Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/4292C7B648A111EEB4D51A58C4F9AE02.roa
File: 4292C7B648A111EEB4D51A58C4F9AE02.roa (raw, json)
Hash identifier: tZK2RKhWGPjGb0tASMW34hd46t+KdAZm7Xt0Hh//yqs=
Subject key identifier: B9:54:69:EB:DB:FD:7D:6E:4B:93:98:29:9C:2A:14:7B:9A:9C:51:52
Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175
Certificate serial: 097C
Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/4292C7B648A111EEB4D51A58C4F9AE02.roa
Signing time: Fri 01 Sep 2023 08:26:34 +0000
ROA not before: Fri 01 Sep 2023 08:26:34 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 9790
IP address blocks: 202.27.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175
Validity
Not Before: Sep 1 08:26:34 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64f1a03a-583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:0f:34:5e:17:0e:c7:ed:d2:2d:69:dc:ee:
ec:5a:2f:b4:cb:ef:b1:fc:d7:18:de:a1:04:46:3f:
ba:bb:9c:aa:b1:64:74:ab:b5:95:2f:77:62:19:65:
36:8f:86:fc:6c:50:28:ae:8c:0d:cc:33:a9:96:bc:
fc:e1:e8:2d:ed:65:eb:7c:21:44:de:c0:ea:a3:54:
19:87:92:3b:9f:b8:b5:38:2c:f1:4e:3b:68:ff:74:
db:1f:dc:dd:f6:10:03:93:3a:2e:aa:e4:2e:eb:55:
76:c6:44:06:fb:76:f5:47:66:a3:f4:28:1a:2e:7f:
7f:f8:7a:c4:12:2d:99:42:a4:bc:30:62:99:73:79:
51:9f:97:58:5e:2c:af:08:d0:65:07:2e:01:a3:2f:
96:d5:79:e4:23:3b:49:00:65:fc:0e:da:2c:c6:0a:
ce:64:e3:03:ec:fa:f5:c1:da:d4:7f:8f:88:f4:98:
3f:dd:c5:40:ae:17:ff:b8:17:c5:5d:34:75:b7:0a:
ea:ec:58:fb:b3:01:ed:90:39:29:89:6b:34:ac:41:
c5:4c:b8:7f:00:9c:a2:9a:f3:64:de:a1:79:e1:07:
06:2d:c3:b0:b7:71:3b:19:9f:c5:53:c7:7e:c5:4f:
c2:b6:49:29:06:42:b6:2a:ff:49:83:08:05:b9:13:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:69:EB:DB:FD:7D:6E:4B:93:98:29:9C:2A:14:7B:9A:9C:51:52
X509v3 Authority Key Identifier:
keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/4292C7B648A111EEB4D51A58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.27.113.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e0:04:34:56:cf:db:a0:85:13:ac:08:59:87:e8:23:04:8f:
93:bb:6f:2f:1d:c2:fc:36:8c:c7:32:6a:52:e6:eb:bd:54:ba:
8e:1a:5f:24:8f:5f:ea:9f:42:e8:74:2a:20:e0:8c:5b:42:41:
c8:5c:80:dd:f7:4d:5c:93:b4:cc:d5:d0:7f:81:60:c0:3e:7e:
95:b0:95:78:c7:9b:63:40:e6:28:09:d4:8c:4e:06:a9:6f:cb:
d6:66:db:8d:23:40:c1:66:42:ef:40:0d:83:94:fe:c3:3e:43:
95:d0:a1:03:b6:d3:75:36:a8:21:a1:68:80:90:9a:fb:45:6e:
dc:22:4b:4c:6e:b9:be:46:2b:21:61:03:8c:c0:05:eb:88:5b:
f6:93:c4:61:de:75:7a:34:29:f1:cc:3d:7f:8f:79:0f:08:bc:
64:93:42:f6:66:ec:05:bd:f6:5d:de:6e:63:66:bd:f8:4d:36:
62:67:df:c3:4b:1a:cc:28:2a:6e:c4:37:97:42:88:86:6a:16:
0d:d7:44:8a:c2:f4:e7:f0:c1:4e:dd:ef:a5:8f:05:1a:bb:5d:
8b:23:0c:27:7a:fa:7c:04:da:33:4a:a7:88:e3:60:1a:6b:e7:
fa:c0:5b:9b:b1:88:64:00:d0:42:74:f6:d5:ca:a8:81:9a:0b:
7c:b5:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 03:43:56 2023 by rpki-client on console-ams.rpki-client.org