Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/E28551705A8411EBB6764571C4F9AE02.roa
File: E28551705A8411EBB6764571C4F9AE02.roa (raw, json)
Hash identifier: FTNpogtFivSTJBCxIGpYH9yzr9ZuQwERiEtswzO5QL0=
Subject key identifier: 09:E0:B2:BF:B4:2B:8A:0D:4F:BF:9A:AC:56:4D:B2:5D:8E:FE:9C:A7
Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Certificate serial: 0B91
Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/E28551705A8411EBB6764571C4F9AE02.roa
Signing time: Tue 24 Jan 2023 19:46:14 +0000
ROA not before: Tue 24 Jan 2023 19:46:14 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134371
IP address blocks: 202.181.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2961 (0xb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Validity
Not Before: Jan 24 19:46:14 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63d03585-c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:1e:97:8b:48:bc:28:53:57:37:f1:d1:ab:
89:44:1c:09:dd:8f:46:f3:0b:76:06:5b:a7:99:63:
11:ab:30:d4:d8:08:ef:33:f6:3c:e8:9d:84:e5:4b:
c1:b1:01:8b:fa:fc:17:8a:5b:3d:7e:94:2a:1e:2f:
ec:94:f6:eb:a6:c1:e2:a3:08:1c:08:93:72:b4:0e:
ec:9e:c1:c5:5d:56:a3:60:4c:ff:f0:cc:a1:64:ad:
16:62:38:81:e9:f5:8f:69:f2:c6:ec:55:74:38:74:
5c:17:26:5f:e8:bc:06:86:75:08:58:6f:fa:ea:94:
ec:d2:04:44:73:6c:f7:cf:bc:36:c7:9a:1c:8e:b9:
21:31:8a:fe:d7:62:d3:65:ce:a7:fe:4d:4b:b7:ff:
89:73:2b:21:f8:f4:3a:28:74:dc:58:b1:8c:90:70:
79:b2:27:d7:4e:9a:85:ff:f3:19:a0:a1:bf:61:14:
52:12:11:5e:09:f5:9d:55:3f:1b:67:7f:39:6e:77:
eb:51:62:89:94:4a:6b:b9:35:66:3d:d5:c8:d3:ff:
5c:95:20:49:eb:21:a5:c7:71:7f:47:d6:5e:36:99:
ad:07:90:6c:f7:3d:ab:58:47:a0:79:f2:01:0b:37:
f5:fc:6e:fa:71:c2:bb:37:6e:d4:07:e9:43:b8:31:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:B2:BF:B4:2B:8A:0D:4F:BF:9A:AC:56:4D:B2:5D:8E:FE:9C:A7
X509v3 Authority Key Identifier:
keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/E28551705A8411EBB6764571C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.181.16.0/24
Signature Algorithm: sha256WithRSAEncryption
93:17:98:b8:c3:96:21:5c:6b:ff:b6:98:bf:4f:a7:e1:ac:77:
cd:90:e4:00:4c:bb:5f:39:d0:05:0c:46:3a:8b:46:05:f0:5e:
ef:d9:3c:c7:64:06:b4:59:5b:b1:8d:a2:c7:2b:60:67:cd:9d:
f5:48:ae:2f:78:1b:c6:f7:30:a2:a4:a2:5a:02:d2:10:ee:e1:
ec:f1:64:c3:8c:5c:59:e1:1e:b0:a0:9d:de:f8:2b:2c:4c:1e:
d1:5c:83:58:2e:28:6a:39:f0:0b:bd:b6:9a:3d:f4:73:ea:ed:
1b:94:90:40:ae:79:12:85:c0:a1:47:c9:1f:32:1f:a2:9a:6d:
27:34:15:17:f1:91:34:c6:b8:da:71:31:6a:54:3a:74:f0:0a:
62:b7:a9:2f:1e:62:de:b8:b7:b1:69:be:38:b9:0b:4b:db:9f:
cd:df:09:73:73:a4:98:31:49:52:16:86:12:85:38:4c:11:56:
07:4d:93:1b:a5:b8:3c:c3:d1:fc:17:e3:59:65:87:a3:2f:ee:
55:3e:93:ae:91:56:c9:63:1a:2c:54:78:b2:a8:9c:2c:45:46:
f5:a8:ee:1e:db:7d:4f:29:79:10:69:c7:76:77:48:76:89:25:
82:52:0e:ca:0e:4e:67:25:b0:f3:84:bf:ef:9b:2a:e8:9f:27:
02:d0:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org