Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C7F3C8A7EA711EE9C448073C4F9AE02.roa
File: 1C7F3C8A7EA711EE9C448073C4F9AE02.roa (raw, json)
Hash identifier: hWU6Be3Yk7bT6R+jfDkjwFl0xGInVAmme5lE5BBY+0A=
Subject key identifier: D1:EE:FC:89:52:72:A7:15:CC:84:87:4A:B9:40:2C:EB:C8:5F:1C:7F
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0387
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C7F3C8A7EA711EE9C448073C4F9AE02.roa
Signing time: Sat 15 Jun 2024 05:11:12 +0000
ROA not before: Sat 15 Jun 2024 05:11:12 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 398343
IP address blocks: 203.32.22.0/24 maxlen: 24
203.32.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 05:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jun 15 05:11:12 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666d2270-b9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:ab:29:cf:9e:4d:aa:fb:51:e9:48:86:5d:
d9:2f:ba:c7:7a:32:0b:0b:0c:8b:1f:ff:58:79:c8:
7c:7a:00:6f:eb:fc:1e:4e:ee:39:a6:93:9e:6b:c8:
2c:1f:2c:4e:19:79:b2:3c:01:02:b8:f7:9a:69:5d:
d9:18:31:d4:7f:ea:8a:c7:89:6a:b0:59:3c:e2:de:
91:82:d5:5e:e6:d2:fb:a0:91:fc:87:48:df:15:f8:
4c:a4:53:6c:0b:18:dc:db:de:a0:09:31:70:ae:b1:
ad:81:06:3a:54:e6:40:95:ed:c4:b7:7a:29:cd:69:
0d:52:36:38:8f:cc:14:a4:0b:9a:2b:74:47:89:aa:
e9:2c:bf:76:95:23:98:a4:57:b0:61:a4:92:79:ff:
98:2e:a2:a0:42:cc:b3:d3:12:d6:38:95:26:6a:e6:
0d:7d:5b:13:15:11:1a:0f:00:1e:89:8f:e7:8f:29:
3a:f5:d2:f1:63:67:ac:2f:4d:88:53:ae:de:03:b0:
54:18:3a:4c:f6:f8:57:b4:e5:14:a4:c0:a5:a5:1f:
30:d3:99:6d:03:e3:08:35:32:6d:3a:7a:9d:61:5b:
46:2d:3d:6d:1c:c4:56:34:b6:5d:fe:3c:3b:6f:04:
47:44:27:ee:13:33:86:e3:b2:5a:4f:88:59:c6:c6:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:FC:89:52:72:A7:15:CC:84:87:4A:B9:40:2C:EB:C8:5F:1C:7F
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C7F3C8A7EA711EE9C448073C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.22.0/23
Signature Algorithm: sha256WithRSAEncryption
33:28:9a:72:09:3d:20:5f:b1:0b:01:f0:30:4f:20:c9:cb:7d:
67:24:b3:13:1d:3e:9b:9d:dd:3a:2a:6e:b4:ba:af:c6:f8:c2:
c8:dd:1e:92:05:5e:bc:e3:f4:06:fb:4b:bd:1c:ff:c3:2c:84:
da:57:d3:84:c6:d4:0e:c0:26:35:3e:a5:4f:27:0b:a4:42:5e:
39:34:5c:50:c2:aa:5e:0d:50:54:9d:2f:5e:a1:ad:00:51:7e:
7e:e9:4f:0a:07:45:d9:ef:56:81:e3:dd:8b:53:1d:ec:4b:23:
e2:0d:24:d0:ed:4b:d5:96:db:27:63:c2:36:08:43:92:6a:c2:
c0:ea:73:23:87:1f:64:c8:d6:41:08:86:ae:ba:c6:5f:66:03:
80:98:e1:8f:d6:c1:27:cd:d5:ec:73:58:26:35:9a:09:55:97:
8a:d3:0d:58:d8:ad:f5:f1:de:8a:e6:ae:f4:93:3f:74:61:a9:
68:9d:55:f5:3a:f6:17:44:b6:b8:34:f1:65:a7:ed:9c:b7:6d:
84:20:fc:fd:f4:5d:a9:f4:e3:8a:e4:2d:d7:19:5a:5d:87:24:
d3:e7:79:83:e1:51:a1:a2:71:39:15:ea:ba:c4:8c:2b:e1:30:
7d:58:fe:30:e1:d2:55:f6:c9:ca:c7:52:b1:cb:43:56:a4:65:
5a:07:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 08:15:16 2024 by rpki-client on console-ams.rpki-client.org