Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/B633488880E411ED993FD824C4F9AE02.roa
File: B633488880E411ED993FD824C4F9AE02.roa (raw, json)
Hash identifier: C8iVEQ2uoGJd/X6Exy9mt0yGjEvhQnQhIu87eaC8d2E=
Subject key identifier: 90:34:76:42:8C:97:C4:F4:FD:B5:0A:6E:21:4D:36:E9:FC:1A:98:C6
Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial: 14
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/B633488880E411ED993FD824C4F9AE02.roa
Signing time: Wed 04 Jan 2023 01:45:11 +0000
ROA not before: Wed 04 Jan 2023 01:45:11 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 9898
IP address blocks: 202.36.16.0/21 maxlen: 21
202.36.16.0/24 maxlen: 24
202.36.17.0/24 maxlen: 24
202.36.18.0/24 maxlen: 24
202.36.19.0/24 maxlen: 24
202.36.20.0/24 maxlen: 24
202.36.21.0/24 maxlen: 24
202.36.22.0/24 maxlen: 24
202.36.23.0/24 maxlen: 24
202.36.24.0/22 maxlen: 22
202.36.24.0/24 maxlen: 24
202.36.25.0/24 maxlen: 24
202.36.26.0/24 maxlen: 24
202.36.27.0/24 maxlen: 24
2400:d0e0::/32 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Validity
Not Before: Jan 4 01:45:11 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63b4da26-f92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:eb:29:10:52:0a:b9:f2:31:94:ec:0d:0b:
e2:c2:1a:a7:71:5b:41:4d:3d:73:80:b4:ca:73:a8:
fb:63:ce:c0:bd:08:5c:64:55:82:19:2f:87:95:bd:
a0:77:d2:83:20:8e:40:85:44:5f:22:e9:9b:9e:7c:
24:8a:fd:c0:bc:09:3f:c0:b0:ce:58:82:d8:cc:47:
df:c9:08:9f:ef:c2:27:5f:77:88:e9:f2:a1:c3:a4:
e6:6c:a1:2f:c3:dd:0e:7c:95:71:a0:d1:a1:92:57:
80:eb:34:35:cf:ed:60:76:36:f1:57:8a:76:64:bb:
1b:ca:33:b2:a3:7f:50:7d:7f:dd:a2:95:25:ad:1d:
ff:56:fd:e6:ad:0b:75:45:7c:36:49:9f:ac:d3:58:
38:b5:12:23:d5:07:3f:b4:69:0d:cc:97:bd:cd:29:
ca:24:dc:59:32:70:99:78:47:e4:d8:c7:b0:32:59:
61:c2:70:54:c5:28:90:06:b0:8e:ca:4b:1c:d9:94:
fa:1f:a0:c8:52:ad:09:0f:75:53:e6:86:b8:7d:54:
9f:13:08:1f:2d:a6:1f:61:b6:c3:48:fb:1e:12:06:
76:86:b3:c3:94:a7:24:18:6e:1b:fc:dc:a5:4b:67:
0f:f8:a6:81:44:fc:80:4e:3b:3b:13:55:71:d4:28:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:76:42:8C:97:C4:F4:FD:B5:0A:6E:21:4D:36:E9:FC:1A:98:C6
X509v3 Authority Key Identifier:
keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/B633488880E411ED993FD824C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.36.16.0-202.36.27.255
IPv6:
2400:d0e0::/32
Signature Algorithm: sha256WithRSAEncryption
82:c1:da:d9:eb:7a:67:b9:d1:67:0f:01:b2:6b:64:1a:a8:af:
b7:fd:97:01:00:1e:58:87:8c:70:15:e2:0a:c5:55:1a:cf:c6:
1d:c2:61:13:ba:c9:e6:2e:f6:d9:59:5a:5e:ce:90:9d:3d:72:
6f:ab:26:2c:2f:1b:cc:2a:55:e1:dd:80:f7:95:a0:63:2f:49:
12:51:76:59:d0:f7:a3:50:0e:41:ab:3c:ae:f9:11:6b:17:40:
0d:04:6d:00:2b:8a:69:0e:1d:2e:7e:7e:da:1f:fa:6d:b0:24:
cc:2d:83:6d:cc:9f:d4:f1:42:f0:9d:48:04:68:38:56:ff:72:
cd:c6:35:00:f7:1a:6d:cf:e0:2d:21:b5:72:51:ab:92:a0:2b:
0a:59:a7:43:cb:c2:8d:46:e2:0d:ea:28:35:a2:06:e8:4b:30:
41:4e:13:e8:35:53:44:fe:b3:03:88:2c:7b:34:88:79:a9:14:
14:e5:98:09:ca:5f:53:93:5d:ff:77:d7:91:5b:38:e0:38:ab:
95:81:02:1c:35:b2:b3:1a:2e:3b:94:1d:b0:be:c1:e9:11:c6:
4d:e4:a9:24:94:d1:79:b3:23:e8:78:5b:52:72:e9:75:aa:9b:
38:85:21:85:6b:1e:3f:96:6a:4c:d4:37:e7:62:88:c4:14:e6:
44:5b:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org