Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/53C27FCCD34011ECBC1DA40EC4F9AE02.roa
File: 53C27FCCD34011ECBC1DA40EC4F9AE02.roa (raw, json)
Hash identifier: aPLuZQBRTB+Z0Vv5qgAslMzhYx098xm9ynXelPKMi/g=
Subject key identifier: D8:6C:F9:B8:44:0C:F6:66:DB:3E:AD:01:CF:3F:87:F8:5B:53:91:CD
Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial: 2123
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/53C27FCCD34011ECBC1DA40EC4F9AE02.roa
Signing time: Tue 09 Aug 2022 04:42:55 +0000
ROA not before: Tue 09 Aug 2022 04:42:55 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 132508
IP address blocks: 112.198.24.0/24 maxlen: 24
112.198.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8483 (0x2123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Validity
Not Before: Aug 9 04:42:55 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62f1e5cf-3349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:1f:f0:90:ba:39:a2:cf:09:bf:19:5b:4a:
e9:7c:08:da:d0:f3:67:72:10:f0:c3:35:2c:c6:ad:
39:1f:ae:da:33:33:70:af:7c:5b:cf:06:9a:15:a9:
5c:b2:f3:6a:58:ed:f5:fa:f6:f9:ab:6c:01:64:50:
b8:e7:ee:0b:7d:77:a8:3c:ef:a2:c9:6a:a6:aa:c2:
a5:28:b3:cc:77:06:8b:75:8f:3e:fb:ae:3e:24:e3:
81:7c:20:36:d0:9a:fc:1c:36:58:93:c4:c7:a8:a2:
ee:46:e5:5f:f7:0d:50:fa:cc:74:79:d7:af:b1:b1:
77:a8:d3:e8:d3:f4:14:83:c0:65:0c:72:04:b4:02:
2c:64:5e:66:06:e8:56:05:08:60:ba:36:eb:e3:e8:
80:bf:a4:fc:98:c6:6f:f7:51:2d:e5:59:00:e0:1e:
ab:3e:9c:0c:b0:92:ec:7f:a9:5a:dc:88:34:e7:a3:
de:7f:b8:a1:c2:cb:ba:97:fc:13:fa:6e:56:da:7e:
a7:63:24:ed:ca:2f:b6:ab:36:5d:33:f6:5b:da:67:
6d:2e:cb:97:ee:31:28:d6:91:91:be:17:cd:3a:40:
49:ee:ef:4a:18:fb:94:20:98:d5:54:5a:1a:e3:88:
dd:0b:98:15:0c:18:94:78:46:88:88:43:c2:1a:72:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:F9:B8:44:0C:F6:66:DB:3E:AD:01:CF:3F:87:F8:5B:53:91:CD
X509v3 Authority Key Identifier:
keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/53C27FCCD34011ECBC1DA40EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.198.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:cf:a7:c9:30:b1:cb:83:34:2a:43:ca:d4:44:31:74:58:a6:
de:c0:da:82:de:80:a8:66:83:c0:c8:82:99:a9:f2:09:3d:7e:
37:41:e6:29:af:e1:f5:4e:ae:ff:fd:a5:47:12:d4:76:05:b3:
f9:46:c2:71:7e:d1:e8:8f:b2:52:df:ff:2a:a0:98:ba:45:f4:
68:1c:51:7b:65:5b:38:57:7c:8c:81:f6:03:5c:65:17:bd:07:
14:d8:33:06:64:60:23:e3:d8:e1:ae:b9:19:aa:db:4f:68:81:
6b:6e:56:93:bb:fe:ad:66:ad:fd:31:c0:32:2d:7b:b0:20:b1:
1f:a1:d0:38:0b:02:a9:9e:8e:b9:92:33:a4:45:33:2b:6f:4e:
f1:34:84:86:3f:b3:ec:e5:2c:ec:20:e4:0a:70:da:c1:57:ba:
c1:3d:69:93:d3:d2:be:f0:ec:04:11:ff:26:10:71:27:17:2d:
23:55:1d:20:b1:22:fd:59:d0:2e:e1:2e:75:bc:1d:6c:85:be:
6b:ec:29:88:4b:7a:e1:d6:fa:de:0f:a6:cf:78:6e:32:f8:da:
4c:18:67:01:8f:66:38:6b:29:d3:c5:58:7d:2e:a5:3c:e4:4b:
1a:e5:fa:2e:2a:e5:f2:63:cf:93:0f:9a:2c:a7:77:d2:0a:3a:
2d:8f:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org