Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/996F7818DF6511EDB132A551C4F9AE02.roa
File: 996F7818DF6511EDB132A551C4F9AE02.roa (raw, json)
Hash identifier: pcxzdk6vumK+qKaAQik4wmYVyVWk/wMvHDkRAAtljaw=
Subject key identifier: 3C:49:FE:AE:84:4D:AC:DA:A0:3C:32:9E:3C:48:02:DE:8B:D7:18:F1
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 01C0
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/996F7818DF6511EDB132A551C4F9AE02.roa
Signing time: Thu 20 Apr 2023 10:24:58 +0000
ROA not before: Thu 20 Apr 2023 10:24:58 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137443
IP address blocks: 150.129.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Apr 20 10:24:58 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=644112fa-b2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:bd:dd:df:a5:72:04:10:25:a4:c4:a9:e9:
b2:1a:13:f9:7b:51:76:ab:74:46:3e:e7:76:66:66:
cc:ac:36:af:78:21:6e:fd:48:04:42:38:04:ba:6e:
6b:1e:28:9d:f5:52:92:d8:ae:13:08:58:81:77:f3:
47:ca:44:55:e7:4d:27:9e:f6:7c:f1:01:d2:44:09:
4b:65:e6:8a:c6:8f:c0:a8:97:cc:53:ff:3f:89:26:
66:88:8e:47:77:df:d5:6a:fd:0f:ce:fe:aa:24:f6:
4f:9f:9c:f3:16:8e:65:42:84:1f:35:da:de:f9:f2:
05:f5:c6:15:b5:3b:84:e1:d8:67:c2:8e:96:bd:8d:
0f:60:59:de:9e:c7:95:b3:d7:a4:d8:96:90:ea:50:
34:b1:0b:fd:14:6e:3e:fd:09:9c:31:6b:f0:dd:e3:
6e:73:4e:df:00:a5:67:90:cc:ba:5b:74:99:e0:ca:
a8:e2:c8:e0:95:52:b5:cf:ee:89:6d:f0:b5:5f:06:
ea:23:ba:7d:18:22:d2:fc:28:21:05:4d:bc:be:18:
c5:70:a4:c9:30:87:f8:2b:96:af:e8:a6:01:57:0e:
11:e8:53:aa:da:aa:b8:9a:ed:5e:66:af:9a:6e:23:
26:2e:c8:2c:b5:1f:2f:c5:38:e2:fb:5a:07:c8:cc:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:FE:AE:84:4D:AC:DA:A0:3C:32:9E:3C:48:02:DE:8B:D7:18:F1
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/996F7818DF6511EDB132A551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:cc:ba:5d:9c:e2:79:91:d8:1d:b8:a4:0e:f3:c9:67:59:53:
af:72:08:bf:86:64:31:77:af:b5:31:7d:a6:38:3c:74:e0:86:
f5:fd:77:ea:ed:77:ee:23:05:3d:9c:41:55:67:d0:59:28:85:
4d:6a:17:84:37:6a:ca:0e:2f:4c:59:fd:c9:f3:01:de:f4:34:
b9:97:bd:42:8f:c9:c4:63:99:35:51:68:de:9c:7d:56:be:e0:
f8:a4:d1:fe:4d:3d:a7:60:35:a6:2b:0a:b6:70:f7:99:d4:b5:
4d:4f:04:9c:4f:18:32:ff:70:61:4e:8d:66:f1:22:27:78:4e:
b2:91:62:0e:26:fa:04:df:a9:9b:99:76:e8:62:d0:05:72:6c:
31:83:69:51:3a:03:b9:e7:22:fa:fe:b2:91:40:de:3d:9a:49:
8e:89:bb:70:73:74:94:65:04:e5:84:b9:03:3d:b7:71:e6:d4:
44:85:36:1e:e1:e9:80:68:bf:85:16:fc:b3:34:db:6f:70:da:
e1:d6:e5:bb:8b:3e:c4:f7:f8:d2:bc:bf:a8:e2:57:dc:bc:c1:
a5:7b:62:eb:aa:84:f9:4c:75:98:73:85:8a:82:90:88:c2:37:
01:5b:84:2a:b9:c3:f9:5c:8e:7e:81:4d:6d:53:61:51:c5:2d:
a9:ab:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org