Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B9CF3AEC7CE111EF94FBDA83C4F9AE02.roa
File: B9CF3AEC7CE111EF94FBDA83C4F9AE02.roa (raw, json)
Hash identifier: wYaREQlYbrGD9Ff3jrZTHAdhPcTV6YVOTvjf6rGYp38=
Subject key identifier: 28:1C:56:86:7D:75:00:0B:57:B3:8B:02:24:D8:68:AE:60:39:94:F4
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 03CB
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B9CF3AEC7CE111EF94FBDA83C4F9AE02.roa
Signing time: Fri 27 Sep 2024 15:04:00 +0000
ROA not before: Fri 27 Sep 2024 15:04:00 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 215930
IP address blocks: 203.32.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Sep 27 15:04:00 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66f6c960-0db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:f1:74:cd:21:eb:5b:84:4c:39:73:59:bf:
31:b4:31:91:07:b8:13:3f:84:f9:62:c1:61:3c:bb:
2c:75:79:4c:fb:7e:86:17:a1:3c:e2:6a:c1:63:38:
70:fd:d1:dc:6d:7e:04:d3:6f:94:f0:64:18:38:b0:
b1:03:6d:ff:96:42:02:4b:00:8f:8c:44:c4:f4:98:
68:05:c7:06:dc:f4:72:cc:07:e4:97:dc:12:6f:bb:
a5:77:db:c6:03:f9:32:1f:3e:d1:4f:24:77:f7:a0:
de:15:1f:20:57:61:ea:e9:ca:46:c7:9a:eb:ac:a5:
3d:a6:b4:32:32:25:1e:8d:04:55:d4:d8:b1:63:d5:
13:4e:a3:6e:f3:8d:56:c8:9b:18:bc:85:50:5b:1b:
c6:86:93:f6:b4:7e:5c:b7:e6:cb:cf:3f:16:b7:67:
6e:51:57:2c:41:78:b8:65:d1:91:f9:06:c2:13:9e:
f6:10:c8:a3:be:85:9e:10:1b:f8:8f:df:b4:30:30:
ee:f6:c1:b8:53:0d:fe:0f:08:e4:17:6d:d6:dd:b3:
5f:1d:53:7e:15:94:a3:b0:cd:d0:35:09:57:9e:fd:
3f:a0:d6:c4:2f:69:8d:58:82:b3:b7:7e:1f:e6:c5:
15:52:6b:3f:bb:14:58:d2:25:1f:ae:80:04:d9:69:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1C:56:86:7D:75:00:0B:57:B3:8B:02:24:D8:68:AE:60:39:94:F4
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B9CF3AEC7CE111EF94FBDA83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1f:fd:93:22:fa:5c:26:98:e4:07:c2:79:ee:74:27:4b:04:
85:0f:ab:f3:d8:0e:ea:b4:bd:6d:a8:f8:7a:d2:d7:b8:08:b1:
7d:99:82:4b:5f:cb:5c:18:4e:90:aa:90:0f:af:52:eb:68:f5:
3c:a8:b7:2d:e9:05:81:9e:ce:eb:85:25:b5:e1:70:e5:e3:c6:
d5:a5:32:f5:72:cb:f9:0c:ae:ed:29:3e:7a:e8:d3:ce:dd:73:
99:f5:bf:94:16:c5:59:24:7a:fb:e4:2f:a1:74:cb:22:6d:2c:
73:66:52:12:38:8e:2a:73:bc:3f:77:e8:7f:e2:20:1d:1e:f2:
1e:35:35:de:e9:fc:67:00:79:5b:b5:42:d0:c4:63:e0:3a:e8:
a2:29:bc:ab:39:8c:4d:10:f7:65:38:ad:7b:d1:a8:47:39:f9:
6a:4a:6c:b8:56:1b:aa:0e:d2:7b:4e:1e:94:1e:5f:8d:28:91:
26:75:ee:2b:3a:f0:95:b4:11:98:30:36:a1:88:a6:10:80:3f:
c9:12:c2:c1:7a:c9:29:48:de:7f:21:07:b3:de:29:bf:fd:fd:
eb:1c:83:17:6c:64:62:be:c6:aa:37:36:e8:69:b3:d6:f4:57:
09:66:fa:d8:8f:56:40:bc:c5:dd:90:8f:a9:a4:3e:41:c9:05:
35:d0:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:45:39 2024 by rpki-client on console-ams.rpki-client.org