Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E35EDBDC258111EEA197162DC4F9AE02.roa
File: E35EDBDC258111EEA197162DC4F9AE02.roa (raw, json)
Hash identifier: 32VHNeKseWFcnDgou8rSA4m0aj6tPywc/5o0pN0n7zI=
Subject key identifier: 4B:52:7A:E8:73:39:8D:45:53:46:B4:4D:00:04:21:E3:53:B6:20:64
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 0475
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E35EDBDC258111EEA197162DC4F9AE02.roa
Signing time: Tue 18 Jul 2023 15:45:25 +0000
ROA not before: Tue 18 Jul 2023 15:45:24 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 50738
IP address blocks: 122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Jul 18 15:45:24 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64b6b394-f222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:4e:aa:d1:5b:2c:d2:2e:85:0e:62:bc:cc:
d9:96:19:ee:e0:0c:68:90:60:1b:91:e1:38:fc:58:
28:4e:3a:d3:4d:7a:d5:73:49:f2:a9:13:98:73:f7:
fa:bd:4b:36:5b:2b:5a:a1:52:ad:ca:02:cc:a1:6c:
2d:36:21:73:a1:cf:3a:8a:55:95:46:53:03:10:af:
92:c5:cc:8d:7d:be:c5:57:38:ac:47:32:2e:97:f7:
c4:df:8b:d4:13:98:8b:7b:71:c3:1c:3c:3c:1a:56:
f9:94:c4:2f:07:a2:81:ec:6d:9d:63:6c:27:88:56:
df:6e:be:d2:90:e4:0e:d6:2e:58:30:15:3a:15:9b:
6d:12:3f:4a:ca:da:fc:59:ea:ef:52:39:1b:19:89:
0f:ac:41:c0:2e:92:67:20:0c:21:9d:94:02:11:fb:
52:76:4a:db:bf:80:51:67:35:ba:e0:c2:4f:7b:9c:
38:7e:1f:b4:f6:21:66:97:5e:75:76:3a:e0:cf:5a:
22:3f:9d:01:8c:29:c3:ae:62:20:a3:34:84:8e:01:
fe:c7:46:61:aa:e1:7b:23:c5:1b:39:77:6f:f7:2a:
25:6c:f1:60:1c:6c:c7:74:54:bb:dc:90:fc:da:75:
dc:3c:c6:b6:50:59:3d:fe:22:73:32:30:70:1c:82:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:7A:E8:73:39:8D:45:53:46:B4:4D:00:04:21:E3:53:B6:20:64
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E35EDBDC258111EEA197162DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.0.0/24
122.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2c:ce:7c:96:eb:81:08:af:49:2d:b7:b9:75:bb:77:b5:82:
a9:51:f5:f2:2a:32:8f:63:97:23:aa:17:72:3f:bd:89:e7:02:
9c:de:07:82:96:ab:91:db:b8:a2:63:e2:b6:6e:23:a1:69:0b:
a0:ff:11:41:99:0a:2b:d5:e0:8e:fb:7c:b1:08:64:68:1e:ee:
24:8b:9d:2a:bd:6c:39:fb:e2:ea:1c:c7:c5:30:83:1a:49:b1:
32:76:63:77:22:d8:58:35:12:f6:dc:f9:36:f3:5c:f4:fe:8b:
d2:f9:7a:19:09:1d:f9:8d:4e:ab:61:08:c6:9b:28:24:bc:62:
dc:91:f1:6a:6d:f6:03:61:4a:ae:51:bd:b0:e1:4c:2e:b0:07:
df:69:c8:62:1a:55:41:d8:30:b2:a5:7e:fd:6e:e2:9e:52:73:
53:d4:13:6a:15:3d:f0:ab:4c:17:30:95:6c:55:45:bd:79:2c:
86:9e:fd:6f:17:fc:e4:b3:2f:a4:dc:e4:96:7f:26:f1:45:5a:
46:9d:63:45:0a:0d:f7:22:6b:fd:c1:43:41:63:ce:a2:89:22:
6b:ff:c1:0e:f9:fe:d5:37:79:a3:ee:8c:0a:e8:4d:86:0b:f4:
24:eb:fc:98:26:47:75:c3:c3:f8:7e:63:e6:85:1c:c7:ce:b5:
1e:d8:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 18:36:44 2024 by rpki-client on console-ams.rpki-client.org