Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/2A0BA7A0737F11E88D904929C4F9AE02.roa
File: 2A0BA7A0737F11E88D904929C4F9AE02.roa (raw, json)
Hash identifier: b9gh99dNCUdTy6UnU/8x/bzDm3+7R7+z4LBpTfPF5jY=
Subject key identifier: 69:6A:C7:96:26:33:DA:35:B3:C3:AC:EB:FB:41:90:7F:34:24:A4:98
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 23EF
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/2A0BA7A0737F11E88D904929C4F9AE02.roa
Signing time: Thu 07 Dec 2023 08:31:58 +0000
ROA not before: Thu 07 Dec 2023 08:31:58 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 45458
IP address blocks: 147.50.80.0/24 maxlen: 24
147.50.96.0/20 maxlen: 24
147.50.192.0/19 maxlen: 19
147.50.192.0/24 maxlen: 24
147.50.195.0/24 maxlen: 24
184.82.128.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9199 (0x23ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Dec 7 08:31:58 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=657182fd-2ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:36:f6:92:d3:90:f9:43:ea:85:11:5e:42:
1f:6e:7c:8c:77:3e:26:bd:47:78:40:cf:26:fb:6d:
bd:cc:76:ee:dc:51:0a:90:20:8e:e3:82:03:cf:05:
20:66:f2:66:46:64:a3:76:ce:ca:15:6b:69:0b:c1:
f0:4c:92:fc:a4:06:26:f8:b1:65:d6:7a:cc:f9:d2:
a7:0f:d5:40:af:64:98:27:a4:b2:b4:2a:5b:a9:b8:
a1:0f:82:3e:0a:3e:1d:8c:9a:f0:c3:c0:8a:17:5f:
4d:fd:2b:19:1f:46:35:38:2e:27:0d:6d:dc:11:15:
dd:65:29:c8:79:58:42:d8:30:71:a9:da:f3:26:8c:
de:70:cc:b7:d2:82:dd:e1:67:5c:fd:9d:33:cb:1a:
94:2f:a8:5a:4e:da:d2:00:35:64:88:70:56:2a:c6:
d6:87:c0:7d:65:36:3d:de:32:7c:c5:04:75:77:ca:
d5:82:2e:20:a5:66:ee:4d:3f:3e:57:2a:eb:bd:ef:
61:ce:2d:5f:68:4d:99:a9:67:11:fa:b6:62:d4:c8:
3b:22:66:59:25:67:c1:07:56:1b:27:2c:f5:02:f9:
a3:03:b2:55:96:0e:a6:f9:ff:38:4c:c5:62:68:53:
ec:22:b1:71:8e:cd:61:00:cf:8d:69:32:90:0b:c8:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6A:C7:96:26:33:DA:35:B3:C3:AC:EB:FB:41:90:7F:34:24:A4:98
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/2A0BA7A0737F11E88D904929C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.80.0/24
147.50.96.0/20
147.50.192.0/19
184.82.128.0/21
Signature Algorithm: sha256WithRSAEncryption
11:8a:e0:cd:17:4c:d1:ad:4b:f8:d9:bb:c6:63:46:df:94:bc:
c4:4a:03:28:d6:8d:e7:b1:36:1a:eb:61:bc:a8:3a:a6:72:2b:
1c:f8:93:bf:1d:a5:fb:de:0f:66:d9:31:fb:a3:1e:de:07:a8:
8e:e0:d4:9e:ce:c1:ca:3a:68:ae:bd:17:48:a9:d4:a4:25:77:
bf:66:5b:99:98:c8:94:f0:a6:a6:b3:08:b5:21:80:2d:ab:b1:
1c:ef:da:53:86:fa:e6:a2:30:44:50:49:80:2a:b6:1d:46:fd:
01:8b:13:b5:54:c1:0f:f0:eb:16:46:37:3b:99:03:68:6b:73:
9b:70:bb:b9:52:e9:ca:b1:38:34:67:11:df:1b:aa:98:60:86:
55:6f:40:6c:35:8d:5b:f0:cb:72:7d:d2:2c:bd:78:d6:4a:e8:
a5:a9:b1:99:a6:48:62:d0:e2:8f:f4:4d:87:b3:3f:cd:fa:08:
69:01:dc:6f:9b:a3:fb:8e:1f:c0:d2:8d:4a:b5:eb:95:ef:3d:
d8:2f:65:0f:fe:35:d7:d6:94:ed:0a:36:df:e3:96:30:71:24:
9d:ad:c5:d1:55:05:b8:30:a7:a3:4e:84:6b:84:8c:38:02:aa:
31:8f:fb:b1:99:90:98:85:8d:71:2f:2a:3e:da:e4:cc:e7:7c:
7c:61:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 07:01:09 2023 by rpki-client on console-ams.rpki-client.org