Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CEC233F8551711EDA9F4E555C4F9AE02.roa
File: CEC233F8551711EDA9F4E555C4F9AE02.roa (raw, json)
Hash identifier: TXSyL8LcDjRQR0Vp38vyn1mItyIwqFfD+Dm4PyyUocY=
Subject key identifier: 1E:63:E1:A7:2A:90:43:53:D6:FE:F1:68:1A:FC:77:B1:09:4A:35:F0
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3380
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CEC233F8551711EDA9F4E555C4F9AE02.roa
Signing time: Wed 26 Oct 2022 10:20:26 +0000
ROA not before: Wed 26 Oct 2022 10:20:26 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 140900
IP address blocks: 175.29.112.0/24 maxlen: 24
175.29.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13184 (0x3380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 26 10:20:26 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635909ea-4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:a0:ec:b3:38:ff:d0:57:b2:8a:9f:9f:ed:
c4:af:d2:22:48:91:2f:dc:38:27:46:64:2b:80:d0:
ff:f2:da:d9:40:a1:d1:76:3a:eb:65:1c:12:4d:ab:
f8:0d:bb:96:f0:c3:ea:50:a7:d6:66:ed:ba:4a:2d:
2a:8d:5b:e6:0a:d0:17:91:0b:b7:6b:96:19:09:1b:
92:23:bb:3d:15:95:f8:5f:7d:9a:e9:e9:44:70:08:
fb:da:2d:56:c0:b5:5c:f5:f5:e3:e1:2f:0f:bb:c6:
49:76:a8:04:f8:ce:3e:19:6f:d5:6a:54:35:6a:79:
55:a0:ca:3a:97:9c:b5:d0:27:5c:05:25:b9:f4:c1:
91:93:3d:7e:0c:cb:57:76:0c:31:57:4a:35:e7:de:
7b:e4:78:0c:12:71:35:d3:69:84:77:58:26:8a:67:
f1:32:80:b1:9f:2b:f2:26:2c:98:53:42:f2:0e:2a:
48:a1:6b:61:2a:1a:ce:3c:de:ba:15:a4:b4:5a:3e:
1f:04:fe:17:40:51:36:73:89:93:8d:02:22:29:8a:
82:1b:37:b2:db:8d:f2:0f:c4:40:f2:18:a1:a5:d9:
61:94:65:0b:45:cd:a7:02:81:5b:19:ea:ac:67:ac:
2e:5d:64:15:bb:7b:86:db:f8:69:8f:f2:0c:e9:07:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:E1:A7:2A:90:43:53:D6:FE:F1:68:1A:FC:77:B1:09:4A:35:F0
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/CEC233F8551711EDA9F4E555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.112.0/23
Signature Algorithm: sha256WithRSAEncryption
26:45:a6:3b:f5:1a:85:e4:79:bc:2c:6e:18:1d:b2:9e:0c:ff:
4a:16:d7:a1:66:3a:86:3f:38:dd:77:c5:84:ff:52:7b:52:c8:
e7:6f:4b:ae:db:47:48:2e:d8:a6:28:b2:e4:f4:58:f8:86:7e:
b1:2c:cd:61:00:dc:4f:4d:46:78:be:9e:7c:db:9e:d7:50:8d:
e7:a0:98:2a:e7:7e:92:72:13:8c:b6:4b:0c:4b:64:a2:27:a7:
f1:29:af:0c:ae:78:f4:7b:da:49:f0:36:d6:ca:fd:ea:58:43:
bf:85:1a:ab:4a:26:34:b8:80:c2:3c:da:49:b2:47:a9:f8:60:
90:a3:20:be:57:a0:2a:c0:f9:b4:37:3e:84:43:a4:b8:ad:c2:
cf:79:2b:9e:fc:1b:03:3c:20:2e:58:3c:b7:10:ba:2d:07:73:
db:38:12:8c:97:3f:87:d6:4e:36:ea:cd:4c:d4:9e:0b:00:89:
73:f7:ed:55:6a:f5:1c:8a:52:09:83:1e:d4:84:8d:3a:0a:dc:
ca:dd:e6:b8:4f:1a:d8:8f:df:a4:44:12:2d:b6:9a:10:36:bf:
e4:71:5d:34:9e:54:b6:7e:b9:9c:2e:3c:6a:0a:c7:ea:50:30:
80:95:f6:66:82:b9:84:3e:b0:ed:95:f8:fb:e9:58:7c:ee:be:
02:33:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org