Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/BD31F1563AF411ED8A29A976C4F9AE02.roa
File: BD31F1563AF411ED8A29A976C4F9AE02.roa (raw, json)
Hash identifier: EyeFqOXvvOyZ4wfGqhXokYxsgtm3P6Xo6Eallf8oj8g=
Subject key identifier: 03:13:EA:AF:7D:E9:E7:5C:14:1A:4F:EA:FB:15:22:F0:A4:C5:CD:10
Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial: 0232
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/BD31F1563AF411ED8A29A976C4F9AE02.roa
Signing time: Fri 23 Sep 2022 04:03:54 +0000
ROA not before: Fri 23 Sep 2022 04:03:54 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 18664
IP address blocks: 202.50.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Validity
Not Before: Sep 23 04:03:54 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=632d302a-2a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:bd:ee:c8:8c:1f:c1:04:dd:30:98:b1:61:
db:5d:d9:e1:be:10:b3:50:9c:44:89:3a:b5:4e:1f:
9c:05:35:8b:e1:0a:fd:dd:cd:90:82:38:cf:83:7e:
af:10:4d:8a:08:93:0c:4e:b2:bc:8e:1e:4f:79:2c:
a9:47:9b:3f:9a:a2:72:71:3b:b2:d2:5c:f9:ac:22:
c8:9a:a7:99:2e:53:fc:e8:50:4c:b2:fe:6a:09:15:
64:37:cf:a8:73:e2:1c:dc:1e:fc:23:b2:a7:ed:c0:
61:5e:45:72:0e:ac:4f:75:e7:5a:f2:18:27:cb:46:
35:b6:c9:9a:2d:7c:0e:84:f6:2f:17:1d:2e:87:59:
ad:a3:81:7a:27:d0:3a:f3:3b:c0:cc:60:d4:ca:3a:
9c:3e:67:0d:4c:90:c0:04:9a:ea:7b:3a:87:f0:b2:
fa:c1:14:c6:e6:3c:5e:29:73:b0:af:7e:8f:b7:76:
35:c7:0e:9b:71:73:2c:a1:05:0c:15:7a:fa:8d:ef:
f6:4c:44:4c:cf:c2:eb:53:30:df:45:7f:84:18:32:
8d:2d:8b:6f:72:91:32:1f:cd:1b:92:96:c4:75:52:
bf:fe:79:16:f2:59:f3:d6:2f:41:86:0a:3c:e6:67:
1a:78:f1:5f:cf:a7:e4:d3:35:4e:7d:c3:f3:33:af:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:EA:AF:7D:E9:E7:5C:14:1A:4F:EA:FB:15:22:F0:A4:C5:CD:10
X509v3 Authority Key Identifier:
keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/BD31F1563AF411ED8A29A976C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:bf:ea:12:4a:98:09:1d:7e:95:27:28:8c:73:cb:4c:fd:dd:
bd:9b:57:c0:10:f3:1c:c9:b9:0a:68:5c:6e:90:9c:f3:0a:dc:
40:44:72:d3:12:3f:59:b4:36:4b:65:4c:35:5e:41:99:74:cc:
22:46:7d:af:5e:54:e6:63:55:89:d9:16:82:b8:59:41:4c:4b:
56:67:07:f2:b5:9e:7c:1a:f4:c8:05:2b:76:19:df:ec:13:eb:
6d:be:47:ea:62:85:96:df:e2:8e:a0:2e:cb:a8:bb:40:48:94:
fc:e4:00:07:bc:fb:af:b6:4f:e6:16:0b:06:af:d6:f2:2a:32:
fa:d0:53:fb:9e:94:29:70:2c:56:d6:1f:39:8e:e5:52:52:c4:
f3:d7:33:b2:88:90:db:63:79:09:1f:a2:c2:2b:8e:91:3c:6e:
07:82:3a:72:01:03:c0:26:ec:22:f5:4d:9d:97:53:c7:2d:d0:
7a:6d:93:85:e0:1a:b1:6d:0b:9e:b5:5a:3f:ea:62:7a:c5:db:
89:20:2e:c1:db:cc:f6:47:d1:ea:e8:89:55:09:d9:02:61:f9:
7c:64:49:8a:cd:87:2a:1d:e1:e0:25:1d:8e:f9:cb:aa:57:be:
7f:d8:d9:ae:f3:a7:73:35:c8:b4:36:cf:c2:b4:f4:7c:f9:e1:
39:dd:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org