Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/16125E28001B11EE828EDB25C4F9AE02.roa
File: 16125E28001B11EE828EDB25C4F9AE02.roa (raw, json)
Hash identifier: GwrfQ7OuzJy7m5QBLAOLr80Tb3lzKJjOwQiP0ddTtek=
Subject key identifier: 26:4E:1A:1C:06:7B:FF:85:5A:CE:8A:67:44:5E:A3:75:14:39:A2:C8
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0219
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/16125E28001B11EE828EDB25C4F9AE02.roa
Signing time: Sat 01 Jul 2023 09:32:48 +0000
ROA not before: Sat 01 Jul 2023 09:32:48 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.7.0/24 maxlen: 24
203.32.21.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 00:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 1 09:32:48 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649ff2c0-bb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e5:6f:e1:63:22:fb:52:9c:de:6e:9e:c8:39:
d1:1a:db:5b:46:94:98:d2:45:f4:bf:2a:85:df:a6:
bc:88:8f:4c:0e:0a:ad:dd:6b:d4:9d:89:fe:c8:2b:
3c:2e:93:89:6e:59:0f:20:5c:39:9e:4f:c8:20:05:
74:b3:95:b9:e7:e8:2b:d0:1d:51:1b:30:79:97:8b:
98:d6:11:07:26:4b:72:68:da:c8:7d:bd:a9:07:5d:
d8:cc:c2:fb:8d:d0:05:4f:e3:cd:b6:08:f7:b5:e9:
7b:0d:3f:fc:ea:c7:e6:29:9a:7c:1c:06:0a:da:cf:
c3:dd:12:e3:fc:f8:30:48:7a:4b:df:13:c7:41:4c:
63:1a:3b:62:c5:1d:45:dc:53:bd:8e:b4:58:e9:7c:
47:80:34:21:dc:24:87:de:7c:8b:d3:d5:79:d8:12:
96:2a:58:a0:50:a4:2f:93:75:97:cc:a9:a2:75:aa:
b3:7f:42:c9:e9:49:c9:c8:1b:3f:a1:25:bb:74:74:
ba:2e:d3:69:fe:62:f9:71:ac:f1:c5:dd:46:28:9e:
f2:f5:cd:b7:89:5b:aa:88:1f:84:c9:f6:31:ba:91:
9a:2c:4d:1d:c1:93:12:c9:4a:93:4c:3b:92:27:f1:
ee:57:34:97:10:75:d1:8f:2d:3c:f5:38:93:ba:a9:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:1A:1C:06:7B:FF:85:5A:CE:8A:67:44:5E:A3:75:14:39:A2:C8
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/16125E28001B11EE828EDB25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.7.0/24
203.32.21.0/24
203.32.32.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f6:c3:11:7a:2f:91:3b:5c:7f:99:9d:db:13:c2:f1:34:a1:
48:b6:08:60:c5:39:e9:11:b4:c1:8b:9f:2b:6c:96:7c:76:74:
1f:bd:11:7f:73:83:87:20:01:0b:c5:cf:6b:e0:3c:62:b6:e6:
c3:20:6c:de:cd:00:1f:48:e1:3f:70:11:b9:df:83:b0:0c:86:
11:1d:1b:d9:c8:6c:40:6e:12:fd:b2:ca:dc:23:be:7b:4c:81:
c6:30:8c:f1:40:d3:4f:3f:eb:e0:7d:d2:3c:ad:a5:55:f5:b5:
c1:13:d6:fe:79:a1:62:7e:65:19:13:5f:fe:3f:56:bf:4e:d2:
f4:7a:72:79:0e:45:24:d6:39:50:57:9d:c5:9c:b3:d8:48:4f:
89:5d:4d:4e:6d:ed:2f:76:88:6b:7c:6a:bc:fc:23:57:1e:48:
8d:e8:83:87:f8:79:f8:d2:da:db:5f:8c:8b:c8:b7:1c:90:e5:
ce:54:80:fe:df:c7:d3:d5:40:88:ea:ea:93:ad:4d:5e:ff:b3:
93:17:11:96:2c:2b:dd:f8:13:c1:f4:93:4d:f1:4d:86:cd:ed:
f4:1b:2e:64:a0:e5:79:cd:a4:a6:9c:fb:b0:cb:93:74:1b:df:
8c:00:9f:0e:2a:3f:89:43:b6:8e:ee:b4:e7:d9:9e:f9:dc:7d:
45:b9:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:33 2024 by rpki-client on console-fra.rpki-client.org