Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3209950C603F11EBB4E2A42AC4F9AE02.roa
File: 3209950C603F11EBB4E2A42AC4F9AE02.roa (raw, json)
Hash identifier: fSq68iOFPb/G6+EmNl+vf6PICgvbBeeIpBr83vIUaQU=
Subject key identifier: 32:A7:03:5E:CD:45:31:C4:6F:B4:64:9A:9D:7E:3D:74:1F:49:7C:BA
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 34D3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3209950C603F11EBB4E2A42AC4F9AE02.roa
Signing time: Tue 26 Sep 2023 14:30:15 +0000
ROA not before: Tue 26 Sep 2023 14:30:15 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 10310
IP address blocks: 203.212.184.0/24 maxlen: 24
203.212.184.0/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13523 (0x34d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Sep 26 14:30:15 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6512eaf6-3dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:09:e0:54:8b:8e:35:cf:75:a4:8a:83:e6:
86:82:bd:8d:41:55:a8:fb:0c:53:90:08:0a:1c:2a:
9a:5e:df:52:1e:04:b9:06:b5:5d:6e:ef:90:76:b1:
9b:b4:87:45:77:58:fc:4a:5c:a0:73:cf:04:28:a7:
cf:86:fd:a8:2f:1c:53:98:34:1c:a2:5e:d0:f9:10:
1d:29:c4:35:e6:94:3b:a1:e6:f6:fb:07:4e:d1:36:
b2:c8:c8:23:bc:35:a5:f0:6a:d4:cb:e9:dd:2c:48:
b2:52:02:c8:1f:a5:7e:5a:05:04:30:87:b9:eb:39:
c3:b6:69:eb:95:13:4d:fd:41:65:08:69:03:31:13:
52:85:61:40:13:c8:bd:cc:e0:dd:a5:47:93:b8:e4:
db:98:99:76:a7:63:80:44:19:39:0c:9d:54:40:b5:
91:a2:15:01:ef:aa:f2:72:17:c2:bf:ac:4a:ba:b9:
f9:00:3e:41:ac:d0:c7:65:70:7c:e7:fc:93:e5:92:
57:89:3a:ab:70:fe:60:0b:7e:e4:f3:7b:a9:58:77:
f7:e5:42:9c:c0:59:20:21:8b:df:5f:b4:f3:90:81:
7a:a8:bc:fe:6d:39:17:ae:ff:8b:e4:a4:d4:e6:d7:
ad:a2:fe:b7:42:30:63:02:cf:07:c6:31:92:5a:10:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:03:5E:CD:45:31:C4:6F:B4:64:9A:9D:7E:3D:74:1F:49:7C:BA
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3209950C603F11EBB4E2A42AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.212.184.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ac:aa:2b:39:28:1d:52:4a:3d:bc:d5:35:5f:a8:da:e3:6f:
ac:e6:db:56:dd:13:17:e4:1a:b9:7e:54:a8:70:67:f0:19:c4:
77:f0:41:6c:54:70:1c:3f:53:55:09:16:1b:17:5a:08:ca:01:
90:95:3b:0e:bd:84:b7:76:28:13:c7:ca:48:6c:fa:5d:d9:6a:
d2:bd:3d:88:9d:80:45:9b:ed:b3:57:6f:c9:24:eb:91:fb:76:
c1:cd:43:e9:60:7f:13:65:60:1c:11:2d:5c:f3:87:a2:49:ce:
73:89:bd:7e:03:59:bd:cc:74:59:0f:e3:b5:3a:61:b7:0b:2c:
27:c2:c6:3a:dd:b9:5c:fe:32:63:44:30:be:e9:a5:d7:a1:04:
5e:c5:53:cd:fc:ab:e5:ea:9a:a2:36:d7:50:72:b5:1f:0d:7a:
91:1b:f2:08:b1:1c:a4:ab:7f:eb:75:23:8e:90:32:5d:a1:77:
01:ed:e6:ed:40:14:24:8b:48:ea:21:8b:0e:38:f8:c3:e7:3c:
67:76:d1:4b:4f:1e:7f:8e:a3:38:33:6f:4d:6a:c6:02:62:c1:
ea:02:13:2a:e2:53:96:8e:78:06:36:f1:10:37:f4:68:bd:a1:
8d:70:1a:15:ef:d5:51:45:a8:6f:3b:6c:91:18:02:8d:5c:69:
57:fe:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 07:14:56 2023 by rpki-client on console-ams.rpki-client.org