Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/3C86571ACC5611ED9E041016C4F9AE02.roa
File: 3C86571ACC5611ED9E041016C4F9AE02.roa (raw, json)
Hash identifier: TTA6knpFN5xPs1dbK+sRaJDyoOaSinv1HFthEhL9j1U=
Subject key identifier: 5C:C6:72:5C:19:5D:62:66:C9:8C:A8:D6:CD:CB:2C:F4:5A:3A:EF:46
Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial: 05
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/3C86571ACC5611ED9E041016C4F9AE02.roa
Signing time: Mon 27 Mar 2023 04:37:18 +0000
ROA not before: Mon 27 Mar 2023 04:37:18 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9328
IP address blocks: 202.2.0.0/22 maxlen: 22
203.7.130.0/23 maxlen: 23
203.26.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Validity
Not Before: Mar 27 04:37:18 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64211d7d-5da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:10:89:23:53:1b:ca:76:41:01:53:7b:d1:
ec:dc:02:45:7f:d4:ee:d6:12:1b:90:9d:d2:05:a1:
1d:9f:37:71:1e:9c:2a:b0:5e:7a:d3:f3:f3:20:78:
05:55:80:cf:df:60:92:f7:f7:ff:5d:8d:18:33:08:
c9:c5:55:4b:d3:fd:5d:d8:57:1b:d5:a4:a0:81:5f:
2f:2b:a2:34:35:4f:ba:77:52:54:53:14:19:9a:0f:
21:ad:01:61:49:23:4e:09:9d:95:c7:c6:71:43:6f:
1c:c1:b8:ed:cc:ec:6e:66:b6:43:57:4f:74:1f:20:
c2:57:95:30:3f:84:bc:bd:41:42:f8:d5:04:3e:4a:
eb:ec:39:65:05:75:3d:a8:20:6b:be:d8:19:cd:c2:
91:43:2a:f4:89:d8:ce:14:36:85:67:71:f1:95:68:
79:ec:c1:53:9d:81:9d:c4:d6:4b:d7:56:6f:9d:5c:
96:5a:ae:8e:4f:5e:4d:04:ae:37:8f:ca:42:02:51:
5e:e5:58:8e:c4:f5:9a:ac:0d:f4:5c:26:a0:f2:91:
a0:01:99:08:85:03:46:1c:9d:cf:49:21:27:f2:1a:
68:40:15:27:be:7b:44:b3:26:78:a9:44:20:d4:f6:
88:10:e5:b3:51:44:bd:a6:f9:5b:50:87:d3:96:69:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:72:5C:19:5D:62:66:C9:8C:A8:D6:CD:CB:2C:F4:5A:3A:EF:46
X509v3 Authority Key Identifier:
keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/3C86571ACC5611ED9E041016C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.2.0.0/22
203.7.130.0/23
203.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0c:b9:fd:2a:2a:b0:49:bb:67:b5:b7:f2:71:ac:ea:e6:d4:
8b:18:b5:87:b9:12:bd:e5:a7:1a:a3:30:b5:d7:e3:73:ee:37:
3f:51:40:8d:23:68:14:0d:43:82:9e:e9:f6:b6:dd:81:29:a5:
1e:e8:33:2e:7a:ae:46:96:71:08:46:02:32:f6:62:a7:40:c5:
4e:30:a9:44:0f:61:15:d3:d5:7c:d2:fd:37:7a:33:f1:c8:d1:
33:e0:7d:23:b9:22:4d:af:be:83:9c:66:77:ef:4d:0f:91:e4:
be:83:6a:69:88:46:9e:05:a5:8f:a9:78:7a:ab:12:e9:03:1d:
e1:cf:3d:62:76:7c:64:07:af:65:2f:ac:c8:3f:87:0f:81:98:
b2:c8:cb:b7:01:cc:14:e9:68:20:05:08:d6:00:93:3e:8f:2b:
28:f3:5b:95:f2:05:66:04:97:f3:26:de:9e:69:b0:7e:49:07:
c4:48:c6:88:64:08:1b:f6:3d:2d:b4:6c:a5:44:e6:55:94:82:
87:11:4c:0a:23:15:d9:ad:02:3c:10:0b:dc:76:ae:06:93:05:
fb:0f:00:e2:69:15:d2:07:96:cc:70:e2:9c:8f:3b:a7:d1:c8:
70:51:ed:d5:e8:a2:98:0d:80:8d:90:74:00:5d:36:6e:dc:17:
11:5c:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org