Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6C7B60CA05E311EE8C4A7469C4F9AE02.roa
File: 6C7B60CA05E311EE8C4A7469C4F9AE02.roa (raw, json)
Hash identifier: oLNfFC54amGHeOk/He3q2BR6p3IAVEy8KbcU9OCY0SQ=
Subject key identifier: 90:95:E6:CA:D3:5A:18:98:AF:E6:1D:32:EA:DF:C3:5F:D3:6C:2A:E6
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1C4C
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6C7B60CA05E311EE8C4A7469C4F9AE02.roa
Signing time: Thu 08 Jun 2023 10:01:23 +0000
ROA not before: Thu 08 Jun 2023 10:01:23 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 141739
IP address blocks: 125.80.192.0/19 maxlen: 19
125.85.64.0/18 maxlen: 18
125.85.128.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7244 (0x1c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Jun 8 10:01:23 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6481a6f3-1997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:6a:53:fd:e9:50:97:4f:d3:22:32:28:04:
e7:0f:c9:05:c8:92:e5:23:b5:6c:7c:4d:a2:aa:71:
1f:74:00:f5:8f:6f:de:f0:42:a9:9b:ff:9c:92:b4:
be:c0:72:0c:9d:b7:0c:8d:57:ca:47:d8:c7:eb:8f:
45:37:c6:2f:0d:13:b8:81:ec:41:e8:52:e7:da:9b:
52:4f:86:ff:b5:ba:ff:b1:1d:0d:a5:01:78:ca:fc:
ad:bb:d0:e4:c3:df:4d:ac:e5:57:28:f3:d8:1e:cd:
5c:6a:b9:2b:98:89:8e:ab:63:cd:e8:99:f1:95:8b:
9a:1b:4f:c9:42:a5:a3:77:67:19:d8:f2:fd:36:79:
70:c2:45:dd:c2:27:ae:cb:21:23:46:1e:08:f1:5e:
51:1f:85:25:20:e0:72:b5:df:d9:f8:a8:9e:39:e2:
53:12:45:06:c5:68:17:85:8b:4a:a0:0f:4c:c6:2d:
51:67:55:c2:bc:d9:fb:35:ce:a7:ec:46:ce:61:b7:
a4:11:7b:80:0b:74:a2:c1:47:9a:88:1d:64:bf:b7:
f7:ea:a9:83:84:85:81:2e:f9:85:27:97:52:9a:8b:
42:62:40:de:aa:49:71:73:90:84:df:b1:89:c3:63:
df:df:1f:c6:e0:d7:26:40:ec:ba:9f:e5:f8:09:9a:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:95:E6:CA:D3:5A:18:98:AF:E6:1D:32:EA:DF:C3:5F:D3:6C:2A:E6
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6C7B60CA05E311EE8C4A7469C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.80.192.0/19
125.85.64.0-125.85.159.255
Signature Algorithm: sha256WithRSAEncryption
aa:16:8c:21:dd:7b:64:38:ee:93:89:f9:0c:6e:32:21:a6:7d:
f4:c7:ba:be:30:76:90:ac:af:80:55:dc:1f:da:ce:f0:d7:13:
7c:a1:1f:61:f1:78:c4:0a:79:24:21:90:8d:df:72:12:0b:d1:
f5:17:1a:5d:6f:5c:66:ce:ab:07:f1:e8:65:53:e8:80:45:5e:
91:7d:ae:23:31:1d:92:cd:94:b7:05:b6:6e:b7:59:74:64:a9:
2f:e2:03:4f:ac:08:e1:38:21:c9:44:69:ca:43:e7:79:42:69:
bd:df:6f:a4:e9:dc:c5:75:7d:fa:b2:13:8f:73:9d:e4:1f:0f:
2c:64:45:7e:23:f3:9c:2b:6e:86:e0:3f:0d:69:84:a8:0c:29:
f6:ae:fd:b4:f0:55:00:b0:74:71:ab:28:d9:9c:ee:0b:8f:e0:
2c:cd:7b:e6:e4:c1:38:ee:9d:7a:40:0e:ee:00:d9:0d:99:9c:
8b:ea:e8:74:2f:48:eb:3d:d5:59:a0:22:53:53:89:c0:86:06:
70:26:fd:82:41:c4:ac:3e:a2:25:d4:b4:ed:28:13:f2:08:86:
42:69:eb:64:45:16:2b:28:3f:2d:1f:9a:c5:bc:e8:70:26:a1:
a0:9f:19:82:3f:e3:a0:cf:d9:ec:50:bc:87:03:fb:0a:f0:5d:
fa:de:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org