Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/0C87B5BE2A0E11EB8CC1535DC4F9AE02.roa
File: 0C87B5BE2A0E11EB8CC1535DC4F9AE02.roa (raw, json)
Hash identifier: 9OHY5epb09UiAkoPafo4k8zazkmDiZHsxEUh7qlB5sk=
Subject key identifier: A6:C2:12:D7:13:08:0A:8E:A5:3F:7C:7C:54:08:9F:7A:F7:16:47:DF
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 17E6
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/0C87B5BE2A0E11EB8CC1535DC4F9AE02.roa
Signing time: Thu 04 May 2023 17:34:23 +0000
ROA not before: Thu 04 May 2023 17:34:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7714
IP address blocks: 202.20.76.0/24 maxlen: 24
203.98.23.0/24 maxlen: 24
203.98.24.0/24 maxlen: 24
203.98.25.0/24 maxlen: 24
203.98.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6118 (0x17e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: May 4 17:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6453ec9e-8436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:90:d5:a1:d7:80:43:c9:72:ec:ee:fd:ce:
26:6c:1d:37:df:9b:7e:d0:5e:da:2a:cb:d4:6d:b3:
5a:a4:74:7e:3e:03:62:b3:02:2e:3b:86:a3:cd:08:
33:cf:51:99:1b:74:cb:d3:53:ec:cc:49:80:e0:27:
0d:ee:98:5a:e3:2f:cc:de:39:c4:7e:1f:7e:5c:34:
dc:0a:c8:bf:f4:09:fa:95:b6:1b:f2:5a:d5:05:4d:
da:cc:9b:b1:32:69:f9:68:5b:14:a3:3d:8e:19:70:
17:81:1b:10:72:e8:c6:34:a7:a7:04:4b:8b:8c:bb:
0a:9a:da:63:dd:f1:34:52:33:a8:0b:a9:5f:13:99:
92:ed:21:6c:2f:0a:39:27:13:17:d5:5e:9e:9e:c2:
5c:0b:61:bc:ad:54:ca:ae:1b:a4:ac:91:db:23:ed:
9f:56:2d:6b:82:11:1f:2d:11:a0:e3:93:0b:dc:64:
0d:ca:22:f9:ff:d4:24:45:73:9d:7b:12:cd:89:16:
a6:72:dc:d5:9f:0a:6a:25:da:73:42:84:31:0b:01:
f1:8b:30:c9:66:4e:7c:fd:2a:b8:2b:96:00:54:3e:
72:06:31:00:c0:0c:69:4c:bf:ea:39:7f:e4:09:f5:
3b:5e:40:e8:e1:c6:39:f9:a2:33:20:26:3e:a6:a4:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C2:12:D7:13:08:0A:8E:A5:3F:7C:7C:54:08:9F:7A:F7:16:47:DF
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/0C87B5BE2A0E11EB8CC1535DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.20.76.0/24
203.98.23.0-203.98.25.255
203.98.55.0/24
Signature Algorithm: sha256WithRSAEncryption
87:62:01:38:46:9a:6e:63:79:67:93:89:8c:9b:3c:72:5d:c0:
05:23:cf:c9:61:64:e5:15:72:7b:13:08:39:cb:82:c8:39:b2:
35:d0:38:5a:c7:23:13:22:f9:10:39:d0:31:a7:40:52:bb:93:
45:86:a8:be:2b:92:51:f6:4d:f8:c2:10:e5:af:c2:9d:d0:df:
68:27:b4:0e:ce:e1:df:ca:90:14:94:8a:66:63:1d:25:96:23:
7f:05:97:c5:dd:1f:eb:40:a8:f5:58:20:a7:c5:04:e3:00:0d:
c1:6e:50:d8:cf:fc:4d:8f:a7:9a:2f:31:4f:4e:10:71:1e:a4:
20:9f:86:3f:04:ea:ea:ab:a0:36:64:4b:4f:d0:07:e9:ac:aa:
74:a0:67:4b:2a:81:95:d6:c0:8e:4f:3b:8a:bd:5b:7f:67:14:
8d:63:5d:b1:3b:73:f3:d1:2b:fb:b6:3f:e3:88:94:63:7f:67:
43:95:a8:ab:00:4e:85:05:fa:af:32:cd:51:88:a7:17:87:ef:
bd:cf:69:b8:08:1f:ce:cc:d9:58:29:bf:d2:29:d8:20:0d:a1:
57:ca:2b:30:b3:8c:75:e1:b0:21:8b:7b:58:07:21:56:35:ad:
f8:59:14:18:63:70:f3:12:ab:d1:7c:ba:b4:1e:e3:78:13:29:
68:4c:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 23:42:05 2023 by rpki-client on console-ams.rpki-client.org