Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/6B253566DB0411ED98733732C4F9AE02.roa
File: 6B253566DB0411ED98733732C4F9AE02.roa (raw, json)
Hash identifier: C7jEFsLFCLWeqi77fKsMJ71jt0lUTHrlCuISAkRTULU=
Subject key identifier: 70:B0:10:A4:C8:DB:C1:64:27:3B:02:B4:24:43:8F:21:23:E9:EF:1A
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 0823
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/6B253566DB0411ED98733732C4F9AE02.roa
Signing time: Fri 14 Apr 2023 20:39:14 +0000
ROA not before: Fri 14 Apr 2023 20:39:14 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 135407
IP address blocks: 125.62.88.0/24 maxlen: 24
125.62.89.0/24 maxlen: 24
125.62.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Apr 14 20:39:14 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6439b9f2-d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:b8:18:99:68:2a:22:e2:ef:16:09:67:5f:
27:7c:bc:9d:9e:9e:24:94:52:5c:3a:e3:26:77:96:
50:69:8f:fe:aa:c6:a8:88:85:37:1a:1a:b9:ec:5e:
8e:ac:99:05:6c:29:99:b3:18:f7:39:48:dd:26:2a:
5d:a3:06:34:56:12:16:ee:b0:18:4c:7c:2e:ea:fb:
f5:85:26:44:6d:5b:c8:3c:e7:33:d7:fe:f3:f6:45:
a8:3b:f8:12:22:34:8c:8b:2f:1c:69:25:d0:ca:e7:
2a:45:e6:0a:8e:92:a8:f8:23:0c:c4:fc:6c:2f:0d:
11:57:e6:50:52:f1:20:39:42:f8:c6:2d:b2:6e:2d:
52:cc:ab:57:4f:c7:e9:8b:d7:d9:60:87:75:31:63:
c3:2d:20:13:f2:c6:1e:c8:5e:45:5e:f3:81:3c:bc:
89:e0:9a:0f:43:89:b9:18:71:6e:b1:7c:89:bc:9c:
3e:90:74:93:02:91:d0:11:2c:9a:6c:e4:80:92:26:
98:d8:07:43:22:bc:2d:5a:72:35:84:c4:49:b3:69:
74:8e:2e:aa:09:95:3b:12:96:ec:77:ad:01:85:da:
5d:06:c6:5d:2a:06:91:5b:1d:5e:b6:d6:bd:4f:6b:
b9:c0:c4:5a:94:46:04:53:36:5e:6b:11:b8:64:36:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:10:A4:C8:DB:C1:64:27:3B:02:B4:24:43:8F:21:23:E9:EF:1A
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/6B253566DB0411ED98733732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.88.0-125.62.90.255
Signature Algorithm: sha256WithRSAEncryption
56:65:2e:81:76:93:a4:8f:df:44:5a:62:da:e5:14:cc:a9:a5:
09:74:6a:a6:3a:7f:30:51:1f:ce:c5:d6:b1:75:87:65:07:ba:
f8:61:8b:af:4c:9b:08:0f:7a:6d:6a:59:7b:f4:c3:dd:0d:2d:
98:23:1d:3c:c7:6c:7c:18:24:3c:dd:2d:c6:1f:b6:99:e9:23:
be:57:ad:80:25:d5:73:a6:9c:35:ca:d5:47:e4:9d:6c:66:cb:
34:ed:ba:42:bf:52:ee:21:00:5d:29:6a:ec:b9:87:86:42:4f:
59:21:56:49:a6:f4:2d:05:58:16:f0:9a:f7:a0:be:c9:6d:60:
8e:4d:c8:a3:d3:80:42:a9:69:f9:39:cb:7a:63:4d:8e:57:60:
6d:c5:df:0c:31:ed:a7:13:a1:db:67:62:60:f6:6d:05:98:d1:
ed:ed:16:91:25:f5:b7:26:f2:d9:a5:17:af:6b:81:e6:8a:17:
b5:96:47:86:14:18:12:b2:bb:69:ac:b1:8a:dd:c5:d2:ae:f9:
f8:72:ef:62:a6:be:c7:d3:90:4a:c7:8b:d6:bb:e0:d4:a2:17:
0e:c0:51:a0:fa:63:d4:7e:c9:47:07:4f:74:2f:e3:2f:d4:60:
a4:92:58:4e:42:0f:64:8e:5f:6f:a1:7a:6e:86:05:fa:85:af:
f2:85:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org