Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/756B9390538911EA80C82635C4F9AE02.roa
File: 756B9390538911EA80C82635C4F9AE02.roa (raw, json)
Hash identifier: 6q2xuLvgSZ4XW9KbzxLEqpYUvuwrLxItfBf/tafRI+U=
Subject key identifier: 31:73:B4:AD:34:12:E5:08:CD:70:33:15:CD:FB:20:DE:BF:A9:B8:02
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 164B
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/756B9390538911EA80C82635C4F9AE02.roa
Signing time: Thu 16 Feb 2023 05:05:12 +0000
ROA not before: Thu 16 Feb 2023 05:05:12 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 45931
IP address blocks: 203.55.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5707 (0x164b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 16 05:05:12 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63edb987-1875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:09:c3:58:5f:92:71:d2:5e:1c:7d:d6:01:
b6:10:57:cb:dd:3e:17:f3:db:f0:d8:ab:ad:6a:57:
50:21:93:49:55:f2:a8:c6:d5:07:b3:77:7a:ee:d2:
f7:53:eb:4f:24:de:b5:80:c9:36:15:54:fa:d2:34:
86:d3:91:57:9d:a3:cc:d5:09:64:ec:9b:e8:40:08:
b9:d3:28:8b:92:21:bd:07:f4:8a:0f:db:5d:2d:94:
8c:3f:34:2f:99:37:18:22:c9:77:4c:62:3d:11:fd:
e2:76:28:6c:8a:a1:ce:08:14:0a:93:f8:6b:99:a6:
da:a4:ec:b2:e2:0d:a5:ec:26:59:3a:00:c3:86:fb:
d2:ee:9b:58:e9:bd:dc:1c:8a:60:49:2b:f3:2d:ea:
b4:e5:90:aa:eb:15:e7:43:00:31:71:c9:02:06:0c:
18:c1:b2:30:9e:3b:c5:53:5a:13:d9:61:24:44:9f:
ae:66:2b:31:82:78:41:88:d6:ec:04:99:c9:90:59:
fe:3a:67:96:e0:56:04:ed:07:23:88:37:1f:96:5e:
35:25:2c:2f:e8:f9:2f:c4:1a:d9:65:75:51:7d:64:
dd:6c:9f:6b:0d:ce:d5:f8:58:8b:b3:31:0b:b1:0e:
cb:71:03:d4:56:87:2b:5a:86:5b:7f:2b:64:09:21:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:73:B4:AD:34:12:E5:08:CD:70:33:15:CD:FB:20:DE:BF:A9:B8:02
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/756B9390538911EA80C82635C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.55.250.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ce:9d:93:ff:45:2e:80:6d:79:16:5e:26:0e:3a:47:d1:11:
49:31:5e:46:41:5b:7c:24:43:4e:da:f7:e4:ea:e8:b7:2e:e1:
4f:ff:39:14:38:05:df:00:98:9b:3e:ed:3b:51:73:a7:2e:f1:
c9:30:63:cd:a0:1b:1d:3d:d2:e9:fe:dc:c9:46:05:3c:68:f0:
3b:1c:42:25:80:36:e5:0c:ed:96:42:bd:8f:e7:ad:3f:d9:23:
1d:84:8c:f2:59:68:45:36:a1:b1:31:9a:b2:78:f8:13:d8:6f:
22:22:e2:fe:40:87:5d:bc:73:e7:8c:f3:88:a1:88:65:a5:b8:
0c:40:85:c6:57:16:28:a2:21:5e:27:29:8c:37:e4:e8:bb:78:
82:9e:cb:f9:07:f7:15:9d:5a:fd:9e:2f:30:66:b6:7b:8f:f2:
3f:c8:e2:11:02:7d:98:31:50:82:cf:39:0a:f7:5b:c6:b9:9a:
e4:2d:0e:2f:cc:48:ab:74:87:4e:92:ab:bf:da:88:ec:f8:02:
12:f6:9d:f6:2f:7a:07:b8:f5:0e:ad:90:90:55:5c:be:9d:f5:
54:ca:5d:58:c3:79:ff:28:04:f8:ea:6a:18:e5:2a:42:00:06:
d4:be:0f:44:3c:90:6b:95:ab:5b:5c:95:30:00:7f:2e:e8:0f:
f3:eb:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org