Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/6DD593767D6811EEBD4A3F20C4F9AE02.roa
File: 6DD593767D6811EEBD4A3F20C4F9AE02.roa (raw, json)
Hash identifier: yjSP/mDYD3ZZuUgjXK761b6tJoIRUq0puqRMvdPpRPQ=
Subject key identifier: 10:4E:80:5C:4C:E5:82:01:50:FA:7D:A4:47:08:F1:12:09:70:50:BD
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0548
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/6DD593767D6811EEBD4A3F20C4F9AE02.roa
Signing time: Tue 07 Nov 2023 12:23:17 +0000
ROA not before: Tue 07 Nov 2023 12:23:17 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 41717
IP address blocks: 163.53.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Nov 7 12:23:17 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=654a2c35-2bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:43:a1:8a:6f:24:e2:89:a8:af:66:2d:58:
11:51:0e:0f:5a:93:47:c9:64:83:7e:79:5f:02:9b:
53:30:ea:c3:7b:8e:d8:63:16:cf:5d:ee:e9:3f:66:
77:16:0d:b2:ee:a4:7b:ab:88:1f:19:23:41:50:e8:
82:91:d4:08:7e:03:d0:80:bd:d1:46:c4:35:76:36:
75:2f:84:37:ee:fb:c8:3b:9b:83:14:f8:33:99:8f:
fa:2d:a9:94:9b:cc:3e:db:46:be:d1:dd:a2:5a:86:
59:79:dd:42:8f:5d:fb:5c:35:9d:82:b3:60:ab:f4:
ed:71:a8:a9:ca:f2:02:37:c6:2e:70:a1:4e:44:04:
9e:d7:3c:ad:f1:6f:ef:cd:2c:d6:c9:60:4b:f7:21:
5a:16:4e:0c:32:e6:e4:dd:69:d7:45:9f:01:df:32:
d4:f5:06:12:b5:07:69:3a:b4:c8:a8:66:d6:5b:37:
a8:91:e6:22:76:ea:ab:e6:19:11:df:1c:24:51:0f:
2f:e6:21:29:04:f1:b9:b3:8b:bb:07:22:d1:eb:c8:
e3:62:a3:d5:d9:4c:f3:79:40:be:07:41:c2:f6:ae:
8a:4b:38:cd:b1:9b:d3:d3:44:d6:01:6e:82:e1:f7:
9c:3d:7b:d2:dc:a4:83:e1:55:5d:53:2d:4c:4b:18:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:80:5C:4C:E5:82:01:50:FA:7D:A4:47:08:F1:12:09:70:50:BD
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/6DD593767D6811EEBD4A3F20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.53.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b6:c2:aa:bb:43:d6:e2:94:51:c7:88:70:38:0f:24:a6:e7:
4d:ad:72:89:4e:f5:ee:6d:fb:f8:a1:d9:16:89:45:23:6c:16:
d1:b9:38:48:b2:cb:54:8a:56:2e:9a:cc:b3:61:d4:96:13:bd:
9b:7b:aa:2a:a1:f3:ae:b6:df:d0:9f:03:f1:cb:8e:bc:85:1b:
de:3d:83:b0:fa:a6:9f:21:e5:c9:f3:f1:ac:96:5e:18:e7:69:
1f:8c:ae:cc:94:d8:c0:a1:d6:ff:9b:82:a2:6c:44:6a:ed:49:
60:58:4c:24:2d:08:39:6a:a3:08:4d:b0:dc:3c:68:d0:8b:93:
0a:85:f6:29:0e:a7:35:78:b0:dc:92:c7:96:65:88:1b:e0:36:
6d:37:cf:79:eb:7b:b0:5d:6d:22:c2:b7:8b:a1:4b:f5:b9:e9:
4f:80:8b:4d:de:1e:58:5c:09:09:18:8c:a3:9d:d8:ff:6f:76:
29:81:4a:09:c2:bc:54:27:07:16:45:1f:ae:46:5c:b5:cb:13:
57:76:89:6d:88:80:5b:c3:7e:46:8d:16:e1:55:ab:69:ad:96:
d4:fb:1c:bd:6a:c6:1c:7c:4f:bb:66:a3:49:ae:4a:d2:7b:d9:
5c:6f:b5:29:17:6f:c0:90:08:65:87:41:f1:b4:7b:38:04:11:
fd:14:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 13:31:17 2023 by rpki-client on console-ams.rpki-client.org