Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/018C506A25F711EEB65EC47FC4F9AE02.roa
File: 018C506A25F711EEB65EC47FC4F9AE02.roa (raw, json)
Hash identifier: 2cYbUg923x9oz/8WIJdt03ULR8fiyQ1ZYLrTsTAMbYw=
Subject key identifier: 61:BA:CE:81:03:D5:EA:A0:79:0A:DC:2C:6E:50:A6:AC:F6:38:8A:8B
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 32
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/018C506A25F711EEB65EC47FC4F9AE02.roa
Signing time: Fri 22 Sep 2023 04:02:58 +0000
ROA not before: Fri 22 Sep 2023 04:02:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151469
IP address blocks: 210.56.140.0/23 maxlen: 23
210.56.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: Sep 22 04:02:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=650d11f2-7329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:be:1e:7f:4b:94:a6:3f:a0:cd:36:44:da:
5d:2f:cc:63:49:16:b0:22:dc:7d:5b:ed:f9:30:48:
1d:0b:6d:28:c0:19:98:06:34:36:a9:39:9e:17:a6:
2a:48:e2:80:8d:7e:dd:9e:7f:23:b8:2d:ad:ea:77:
0d:6d:4c:d3:40:17:c7:f4:76:a1:c1:0f:7b:1d:6b:
3f:bb:c5:6c:3c:ee:b3:62:69:da:ed:43:10:c5:e2:
db:90:ba:6d:45:9d:91:95:11:44:83:a6:92:bf:5a:
93:e7:a6:fc:dc:ec:29:47:b4:f1:f7:62:52:73:8b:
ee:66:1a:17:fc:32:97:13:f7:44:7b:0b:85:ec:e9:
55:45:a5:0c:89:b6:a1:49:3f:a2:14:77:c1:80:c7:
b9:f5:bb:6f:8b:53:01:6f:8f:1f:30:8a:b4:d2:b9:
7b:8e:41:59:45:c6:1c:cc:8a:74:07:d6:86:7a:b2:
ee:f2:3d:7a:3a:45:f6:31:60:94:a4:fd:dc:c3:27:
f0:2b:4b:5c:9f:9b:4a:41:92:78:1b:ba:f3:c2:4f:
c9:32:59:ba:12:d1:2a:35:fc:8c:79:44:23:c8:ee:
9b:08:4b:b0:c7:ca:57:03:f5:b5:0f:6d:e6:74:a4:
de:fe:2b:b0:12:3b:87:eb:e2:cc:9d:c4:49:d9:fe:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:CE:81:03:D5:EA:A0:79:0A:DC:2C:6E:50:A6:AC:F6:38:8A:8B
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/018C506A25F711EEB65EC47FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.56.140.0/23
210.56.143.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e5:8b:e1:3c:9e:9b:61:8d:de:0b:bc:77:36:59:1f:5c:00:
a2:aa:6c:cd:ca:64:13:e7:f1:a5:1f:48:3e:1f:05:5e:d9:b8:
72:49:07:6d:12:25:90:8f:55:9f:1a:10:e6:c2:d4:2c:31:e0:
3e:a1:93:14:d4:33:32:e9:bf:d8:0c:e7:f6:74:1e:eb:02:d9:
6f:16:3e:86:e2:5f:9d:04:c1:11:95:9b:a2:46:4d:c9:74:43:
28:7b:ba:33:e2:2d:9d:a0:80:a7:7f:67:9e:28:31:d2:48:01:
c7:7e:5e:c3:61:0a:83:c3:ab:e0:7c:cc:3c:29:08:e2:90:3a:
13:58:d8:83:9b:8d:eb:e2:01:8a:78:4c:da:7b:a9:1d:97:70:
32:a1:b3:77:b5:e8:7d:2b:53:9f:86:bb:bc:aa:39:0c:d3:09:
1b:82:18:85:70:ee:90:8a:d4:11:c1:f3:38:4c:10:4a:a7:38:
2a:f6:ea:93:aa:11:9f:51:3f:e6:88:ad:2a:27:f1:3c:19:50:
b4:4c:71:3a:36:11:ad:3d:bb:0e:d7:a3:f8:f7:99:fe:80:1f:
5f:e1:00:17:02:d4:15:d7:92:f7:fb:cd:b2:2c:f1:b6:e4:eb:
08:f4:13:11:d9:d0:d8:e2:42:53:b5:5a:e2:2c:24:56:8a:ac:
0a:26:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 07:54:46 2023 by rpki-client on console-ams.rpki-client.org