Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/A0F4D34CB38911ED825BDC70C4F9AE02.roa
File: A0F4D34CB38911ED825BDC70C4F9AE02.roa (raw, json)
Hash identifier: BwnB95JWdWEWpdyyVyaSWuHvhNZwic2oteEGp6xFHoo=
Subject key identifier: 36:2C:D7:EF:C6:E9:56:3E:59:09:AD:37:C9:F3:B7:94:FA:C8:94:B9
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 041A
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/A0F4D34CB38911ED825BDC70C4F9AE02.roa
Signing time: Thu 23 Feb 2023 14:52:01 +0000
ROA not before: Thu 23 Feb 2023 14:52:01 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9387
IP address blocks: 122.50.1.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
122.50.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Feb 23 14:52:01 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63f77d91-b341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:34:7d:28:3d:da:42:f9:38:50:7f:90:6a:
a2:4f:74:6a:77:d0:72:1f:69:9e:17:5e:b5:5b:6b:
6a:3b:ba:47:2e:f6:d0:b1:4a:39:2c:3d:a5:d7:1f:
58:09:cb:51:33:1a:5f:83:81:15:8b:02:3f:f7:53:
48:f7:ef:95:c4:88:df:e9:2e:c7:b0:45:ba:06:60:
61:82:fd:05:c1:81:5b:dd:f4:55:3f:71:7d:f5:b7:
b1:73:d6:9f:5d:9d:94:20:37:be:d7:e0:5d:12:82:
20:15:9e:92:96:60:43:79:93:28:40:27:4d:cf:fd:
89:c8:26:75:9c:6f:11:a2:dd:f9:81:e5:df:0b:3b:
11:fe:01:c5:32:96:c9:22:c4:98:ba:98:38:04:ef:
0b:42:68:c1:cb:ab:28:e5:81:8c:7a:bb:f7:31:60:
ce:d0:d9:50:76:c2:aa:9e:5b:af:fb:c5:2e:c0:28:
e5:f1:c4:22:45:7f:66:c8:7a:5f:ce:5d:a3:54:d7:
3f:0f:b0:bc:f4:c3:81:90:1b:58:e7:95:24:5a:4c:
79:7c:df:80:56:54:3c:23:cb:ff:cf:54:28:1a:00:
78:2e:77:02:b4:fb:6e:9a:af:cc:f2:cd:b0:82:31:
a0:69:68:b3:0b:e5:f6:e9:2b:6d:fd:63:dd:3f:39:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:D7:EF:C6:E9:56:3E:59:09:AD:37:C9:F3:B7:94:FA:C8:94:B9
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/A0F4D34CB38911ED825BDC70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.1.0-122.50.3.255
Signature Algorithm: sha256WithRSAEncryption
1a:d2:ec:2a:1f:61:09:0b:7b:3c:c7:0d:5a:43:0b:8d:37:69:
f5:06:51:37:b2:0f:0e:e4:39:cd:94:42:f4:ca:30:94:68:28:
58:7d:a9:71:38:0e:d0:48:dc:d6:0d:d2:5f:d0:de:8d:23:9d:
c7:2e:ee:f8:60:97:7d:c4:86:8a:a9:2d:78:4d:b6:13:55:d7:
53:47:c3:77:04:b7:47:ea:70:f7:e0:2d:53:a5:31:e3:a7:45:
30:67:55:d6:4f:ae:29:a6:71:df:22:57:5b:6d:75:4c:d0:80:
cf:fc:9f:71:c8:17:89:e2:14:0b:91:4f:dc:9c:06:4a:be:af:
56:b3:ba:fe:df:b6:a2:6c:ef:96:c1:75:bf:4e:b9:3c:e4:21:
f8:4a:4d:b5:b8:dd:87:64:a7:b9:51:0d:d8:f6:b1:09:a1:8d:
df:c4:e1:b7:bd:73:79:97:8b:92:7e:94:6b:f7:85:9f:34:5f:
a2:c9:22:19:ee:d1:99:ea:a5:ed:6d:15:4a:7a:2e:ee:c2:9c:
ac:41:30:e1:50:17:59:f0:f7:2c:79:32:2c:ce:d1:7b:0d:ff:
a4:be:15:dc:b3:74:4b:b3:a2:0c:de:ae:58:03:7a:96:a9:65:
0e:81:2a:20:69:96:09:96:a2:67:0a:35:63:1a:30:5f:b7:55:
fe:b6:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org