Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/38FF2D162BCD11EE8D02A918C4F9AE02.roa
File: 38FF2D162BCD11EE8D02A918C4F9AE02.roa (raw, json)
Hash identifier: mLkx1aPJmokDXSVd6TBauw884yNAhGJFY0nEhwDTH/U=
Subject key identifier: 43:37:14:FF:67:C1:D8:70:C7:CC:94:1F:F7:3F:08:2C:B2:EC:32:FA
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2078
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/38FF2D162BCD11EE8D02A918C4F9AE02.roa
Signing time: Wed 26 Jul 2023 15:58:12 +0000
ROA not before: Wed 26 Jul 2023 15:58:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139482
IP address blocks: 180.210.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8312 (0x2078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jul 26 15:58:12 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64c14294-4d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:a0:18:b5:44:ec:7c:55:e6:53:d2:4a:04:
6d:9d:59:f6:54:14:ef:d9:a9:89:c3:dc:f1:75:96:
77:2f:78:64:6a:4c:28:f2:1c:34:50:12:c9:3f:3d:
aa:a5:e2:54:d2:dd:e8:ef:5d:19:77:ed:ec:ce:1c:
50:bc:4c:ee:5f:d7:ce:76:98:f8:3e:15:02:cc:49:
93:c6:dd:59:97:49:01:7f:81:aa:5e:c2:ce:31:03:
e7:79:a0:12:6f:8d:91:22:10:84:80:5e:a4:9d:00:
d5:94:43:3e:91:51:5e:a7:14:85:ec:d5:d7:55:a3:
f9:04:45:f9:3b:ab:48:d0:1e:c2:12:a5:1e:bd:6a:
cc:0d:0e:99:21:9d:2d:0e:d5:de:55:5b:96:71:6f:
f8:e3:cb:01:e3:c8:84:74:a2:d1:30:70:94:05:45:
08:91:5b:ad:63:e2:24:12:39:86:9d:6e:87:5a:2d:
3d:5f:7b:75:da:ec:70:7b:ed:2d:cf:2d:60:f5:65:
a1:ed:63:34:2e:05:b9:4e:e5:44:5f:1c:e2:64:0e:
8f:62:0e:b9:50:68:2d:4c:55:ad:4e:f7:69:7d:cb:
f3:dc:22:fc:71:dd:36:e7:4a:17:ba:58:2f:e1:a4:
92:4e:e5:5e:5c:6b:a8:91:b0:67:0b:8d:97:9f:2b:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:14:FF:67:C1:D8:70:C7:CC:94:1F:F7:3F:08:2C:B2:EC:32:FA
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/38FF2D162BCD11EE8D02A918C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.220.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d4:50:bc:91:b7:cc:8d:ca:e2:ba:c1:a8:22:53:f0:d2:47:
a9:9a:66:e3:48:94:34:1f:d0:9c:83:6e:83:4c:5a:07:22:bc:
b6:1e:ce:91:e1:05:d3:94:59:0f:fc:4c:01:a8:2a:8c:7e:c3:
ab:08:39:5c:ac:98:a7:b2:93:9a:a7:3c:61:c4:64:ec:f9:d6:
eb:69:26:4d:d5:94:6d:8b:a8:5a:63:0b:fb:34:4b:d5:7a:e3:
a3:8d:a8:d9:98:e7:96:8b:68:fa:0d:99:da:71:dd:c0:f5:54:
41:db:7d:75:ec:92:c7:4d:84:f5:fc:30:5f:8f:38:c8:6c:55:
22:43:67:03:82:9f:a4:ed:86:45:02:c9:3b:db:af:19:6d:5f:
99:ab:b8:23:c1:b0:f6:85:81:fe:19:c8:d0:c5:91:9f:e1:98:
5d:69:fc:a1:76:25:f4:64:ba:c6:66:ce:9c:f2:0d:c9:b9:49:
12:ea:f1:6e:e3:7a:65:fd:11:41:97:21:8d:2f:81:5d:f3:92:
47:bd:5d:27:d2:77:22:81:e5:f5:9d:02:99:42:3b:f4:58:b1:
9b:f1:12:7f:54:14:37:ec:4a:53:78:a2:60:5f:aa:9e:91:83:
12:87:f0:de:5a:59:30:43:f4:e7:18:21:71:b7:49:34:a2:07:
3f:fc:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 17:41:07 2023 by rpki-client on console-ams.rpki-client.org