Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/FDE27ED8728311EE9A11381DC4F9AE02.roa
File: FDE27ED8728311EE9A11381DC4F9AE02.roa (raw, json)
Hash identifier: UUHLMbSsLBqBYPJ8jDzI1e/JGwpwlInCr10h9ZwwVyI=
Subject key identifier: 91:08:54:BB:FD:BB:BD:99:49:FC:81:60:25:91:0B:DF:10:68:DC:78
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 02AA
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/FDE27ED8728311EE9A11381DC4F9AE02.roa
Signing time: Tue 31 Oct 2023 22:57:53 +0000
ROA not before: Tue 31 Oct 2023 22:57:53 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.21.0/24 maxlen: 24
203.32.22.0/24 maxlen: 24
203.32.23.0/24 maxlen: 24
203.32.25.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
203.32.38.0/24 maxlen: 24
203.32.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Oct 31 22:57:53 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65418670-0e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:aa:ca:f9:b0:4e:04:e5:59:7d:70:7b:66:
86:3a:e4:95:f7:97:5b:ee:3e:31:7d:ef:86:b4:41:
89:30:1f:ff:1d:05:6d:5b:55:41:01:3d:3c:47:3a:
d2:84:c4:8a:5b:65:29:9f:da:85:67:4e:20:65:1a:
45:b3:bb:e8:58:81:35:0b:ce:59:ed:40:9b:a2:7c:
1b:09:b9:92:0b:2b:87:f0:67:e1:3c:0b:53:1c:92:
a4:09:2b:63:00:a4:7d:e9:c6:a7:02:38:0a:ff:ee:
52:17:d5:6d:24:b4:ca:9c:bc:b8:01:1c:f5:a4:1e:
bf:0a:8e:1d:00:e5:90:63:7b:da:24:06:f4:83:c1:
b7:39:9d:a1:7c:e2:7f:2e:8a:54:b2:eb:8a:91:98:
20:bc:67:4d:c4:b8:84:9d:e5:c1:ca:53:75:5f:83:
fa:66:59:de:48:bc:46:20:02:e9:c7:f3:b8:93:fd:
25:7b:5d:b4:a2:9d:4e:b6:f7:b9:c6:0f:40:dd:b1:
a0:a5:dd:a8:2a:5c:8b:1a:c7:7f:4a:f9:ff:8a:0c:
fc:b9:bc:59:7c:ea:ae:d5:38:6c:e0:94:29:f8:1e:
2e:df:08:c8:79:ee:16:21:2d:b8:5e:9a:58:51:88:
a7:22:25:6a:90:15:a0:7a:97:d6:06:84:75:9e:38:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:54:BB:FD:BB:BD:99:49:FC:81:60:25:91:0B:DF:10:68:DC:78
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/FDE27ED8728311EE9A11381DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.21.0-203.32.23.255
203.32.25.0/24
203.32.32.0/24
203.32.38.0/24
203.32.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:02:28:96:a6:05:cb:aa:4d:67:29:97:b3:e1:42:29:06:93:
62:e7:20:44:a8:71:73:a4:d5:4f:03:10:18:86:43:64:98:34:
de:26:8c:fe:35:bf:58:78:6b:40:a5:6a:c2:75:a3:e3:19:58:
e0:ea:58:8f:fc:ce:50:2c:6c:43:52:70:2b:28:34:58:ba:46:
09:2a:0b:61:24:8c:56:3f:dc:53:0c:4a:29:1a:12:e6:6e:6d:
75:1c:d7:0a:89:e4:c3:92:76:e3:a6:c8:9e:84:9c:68:40:9e:
18:d6:33:af:e3:43:bd:bf:94:8c:60:63:a8:a9:fb:34:eb:e6:
be:38:d5:f2:f9:af:2d:7a:78:a7:20:9b:73:8d:37:e4:10:ae:
f4:b2:38:f8:ea:24:2a:28:56:35:2d:23:48:72:f6:70:47:c8:
e3:b6:f4:a6:cb:0e:66:ca:94:84:09:da:05:70:84:02:6e:52:
b4:3a:f9:17:57:42:9d:a1:7d:61:c4:fc:71:b1:20:42:bf:76:
cc:e0:d5:7d:5b:9d:a6:89:a5:eb:4a:a0:47:b7:b2:52:34:76:
22:69:34:98:25:2f:92:12:1a:3b:5a:d2:23:12:26:a4:7b:54:
b5:80:cc:7e:b3:df:4f:aa:5f:32:3d:3b:1a:eb:9a:8d:03:4c:
7c:e2:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:06:13 2023 by rpki-client on console-ams.rpki-client.org