Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/9A653F00DF6511EDB132A551C4F9AE02.roa
File: 9A653F00DF6511EDB132A551C4F9AE02.roa (raw, json)
Hash identifier: OCZLTkmu51kd35U23mE92dSUbJWVZXYWMsh+yL78Vu0=
Subject key identifier: 68:B6:B1:3F:29:3C:E5:40:97:10:1B:05:E0:49:68:4C:4D:C4:FB:CB
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 01C1
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/9A653F00DF6511EDB132A551C4F9AE02.roa
Signing time: Thu 20 Apr 2023 10:25:00 +0000
ROA not before: Thu 20 Apr 2023 10:25:00 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 58879
IP address blocks: 150.129.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Apr 20 10:25:00 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=644112fb-fa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:56:a3:b2:60:90:07:54:92:28:30:f9:fa:
bb:5a:2a:05:3a:60:21:d3:2a:ae:b5:bd:a8:d1:8d:
9d:43:65:29:2e:73:99:0c:9c:c7:ec:37:4e:9c:f4:
2d:1d:61:0b:da:35:62:ae:45:5c:5f:14:35:63:0e:
01:be:95:10:ba:db:13:38:18:dd:43:30:44:63:ec:
b8:7e:cb:68:f7:fb:44:1a:8e:c6:bd:f1:e2:a6:95:
b9:7e:e1:3f:26:d3:93:da:42:36:4c:83:84:be:82:
69:44:dc:3f:5a:a8:a0:bc:9f:a4:f3:99:40:5e:ca:
3f:b6:14:27:13:a8:52:33:e8:b8:34:f7:99:35:35:
47:ad:77:df:0d:55:58:46:ac:4e:64:96:50:02:37:
3f:2b:80:a6:ea:32:ee:a5:24:4f:87:15:78:46:ea:
b9:e9:70:bd:2b:b4:4c:b4:14:6e:19:71:46:c0:67:
a0:6b:40:b9:a9:d4:e7:dc:82:ce:95:60:3b:b9:8e:
e2:cf:2d:2b:d7:7f:ad:2b:11:bf:fc:a3:b8:35:fd:
b8:ca:ef:23:bc:39:20:c3:20:ed:68:f9:6a:29:f1:
a9:08:5f:4e:dc:87:67:09:42:da:5b:dd:cd:44:cb:
9d:01:93:a2:3c:a5:ad:b8:20:4b:f8:5d:1d:38:f5:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B6:B1:3F:29:3C:E5:40:97:10:1B:05:E0:49:68:4C:4D:C4:FB:CB
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/9A653F00DF6511EDB132A551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0f:1b:89:af:00:f0:ae:0e:c9:24:c0:3f:2e:f2:51:da:88:
ec:e9:a8:4b:19:0f:9a:89:94:31:31:7b:6c:9a:36:50:e5:8e:
4b:b7:21:1c:1a:a0:73:b9:d3:64:0d:6e:f7:58:21:46:a7:6d:
e7:16:b6:62:57:3c:94:6e:1e:a5:67:44:4f:5a:57:60:3d:1f:
01:55:34:cf:98:89:2e:e7:97:fc:ec:d2:a3:50:c0:7d:6c:98:
00:c7:fb:19:16:54:af:87:50:1e:c5:80:24:56:79:19:3b:d8:
4d:fa:c8:69:d2:da:37:26:da:cd:06:c6:92:3d:e6:e1:f0:45:
b3:9f:bd:f0:51:2e:9c:80:cb:90:4a:43:bd:a9:71:d7:ab:e3:
96:4d:b5:b3:d9:90:da:84:81:6f:65:87:bc:9c:59:1f:cc:87:
61:a2:d1:88:78:c6:1a:69:a0:84:61:6a:7f:0a:e3:23:a6:70:
13:29:cf:e2:c7:b5:38:76:4b:e9:77:5a:d1:77:8c:13:2c:8a:
f3:38:af:d5:46:63:80:fc:56:74:de:d4:ea:dc:64:70:d0:81:
25:44:2f:a0:e8:54:c9:24:e2:e8:1b:8c:97:5f:90:f7:97:07:
29:3d:77:60:7f:81:f1:79:c6:ce:16:3b:97:c4:08:c7:9d:50:
e8:c5:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org