Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/74DFA3CECAAD11EC9B0BCC4BC4F9AE02.roa
File: 74DFA3CECAAD11EC9B0BCC4BC4F9AE02.roa (raw, json)
Hash identifier: vf5tM0A7Sr3TOnLB/kngX6AMxdcaYD/7E76tB0Yoixc=
Subject key identifier: EF:0B:66:82:A5:67:F0:6E:41:17:E6:DC:82:C9:0F:59:5A:F0:69:BC
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 0328
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/74DFA3CECAAD11EC9B0BCC4BC4F9AE02.roa
Signing time: Thu 26 May 2022 14:00:19 +0000
ROA not before: Thu 26 May 2022 14:00:19 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 32181
IP address blocks: 27.126.176.0/24 maxlen: 24
27.126.177.0/24 maxlen: 24
118.99.23.0/24 maxlen: 24
118.99.26.0/24 maxlen: 24
118.99.31.0/24 maxlen: 24
118.99.34.0/24 maxlen: 24
119.47.82.0/24 maxlen: 24
163.53.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: May 26 14:00:19 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=628f87f2-b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:24:7c:da:e9:aa:2c:16:24:75:13:4b:4a:
e4:bd:3c:8d:96:3c:ef:70:87:b5:42:c3:60:13:3a:
9a:22:da:8a:a5:0d:31:bf:8e:06:a2:f3:e2:08:a8:
4b:6e:f9:97:15:d7:83:e2:a4:c4:b2:85:57:74:ad:
d9:08:1a:c5:22:80:e9:f0:85:b5:20:bb:d5:d7:07:
f4:b8:36:47:c0:c4:9c:b5:e5:3b:fd:66:fa:73:8a:
cc:a9:12:7c:9e:96:69:f1:37:c2:21:54:77:bf:a6:
bd:06:c4:0f:a3:36:5d:00:88:d9:1e:37:55:fe:b1:
2b:7d:75:ed:6e:71:9f:51:b9:ce:76:fc:01:73:e5:
09:10:01:d5:4b:f9:6f:62:15:41:11:b4:40:74:43:
6d:15:cc:89:3a:be:67:7a:ae:ad:88:a8:10:ce:0a:
c6:34:9f:eb:25:a6:2c:ff:0c:8f:36:f6:0d:9c:96:
76:02:29:ba:94:d5:07:13:4b:44:79:d7:6a:c2:b5:
f9:1e:37:3e:93:eb:50:55:78:42:47:9a:d1:76:ff:
d3:3e:a3:28:74:f3:77:f3:35:a9:c6:3c:de:fd:a3:
8b:ec:ec:9a:45:6f:8e:4d:11:43:de:64:ef:75:b1:
0a:13:ef:4b:1a:33:30:9d:33:cb:fe:b5:7e:9f:e5:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0B:66:82:A5:67:F0:6E:41:17:E6:DC:82:C9:0F:59:5A:F0:69:BC
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/74DFA3CECAAD11EC9B0BCC4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.126.176.0/23
118.99.23.0/24
118.99.26.0/24
118.99.31.0/24
118.99.34.0/24
119.47.82.0/24
163.53.217.0/24
Signature Algorithm: sha256WithRSAEncryption
51:15:b6:25:88:00:ea:cb:3a:9d:13:21:42:af:c6:1f:12:8f:
e3:30:c1:a0:ce:d0:b2:27:d0:14:3e:f0:ca:ff:7a:74:8e:19:
f9:ac:a8:73:7e:c0:a3:b8:76:31:a9:d8:3b:99:d2:22:df:98:
fb:c6:c4:86:27:3c:d3:e6:b2:af:27:a6:17:71:ff:9f:d4:5e:
dc:88:dd:70:4f:d7:53:58:65:f8:cb:9a:f6:57:85:a9:c9:78:
93:c3:4e:65:92:cc:f3:32:08:8e:ef:7b:32:3a:2a:03:b8:50:
4e:d9:70:7f:d3:89:ca:c1:e4:52:2b:fb:90:f1:37:1b:60:33:
9f:6e:7f:b4:57:21:8e:23:59:72:c0:cd:fa:e5:5e:62:25:5f:
a2:b7:39:1c:fa:ac:ca:1b:f2:7f:11:de:0f:94:98:19:cf:2c:
6b:78:4b:a8:a4:79:c2:54:31:97:2f:23:aa:60:6c:27:cf:c6:
89:a8:61:47:73:bf:94:6c:8d:d9:c3:78:8a:1c:78:24:a4:3a:
29:c7:f1:c2:24:9a:ed:dc:81:e4:c4:b3:4d:18:db:13:63:e5:
23:ff:d3:b0:dd:a5:f3:12:82:85:44:2a:3e:bf:34:d2:67:47:
25:07:bd:f4:75:bd:fc:21:bc:9d:6c:b8:48:8f:20:50:c4:f6:
d4:95:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org