Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/A392A322DFE911ED835B4D0EC4F9AE02.roa
File: A392A322DFE911ED835B4D0EC4F9AE02.roa (raw, json)
Hash identifier: SrEElw/lhvP8bpn27eswPiAlkD0zLC0YtG41DY7fTeQ=
Subject key identifier: B1:A7:52:74:6D:DD:43:A2:30:FF:3D:DF:EF:A2:71:2C:DB:B2:73:93
Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial: 3369
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/A392A322DFE911ED835B4D0EC4F9AE02.roa
Signing time: Sat 14 Oct 2023 14:20:08 +0000
ROA not before: Sat 14 Oct 2023 14:20:08 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 23750
IP address blocks: 182.255.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13161 (0x3369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Validity
Not Before: Oct 14 14:20:08 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=652aa398-8021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:cb:6d:36:86:c0:56:00:f4:9f:38:e6:40:
bb:77:fa:e5:a6:e2:64:3f:d2:fb:0f:29:67:f0:77:
8d:72:05:6a:72:77:df:ea:99:55:e2:9a:ab:f1:de:
28:db:72:29:c7:46:9b:a8:47:d3:9b:f8:d8:19:ba:
19:a8:f6:33:fe:55:13:91:78:e2:e7:58:b1:84:0d:
ce:93:8e:27:28:87:3e:d0:a0:0c:b1:b2:1b:c8:75:
d6:89:4f:c1:96:a9:08:20:86:99:b0:7b:47:ae:a7:
41:21:e6:5f:1b:2b:67:2e:19:b3:70:75:0e:9d:7d:
3a:d6:ca:77:44:bc:43:e7:bc:2b:3e:55:53:68:32:
24:83:ac:2f:9a:d5:3e:31:56:c2:4f:82:27:75:94:
c2:ed:d3:96:8f:f9:bc:8e:d2:eb:08:e1:1c:c8:fa:
5c:a4:a6:0f:9c:4c:12:44:0c:13:6a:e7:3c:d8:be:
68:29:4b:3b:32:37:8a:6c:98:a6:34:dd:8c:04:92:
c2:d7:44:ba:c6:df:e3:ee:61:01:79:fb:f4:0f:79:
4d:ff:25:7c:bc:b7:8f:1b:24:67:75:5f:10:91:20:
02:cc:9e:83:7b:89:e3:4e:cb:e4:5c:1a:25:e7:67:
9e:20:e5:ac:00:eb:c3:64:4a:2b:a7:53:32:d1:9b:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:52:74:6D:DD:43:A2:30:FF:3D:DF:EF:A2:71:2C:DB:B2:73:93
X509v3 Authority Key Identifier:
keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/A392A322DFE911ED835B4D0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.255.48.0/24
Signature Algorithm: sha256WithRSAEncryption
97:40:b4:53:40:1a:e3:8e:bb:32:0d:01:08:3e:d2:9c:6d:1d:
a8:26:16:54:a7:22:22:21:e6:32:a6:2e:06:85:48:14:a1:31:
c4:d5:c9:fb:d8:98:e6:e0:97:8d:0c:3d:73:a2:9d:3f:18:cd:
5d:33:0c:d4:91:bd:b1:cb:8e:c0:84:8d:6a:a5:59:ed:ac:0d:
86:f6:dc:18:e3:28:e6:34:e9:ff:0a:a5:08:58:89:fb:14:cc:
0b:f3:00:32:d9:dc:43:94:46:c3:85:3b:f7:20:40:d8:c7:1e:
57:0c:5c:2f:85:77:0f:7f:cf:c9:c3:9e:91:86:15:42:73:8d:
d1:0a:f8:f7:2e:41:3f:12:27:83:56:77:e5:2f:37:81:6c:f0:
55:85:2c:56:3b:5b:44:5c:7b:e3:f4:ff:12:83:c1:0f:b3:e8:
ef:5a:c9:fa:4f:78:49:de:46:c3:0e:e1:36:19:4c:b8:6f:28:
9d:88:52:d6:90:3f:54:e6:07:d3:9d:65:35:4e:8e:52:8c:2c:
0e:9e:f8:bd:ea:86:ba:0e:6c:3c:05:d0:12:f6:ca:52:36:54:
54:ab:9c:d8:08:55:f5:14:b1:15:82:00:9c:7f:88:59:c7:f2:
8d:f2:57:87:ad:4e:c9:00:f2:85:26:be:e7:30:3a:cd:cf:b3:
ff:6e:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 19:44:14 2023 by rpki-client on console-fra.rpki-client.org