Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/AB8FFA3ADDCF11EA8A5D361CC4F9AE02.roa
File: AB8FFA3ADDCF11EA8A5D361CC4F9AE02.roa (raw, json)
Hash identifier: 05VXTP2dYKEATzygDytBNVQTdDUUis850haUZflV5E0=
Subject key identifier: FB:A6:0A:BE:98:49:90:72:A2:20:AD:F2:BA:3C:80:B1:11:73:7C:0E
Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Certificate serial: 09B6
Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/AB8FFA3ADDCF11EA8A5D361CC4F9AE02.roa
Signing time: Fri 12 May 2023 21:42:41 +0000
ROA not before: Fri 12 May 2023 21:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17669
IP address blocks: 202.93.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A
Validity
Not Before: May 12 21:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645eb2d1-8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:4f:72:7d:41:e1:2e:a4:43:84:d2:74:67:
35:f7:24:53:f0:b4:10:24:ed:ab:e6:e6:c8:d3:9b:
79:44:09:2d:d0:64:0f:51:36:e7:89:d2:a1:cc:99:
25:ca:e6:ff:46:d6:3b:cd:06:db:96:25:f6:40:f0:
96:ac:b7:e1:4f:25:bc:ce:d7:69:c8:f0:ec:42:37:
27:88:01:8b:54:85:ec:26:6a:2b:5f:9c:de:b5:90:
57:63:12:dc:d6:df:a4:23:ef:11:7e:77:8d:ac:a5:
ba:f2:58:96:ca:37:5c:9e:60:07:93:df:a6:71:93:
e4:0f:a5:e7:65:c6:15:08:93:69:12:9b:92:63:6d:
c2:56:5f:24:2e:77:f6:b6:c6:e1:9b:58:9f:0c:c4:
16:16:83:96:0f:3c:d2:8b:95:11:c5:19:d1:5f:02:
ac:5a:e8:df:e4:30:b8:94:74:71:bf:bb:0b:33:1e:
1f:3f:92:04:3b:22:48:1c:ec:ee:e8:37:88:a5:ad:
49:ad:f4:27:e4:b7:4d:fd:4e:c0:a0:44:b0:f6:9f:
3e:1f:43:d7:e9:b6:5d:4f:21:53:19:57:14:0b:ab:
9b:29:9b:fa:8b:b0:14:90:6c:aa:a4:f6:d9:13:b2:
42:04:a9:d8:ef:a5:de:64:e3:43:c6:b6:17:1c:4b:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:0A:BE:98:49:90:72:A2:20:AD:F2:BA:3C:80:B1:11:73:7C:0E
X509v3 Authority Key Identifier:
keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/AB8FFA3ADDCF11EA8A5D361CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.93.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:68:bc:28:dd:f3:38:26:ab:bb:6c:83:a9:14:ac:14:b6:8f:
c5:b2:4a:0d:66:90:fb:e4:83:4a:01:5d:89:1d:05:8a:ef:32:
ae:6c:0a:7a:eb:4a:49:57:5d:7e:85:e7:f6:56:83:5a:c0:a8:
1c:f8:15:4a:f2:ed:6d:c3:3f:4a:21:b4:e5:f6:a7:55:95:e3:
6f:96:ec:52:20:e4:c1:bc:9a:ca:2b:49:2c:23:a0:47:12:ef:
ac:70:77:1f:dc:95:a3:eb:32:a6:7a:51:89:e9:1a:ed:e0:e6:
3d:d5:3d:9f:bc:b1:9a:36:57:fa:e7:f6:2f:4f:b9:a4:d3:70:
81:06:fc:ce:ce:c9:89:14:08:ef:20:d5:e3:47:17:ba:f6:a5:
99:eb:12:c1:84:0a:2d:71:cb:43:c6:54:c4:52:a7:6f:57:0b:
32:52:1d:93:35:ad:35:09:08:27:1a:7c:1f:5b:37:a9:68:cd:
c9:dd:32:fe:55:c9:61:da:24:a8:66:0f:18:2d:05:1b:97:0d:
c0:d3:75:75:97:93:38:33:9c:dc:3f:33:72:a1:ea:72:f5:b9:
a3:18:82:cb:49:3f:c2:e7:2f:98:e3:7a:02:d9:8b:88:28:4f:
ca:39:60:b3:a6:e2:bf:23:3d:9a:e2:d9:fe:d1:c5:e4:bc:3a:
0c:21:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 23:49:48 2023 by rpki-client on console-fra.rpki-client.org