Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/00D8009C2E9411E9A7232A19C4F9AE02.roa
File: 00D8009C2E9411E9A7232A19C4F9AE02.roa (raw, json)
Hash identifier: QSQWpnrUbeCEv9NkItUIIklzTGfHaDD9CUj1mQguXZs=
Subject key identifier: 0F:55:2F:FA:ED:4A:64:60:E1:EF:57:AA:83:BC:15:A9:F7:55:7D:F4
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2133
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/00D8009C2E9411E9A7232A19C4F9AE02.roa
Signing time: Tue 09 Aug 2022 04:43:12 +0000
ROA not before: Tue 09 Aug 2022 04:43:12 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 32399
IP address blocks: 112.198.24.0/24 maxlen: 24
112.198.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8499 (0x2133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Aug 9 04:43:12 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f1e5e0-f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:87:f1:80:89:03:8c:0d:74:ae:24:7c:e6:
14:e8:06:36:ae:fa:1c:e4:42:08:55:e1:09:d7:10:
5b:e8:d3:f5:f5:1f:94:ca:ed:eb:b2:20:80:29:4e:
2b:89:e6:94:f1:29:d8:b2:7f:dd:95:80:93:3c:81:
92:ad:e7:8b:5a:11:ce:f5:0d:3a:8b:d6:10:72:04:
cd:a3:35:d6:cd:c1:6e:68:3c:d6:d7:85:b9:fe:3b:
81:5f:40:96:95:f0:52:55:e8:80:94:52:26:d9:53:
c1:12:49:ee:8d:3c:d0:80:7f:0e:70:cc:b3:08:5d:
ba:e3:59:d0:e3:be:4f:6e:7a:ac:56:92:cc:36:45:
39:fb:3b:b7:ee:cd:d3:10:a0:c1:a5:8b:e9:fb:56:
c3:66:db:85:9f:bd:72:de:ac:d3:1c:d2:e9:2e:d5:
54:3a:67:33:68:1f:07:65:92:7e:dc:b7:e1:78:36:
a8:ad:14:4a:95:94:68:62:b3:5c:b7:e2:4d:ec:c8:
d3:a3:dc:9c:a4:5c:6a:fc:e3:5f:29:d7:ec:1f:22:
6f:ef:d5:82:89:7a:80:3f:01:3f:0c:dd:8b:70:46:
c4:e7:41:b8:62:f8:74:95:61:89:67:0e:fb:14:51:
5e:15:32:3d:3b:a7:96:f3:3c:1e:07:5a:f6:35:84:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:55:2F:FA:ED:4A:64:60:E1:EF:57:AA:83:BC:15:A9:F7:55:7D:F4
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/00D8009C2E9411E9A7232A19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.198.24.0/23
Signature Algorithm: sha256WithRSAEncryption
82:52:de:82:6f:97:d6:09:e4:f3:ba:68:b5:58:cb:37:d6:f0:
c9:01:8d:ff:62:c9:2c:20:e9:4f:2f:ce:05:d0:d1:02:dc:c3:
c5:d4:52:f1:6c:73:57:62:3e:82:61:b0:8b:d2:ff:0a:ba:58:
d3:6d:91:9e:01:ee:fb:6e:55:8b:4e:00:f0:22:40:62:03:4a:
50:4f:96:4c:ff:40:e0:cc:c8:b7:d1:a5:21:d4:41:c8:f7:9d:
35:42:5a:85:b3:ff:83:ce:c1:d5:f0:ec:bb:51:04:2b:99:d8:
a9:22:3c:2d:30:b2:db:a4:bb:14:b2:74:a0:b4:ee:84:0e:45:
3f:5f:bb:54:55:16:ae:0f:88:7b:11:18:41:d1:4c:6a:02:3a:
02:04:6a:b9:bd:fe:01:91:d0:e8:c5:38:72:d0:7d:4e:86:e0:
da:7d:23:07:f5:ae:52:a2:f3:28:74:1b:7e:70:b6:ff:0c:e5:
c6:5a:13:b8:96:c0:da:c1:4c:30:1a:9e:3e:be:80:42:f7:3a:
d0:06:76:f1:75:a0:94:dc:6d:6d:b3:19:83:53:51:1b:9c:3f:
b7:0a:fe:e7:5e:d2:e7:b2:cd:8b:a2:f5:cd:ec:14:25:09:f9:
44:41:88:ef:4c:10:79:f2:20:7e:50:ef:b4:67:6f:3d:a7:82:
5c:18:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org