Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/ABE682E2D4F311EDB4DA771EC4F9AE02.roa
File: ABE682E2D4F311EDB4DA771EC4F9AE02.roa (raw, json)
Hash identifier: PggGOUmWZZe3Hh/o/j0uCuGHsQGrfqiQ5TCcUVPqoaQ=
Subject key identifier: F1:45:B7:DF:C9:E5:0F:DE:11:1E:91:56:D9:87:F7:EF:07:A7:40:E9
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 01B7
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/ABE682E2D4F311EDB4DA771EC4F9AE02.roa
Signing time: Fri 07 Apr 2023 03:24:15 +0000
ROA not before: Fri 07 Apr 2023 03:24:15 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 141466
IP address blocks: 150.129.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Apr 7 03:24:15 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=642f8cde-db3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:c7:ea:49:86:25:1c:17:33:02:1b:90:61:
3e:1a:03:da:03:34:6e:4b:17:45:74:8a:82:21:aa:
6b:54:d7:f3:b5:f9:92:f2:31:dd:d6:2a:86:5d:c2:
fd:08:71:6c:a7:d3:a8:d8:c1:30:a6:cf:76:88:4a:
0d:5d:b4:a8:80:0d:70:ee:ba:51:7d:fb:75:d7:19:
ae:f2:50:5a:31:f7:8d:22:5d:d0:ba:d8:bc:ae:b8:
f3:a4:89:88:ad:0e:a2:c5:b9:10:6d:b5:e8:60:e8:
f7:d3:e8:ff:5c:73:93:39:bf:99:c6:03:aa:f1:75:
a8:18:cc:5c:60:97:e7:8f:d0:67:c5:8c:75:39:01:
13:6d:b2:b1:18:61:33:a6:1c:16:0a:a0:13:37:39:
03:77:dc:81:1d:fc:01:61:16:dc:40:b8:db:94:29:
a3:fd:19:1e:f6:53:5f:8c:e6:db:3b:58:76:76:80:
8b:af:30:34:a9:c5:3a:94:90:1a:27:ed:35:60:57:
f7:af:2e:9f:0c:fc:c7:5f:51:b8:60:b1:0c:76:b6:
ce:28:88:61:a8:d4:d3:c2:00:e0:d8:a4:87:b6:2c:
2c:08:e3:4e:0d:2a:70:ab:94:36:2c:1d:bd:18:e9:
d3:50:d4:7c:a6:bb:2f:cb:ae:51:8f:cc:0d:af:6f:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:B7:DF:C9:E5:0F:DE:11:1E:91:56:D9:87:F7:EF:07:A7:40:E9
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/ABE682E2D4F311EDB4DA771EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f7:98:9a:76:7b:c7:0f:4d:c1:e6:16:fa:8d:6a:b1:e3:c4:
f9:86:8c:67:63:23:21:fe:df:2c:1a:b6:ab:aa:22:78:40:be:
bb:c5:da:bf:26:a2:b0:43:f0:47:35:26:46:2f:1d:7c:da:42:
02:a1:de:a4:54:26:33:61:42:40:0d:17:29:51:f1:7d:15:9a:
97:aa:e3:11:78:8f:25:86:e8:d7:44:6a:a4:18:56:a8:d5:4d:
ea:20:e7:56:0e:03:5e:6c:77:0b:19:81:86:07:53:10:1f:03:
bb:a8:ca:fa:77:ad:b8:6a:fc:7a:55:74:c3:5d:b3:65:1e:db:
7a:d8:a5:7e:07:98:c0:cf:35:09:bd:78:c7:44:09:c7:49:c0:
19:68:f3:bf:28:c6:ea:86:86:f2:84:4d:97:80:2b:76:65:cc:
16:9e:7b:62:61:09:57:ec:ef:5b:e3:13:04:74:2c:b2:6e:18:
1e:1a:f5:2b:f7:2c:dd:6d:1f:09:67:f2:1d:da:8c:2c:1b:26:
0c:b9:7f:3c:55:8a:e0:c3:94:4b:12:0a:90:c2:e9:17:a6:ff:
0a:a7:0f:d7:2b:25:6b:3f:7c:10:69:ba:09:7e:3c:7e:57:a9:
9f:f9:94:a3:3b:a8:25:aa:cd:ef:84:e8:36:08:5b:c1:29:cd:
49:b5:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org