Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/CEEDDAD0902A11EAB310457AC4F9AE02.roa
File: CEEDDAD0902A11EAB310457AC4F9AE02.roa (raw, json)
Hash identifier: q7wl0yMtY8gbHxOXTCDWtJox8jG08T26Al9RS+GpKDQ=
Subject key identifier: 47:EB:8C:01:B4:21:02:0F:14:77:77:C5:83:5C:B9:6D:90:39:98:D3
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 33ED
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/CEEDDAD0902A11EAB310457AC4F9AE02.roa
Signing time: Tue 06 Dec 2022 14:40:17 +0000
ROA not before: Tue 06 Dec 2022 14:40:17 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 131089
IP address blocks: 61.19.16.0/24 maxlen: 24
110.78.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13293 (0x33ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Validity
Not Before: Dec 6 14:40:17 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=638f5451-6a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:bc:17:84:01:40:d0:57:c7:66:36:37:92:
4f:2b:71:79:52:68:95:32:1f:8d:b3:9e:08:34:0d:
e8:c3:54:e9:72:db:b2:d4:bf:62:e1:0f:b3:55:eb:
16:bd:45:d9:9f:1c:34:11:96:0d:b9:c5:9b:fa:c9:
00:a3:e9:8f:15:89:45:e3:09:b3:e0:c9:e7:4a:7e:
89:c2:1e:58:ff:12:84:5f:03:ca:47:f3:20:49:29:
5a:e2:6f:e6:f3:02:2d:15:8b:f6:01:6b:3a:ea:3a:
bb:6b:6f:9b:b5:62:a4:52:6f:7e:6c:d5:41:03:7b:
50:0a:7d:09:8c:17:eb:7c:d3:7b:d0:4b:cc:18:2d:
b9:ae:67:bd:14:d5:d4:7f:41:f3:0b:52:fb:5a:f0:
eb:c4:48:71:47:0e:95:ba:ee:e4:79:1c:9f:6f:ce:
2a:f1:13:b2:06:24:3f:da:ae:e5:b8:a6:6b:b7:82:
34:fc:a0:cd:91:81:aa:bb:2c:42:86:86:64:05:8b:
ec:7c:1a:54:4a:e5:2d:cf:7d:20:63:69:28:bd:f9:
10:e3:f4:58:8f:0c:d3:11:22:9c:e8:e9:b5:cd:6f:
27:d4:e9:61:66:48:37:60:c5:05:93:17:9e:95:83:
6b:33:03:92:8b:dc:cf:7d:f4:f6:d7:bf:78:eb:5c:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:8C:01:B4:21:02:0F:14:77:77:C5:83:5C:B9:6D:90:39:98:D3
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/CEEDDAD0902A11EAB310457AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.16.0/24
110.78.25.0/24
Signature Algorithm: sha256WithRSAEncryption
66:57:61:a6:50:b0:1a:7d:cd:dd:fc:3c:cc:c3:f1:13:51:89:
f1:43:0f:33:28:3c:cc:fd:b3:f9:cb:49:8a:85:f7:27:13:6b:
b7:c3:6b:89:fb:fe:ef:42:d3:56:36:e5:27:34:f5:1d:e1:fa:
5e:98:de:91:b6:8f:55:6d:6c:d9:e7:15:4c:b4:6f:5f:15:3f:
7d:de:ad:9d:2f:0f:2b:71:9e:e1:b3:02:84:17:53:07:e0:61:
cf:ee:bd:77:d6:d1:aa:d1:87:9f:4d:ce:dc:b0:c6:34:5a:b4:
33:e2:59:51:05:97:d8:7f:3a:23:cf:08:58:9e:22:6d:04:02:
d4:a0:9f:c0:eb:8d:2c:59:32:fa:4b:cf:24:7b:df:7a:e4:be:
59:e3:87:08:a8:62:b3:f6:22:19:8c:65:56:f7:fa:1e:c8:c9:
dd:56:05:e0:a1:27:86:c1:35:d6:b2:08:cf:c5:02:89:95:a9:
aa:da:b9:2f:0f:75:4f:67:24:d7:36:1c:c3:af:93:f8:9a:72:
8a:c6:99:04:7d:aa:a4:6a:48:c1:6d:2a:db:f4:d7:5b:31:42:
19:1f:9e:53:d0:1a:40:07:24:94:1f:a0:c2:6c:f1:03:38:5f:
3b:df:29:c0:e9:30:d1:3d:5a:bb:06:e1:16:fb:af:60:14:ca:
4e:38:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 15:13:58 2023 by rpki-client on console-ams.rpki-client.org