Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/B1C5F790849011EE8C165369C4F9AE02.roa
File: B1C5F790849011EE8C165369C4F9AE02.roa (raw, json)
Hash identifier: j8wdTuZzAK4s5z5I+6gS4C+BMudfw//P6doh4P0SQ6c=
Subject key identifier: B9:FD:1A:F1:B3:D6:43:D2:57:B5:61:39:9C:26:60:5E:C1:E0:E8:18
Certificate issuer: /CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Certificate serial: 19
Authority key identifier: AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/B1C5F790849011EE8C165369C4F9AE02.roa
Signing time: Wed 13 Dec 2023 07:18:23 +0000
ROA not before: Wed 13 Dec 2023 07:18:23 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 56307
IP address blocks: 203.3.178.0/23 maxlen: 23
203.3.188.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 07 Mar 2024 01:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2CD/serialNumber=AC332130B1C09FD4AB237495A4EA9634B74C12BA
Validity
Not Before: Dec 13 07:18:23 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65795abe-ca1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:2c:92:c8:e2:95:cb:d1:e6:e4:cd:4d:69:
93:47:04:7c:51:dd:06:44:8d:83:0f:65:84:d7:35:
2b:c6:0f:50:0a:91:cc:89:18:14:11:53:0f:e9:9c:
7d:00:38:d0:2c:04:b7:4c:e4:7d:88:52:95:92:07:
2a:65:5c:51:0e:fc:03:6d:89:c7:34:e8:a1:c5:3d:
0a:0d:25:a4:e0:f9:87:46:39:f5:b2:31:38:69:f4:
0e:49:3d:42:4d:f8:8b:7f:41:ab:d6:13:12:91:fd:
a3:b6:3b:42:bf:56:01:7f:31:4a:8b:a1:b3:c4:48:
6d:8d:b6:2e:a9:8f:25:7e:9e:77:cc:4d:a2:8f:aa:
08:d9:a2:ff:40:7d:bb:34:9e:e3:43:83:04:a6:2c:
d0:ca:3a:8a:73:91:d5:8d:4f:b3:47:36:c0:99:ac:
4d:2a:24:ca:db:81:73:e0:0b:6e:de:5e:97:79:ea:
9e:6d:b3:2d:9d:37:39:f3:b7:7a:8d:5c:65:d4:c5:
3d:70:3f:d2:ea:3a:f3:74:86:b8:25:43:5b:f9:d9:
a2:97:9b:9f:1c:48:0d:05:7f:07:75:20:5e:db:3d:
01:10:ce:96:9d:fa:d3:89:7b:f5:e2:9a:1a:67:69:
d7:c9:b8:6c:81:c9:b0:a4:c0:62:bb:f4:70:d0:11:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:1A:F1:B3:D6:43:D2:57:B5:61:39:9C:26:60:5E:C1:E0:E8:18
X509v3 Authority Key Identifier:
keyid:AC:33:21:30:B1:C0:9F:D4:AB:23:74:95:A4:EA:96:34:B7:4C:12:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/rDMhMLHAn9SrI3SVpOqWNLdMEro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDMhMLHAn9SrI3SVpOqWNLdMEro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2CD/DE972FEE846511EEBDCC2D65C4F9AE02/B1C5F790849011EE8C165369C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.178.0/23
203.3.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:6d:5a:71:75:f4:38:82:2e:84:2b:a9:dd:0a:bc:fb:e9:46:
5b:cc:3b:1f:00:58:1d:1b:28:fc:52:55:4a:2d:e4:d0:1a:99:
22:e2:13:49:fc:13:aa:2e:97:fd:0e:02:34:1b:b3:f6:9f:ba:
00:ab:55:bd:fe:a6:ed:8b:55:21:af:10:db:3c:e4:af:d8:bc:
fa:d8:79:2e:69:b5:df:52:c0:fd:c0:65:3c:cf:71:9f:d7:e8:
11:8f:ae:2e:95:b1:d9:11:55:dd:82:d8:c2:8d:ac:55:39:0c:
65:5b:3e:a7:82:12:7d:3a:40:4f:11:fa:2b:bd:46:a4:ed:fa:
42:b2:5c:24:57:91:f0:49:79:59:29:ce:b5:b0:16:f5:a2:bd:
96:ce:3c:35:14:25:a3:38:9e:37:4a:34:b6:27:ca:3c:da:f7:
72:d6:12:4d:43:12:4d:1d:6c:11:89:f3:fc:cf:10:56:30:19:
1d:45:79:3f:79:e4:6a:67:15:e0:78:d9:64:08:30:2d:e3:75:
89:0b:ad:0f:29:42:9d:87:5f:74:96:9a:3e:b3:c1:fe:05:73:
e4:b5:dc:6d:cf:97:90:ee:03:3c:87:e6:71:62:ac:26:5e:dd:
32:d1:47:a2:d8:aa:24:8b:3a:ed:65:50:e0:c1:be:b4:39:05:
e8:26:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org