:ee:83:ab:32:e0:52:14:
e9:40:d8:12:86:09:c2:e9:11:dc:d4:cb:c8:fa:53:
79:5c:b2:a6:6a:17:94:1a:75:e5:25:a2:ad:c3:1f:
52:ca:12:e2:f1:74:22:59:14:0f:ed:b3:c6:d9:ef:
1f:21:d8:b4:3d:f3:43:9d:66:ad:5d:e7:c3:a5:9d:
ed:88:1a:bc:f0:a6:e6:6e:58:0d:46:9e:64:3e:8b:
43:3a:1a:d8:cd:d3:47:ce:11:f9:d9:21:c6:33:85:
f0:62:c0:06:82:dc:c4:a4:39:3b:71:b2:ec:d5:b5:
39:40:36:f9:c9:57:7c:06:c9:4a:e6:28:e1:c2:93:
90:35:a1:17:35:30:31:da:0f:4b:2c:33:d1:db:01:
fe:dc:7d:86:a3:4b:ad:19:06:b4:72:4f:5d:8e:bf:
88:a7:29:2c:4a:c7:24:a4:67:cf:c1:13:0f:22:b3:
fa:38:d8:4b:81:ed:f1:30:71:5d:42:2d:6b:65:e5:
36:45:32:b9:c5:2f:c6:82:1a:9d:9a:f1:7f:2a:e9:
7b:99:6b:7a:2a:65:b9:c8:a4:0a:2f:5f:a9:73:ec:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:E5:80:B5:38:0D:60:5F:94:19:C4:3B:10:E5:C2:7A:AC:AA:47
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/0A8790AE602911EF84AD3928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.56.35.0/24
Signature Algorithm: sha256WithRSAEncryption
81:78:53:da:b5:92:93:af:0c:e6:b7:88:69:e6:92:74:0b:27:
99:01:7f:4f:79:a9:fd:0d:f1:0a:4d:db:d3:46:bb:19:54:f3:
27:44:3e:9b:d3:a5:66:28:36:7c:f7:7d:e5:a9:4d:1c:b4:9d:
5f:bb:65:2a:11:0d:7c:75:c3:99:12:4a:48:40:88:8d:ed:68:
f9:01:0a:c1:6a:4c:44:9c:24:e1:61:29:64:1f:26:cc:a7:6a:
60:94:a0:9c:2c:d4:19:98:68:48:a8:0f:e8:8d:9a:87:6d:e8:
38:3c:24:cb:7d:89:32:93:c0:65:bc:65:71:88:b1:54:79:e7:
b5:ad:c0:48:7b:ca:08:9d:9a:75:0d:fe:8b:85:f1:e7:1c:f4:
e4:a5:d6:59:cc:6f:79:e6:5d:b4:26:43:8a:0d:55:bf:a4:31:
e6:82:6e:95:33:b9:18:34:82:13:53:11:0c:f1:aa:a4:e3:f2:
50:e3:b7:05:7e:2f:74:e5:7a:ec:fa:19:9f:f3:f4:ff:4e:d0:
d6:ec:e2:68:70:94:42:9d:34:24:01:81:84:55:1c:06:06:c6:
14:0b:e1:41:57:d8:70:d5:70:c9:57:05:3c:c3:4f:43:ac:1d:
9d:db:2a:7e:48:1e:6b:d2:a8:27:2a:ff:9d:57:c8:8e:a0:48:
ab:9c:dd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:27 2024 by rpki-client on console.sobornost.net