Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/E307040E8CD111EEA77D2A66C4F9AE02.roa
File: E307040E8CD111EEA77D2A66C4F9AE02.roa (raw, json)
Hash identifier: fWm/0kke0WvMd5oMEEr91e/zdaz9mZOEPQ5ovpRSC9U=
Subject key identifier: E7:35:C9:79:3D:B3:95:BE:99:3A:D7:1B:DA:C9:96:AA:3C:54:48:F5
Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial: 02
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/E307040E8CD111EEA77D2A66C4F9AE02.roa
Signing time: Mon 27 Nov 2023 03:05:58 +0000
ROA not before: Mon 27 Nov 2023 03:05:58 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 142612
IP address blocks: 203.145.50.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 09 Feb 2024 17:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Validity
Not Before: Nov 27 03:05:58 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65640796-eae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:08:3e:e1:0f:e7:64:ba:ce:2d:a9:4f:b0:
17:b3:dc:42:62:55:65:29:4f:3f:e0:90:4a:d4:55:
1a:e5:58:b1:72:db:a8:03:ad:cf:9b:29:07:be:bb:
59:e7:b3:03:b8:1c:a0:db:1d:49:8d:7f:51:70:4e:
57:2a:e6:f2:23:e9:f7:5c:26:12:04:d5:36:32:eb:
c2:2b:f7:f6:89:50:ea:13:05:6f:1f:6c:6a:1d:6f:
30:d1:3e:b8:10:3c:96:d3:31:97:d7:58:68:3e:7c:
01:2c:c2:36:6f:ab:85:d4:50:07:d4:12:37:63:07:
9a:1b:df:77:b8:fd:d9:e0:d1:7c:53:95:c4:70:c9:
77:5e:68:e2:24:5e:42:a2:2d:1a:5f:a0:4b:8c:de:
1d:7e:12:cf:a4:1c:00:ff:84:54:88:3f:e0:31:0a:
9e:6b:d3:8d:62:04:bd:33:b3:3b:3c:9d:5c:c5:c9:
69:f6:3e:55:bc:f5:b5:19:43:ac:85:c4:fe:1b:0f:
a9:40:6a:65:19:ed:da:4c:7b:cb:3b:c0:93:3b:aa:
45:85:72:4f:0d:91:10:b1:a3:46:b4:08:88:e1:25:
98:a8:81:88:f5:ce:64:ee:79:aa:a8:41:3a:e1:d2:
a6:01:63:10:78:6d:5f:39:6d:b3:e8:43:48:49:61:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:C9:79:3D:B3:95:BE:99:3A:D7:1B:DA:C9:96:AA:3C:54:48:F5
X509v3 Authority Key Identifier:
keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/E307040E8CD111EEA77D2A66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.50.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:41:20:19:5d:65:62:73:2d:d7:5f:0c:a6:da:b5:4e:fd:84:
10:fc:fb:e6:46:5c:1c:40:d4:ae:a1:f2:ee:3e:8a:15:46:b7:
bb:10:b9:c2:42:1c:17:89:02:19:8b:c4:3c:15:fa:81:7d:0a:
97:4e:c1:b9:15:d7:ea:93:9a:f6:d9:f4:d9:62:83:d3:4a:5b:
68:75:82:99:4a:12:fd:6b:83:4b:21:e4:14:bf:65:df:47:dd:
dc:98:31:29:34:5d:ee:26:29:f3:f4:c5:42:4d:7b:e5:91:59:
68:a2:e4:ce:6c:33:af:84:20:fb:f9:09:1f:b2:ce:08:3c:c8:
df:3b:71:16:c7:50:28:9d:a1:06:71:46:cc:f5:ad:5d:0b:6c:
70:dc:8a:94:41:fb:2a:f9:49:ee:6f:27:0c:ac:6d:ee:c5:f6:
da:2c:69:14:2a:ae:40:57:06:0d:35:c7:85:b8:f6:80:99:29:
6d:5e:f2:c9:dc:fd:61:3b:15:46:cf:d8:44:e7:75:14:fe:fa:
88:b6:50:05:20:a1:9c:0c:76:0c:cd:24:28:85:b4:44:04:a8:
dc:4a:e2:c4:63:d1:2d:df:9a:04:1a:be:c1:85:d9:63:c0:67:
24:91:70:65:b1:93:fc:b5:e7:f1:74:5c:56:76:4f:07:b4:95:
05:86:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:14:24 2024 by rpki-client on console-ams.rpki-client.org