Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/50A96D0CC00011ED86536475C4F9AE02.roa
File: 50A96D0CC00011ED86536475C4F9AE02.roa (raw, json)
Hash identifier: ueoks9Pwo9dPagi5l3EjJ7CU/zFa1/6KRlGBIQu9uag=
Subject key identifier: 06:6C:2C:D4:1A:2C:1D:D7:75:B3:71:4B:05:42:56:B1:C4:D1:8C:3A
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 0424
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/50A96D0CC00011ED86536475C4F9AE02.roa
Signing time: Sat 11 Mar 2023 11:31:51 +0000
ROA not before: Sat 11 Mar 2023 11:31:50 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 140900
IP address blocks: 122.50.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Mar 11 11:31:50 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=640c66a6-bb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:ba:be:4a:f6:72:6c:b2:f4:ef:40:e8:77:
c9:ce:d0:db:71:9e:c1:79:a8:0c:19:8f:7f:61:ae:
62:7a:2e:8e:73:61:1c:e5:d0:98:d7:b3:32:ef:aa:
79:ca:98:15:be:ad:7f:95:04:56:df:8b:de:0c:90:
a0:20:6b:a3:97:ed:e3:6c:b1:3e:5f:93:ff:73:e2:
8d:37:c8:7a:ec:3b:13:a5:8f:e1:00:65:cc:cc:c3:
93:68:56:09:ba:98:5c:eb:ea:8d:9d:00:05:9b:bb:
0c:1f:5f:34:8b:d7:f3:cf:54:b9:51:d0:b4:85:02:
48:13:2d:ac:da:28:a7:f8:47:c0:f3:13:d3:66:23:
89:cc:79:fe:72:c9:ad:e1:fc:1d:14:79:24:00:7e:
87:6f:96:e3:56:b1:58:8f:a7:9c:1d:58:07:2b:87:
0b:4f:05:f4:f3:6b:fd:88:f1:11:50:7b:13:2d:ab:
e9:65:ac:7f:97:4c:14:88:60:1d:61:cb:a3:be:f6:
f0:22:cb:20:c1:77:99:1c:d9:6f:66:c7:1b:4d:36:
b7:dc:7b:b0:ff:b0:15:2e:a6:bc:d5:d4:83:ef:9e:
73:1f:3f:77:8c:a5:bb:00:3b:d7:9c:8a:27:2a:51:
8d:55:73:a8:d7:21:f2:a4:e0:17:c9:38:3c:e1:1a:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:2C:D4:1A:2C:1D:D7:75:B3:71:4B:05:42:56:B1:C4:D1:8C:3A
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/50A96D0CC00011ED86536475C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f6:04:b6:2b:f8:db:80:44:be:a3:17:7c:60:6c:68:d4:b7:
22:b0:33:77:a0:95:2a:26:11:d3:33:5d:90:64:f7:65:79:2d:
30:84:c9:66:bb:4b:49:5e:72:2a:62:db:9d:61:46:23:26:80:
c5:a0:57:88:f0:e2:01:13:d4:4c:6d:6e:51:a5:2a:d9:a5:c7:
e9:6f:f4:90:e7:33:5f:b9:32:cf:8c:f6:a2:07:21:8e:51:7e:
e0:e7:e2:d9:98:a8:85:8b:e4:50:da:b2:7e:03:49:d7:63:e2:
ef:5c:f4:b6:d4:0e:63:07:c6:86:6b:e0:97:ed:10:65:e8:90:
15:a2:b4:38:d6:c5:c0:47:c8:b1:8c:b8:90:de:90:0a:1c:d0:
d5:e7:54:57:5d:ab:55:3e:a5:2c:2e:f8:cb:ff:43:db:b0:83:
85:a6:88:a4:a2:0e:f7:00:a1:a3:1d:fd:71:79:07:e2:bd:a4:
1e:76:e3:b4:8f:52:b8:e8:6d:d3:35:74:36:51:37:e0:31:67:
57:55:6a:2b:ca:e9:8f:62:96:7e:4d:1e:93:30:ee:81:58:d5:
6b:11:56:3b:c3:9d:76:18:7a:93:c7:cd:56:31:e7:ab:d4:e5:
ff:8a:f9:3e:96:f7:5b:c4:11:08:b1:fa:7f:70:dc:93:02:6d:
62:3f:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org