Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/CDC15DACED7B11ECB2031D1EC4F9AE02.roa
File: CDC15DACED7B11ECB2031D1EC4F9AE02.roa (raw, json)
Hash identifier: Z1821fZ8UkFLFX0QWvPx0UintOwaNj6ikHX+905w4X8=
Subject key identifier: 91:31:88:07:84:1B:5A:3F:C8:3E:E4:02:9E:CA:0D:5E:98:39:1D:EA
Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Certificate serial: 1B7C
Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/CDC15DACED7B11ECB2031D1EC4F9AE02.roa
Signing time: Tue 28 Feb 2023 17:03:57 +0000
ROA not before: Tue 28 Feb 2023 17:03:57 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 51089
IP address blocks: 202.144.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7036 (0x1b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748
Validity
Not Before: Feb 28 17:03:57 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63fe33fc-fb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:d4:53:ac:07:eb:14:7d:8b:d9:b6:7f:33:
42:c1:0b:bf:11:fa:14:a2:c0:aa:2e:87:0f:51:3e:
78:f0:ff:64:74:e1:5f:13:2a:1f:c2:0d:6a:e5:f0:
f7:25:47:eb:03:08:e9:be:14:c5:d0:6a:c1:e5:57:
46:2c:83:fa:55:7c:d2:73:30:43:34:18:f1:13:53:
68:6a:50:77:9a:54:87:e1:cc:87:05:48:78:dd:f3:
1a:bb:3c:af:8b:2f:94:ff:99:d3:75:2f:f5:2a:6e:
bd:d7:e9:34:db:e0:e1:2c:2a:60:d6:3c:e8:62:14:
04:49:f1:ee:27:22:35:7f:25:81:c1:0e:6b:ed:c1:
b8:a7:d1:5d:10:8d:4c:9f:bd:5d:fd:62:29:5c:ff:
a1:75:93:f3:12:39:b5:99:b6:11:af:4b:02:3a:28:
87:9e:fb:6b:59:6b:66:7f:7a:34:2e:43:6b:ea:64:
44:12:9e:85:3b:af:f3:04:25:6c:5b:0c:68:7b:37:
54:47:b3:04:e6:21:a2:9a:1b:56:c0:38:2c:28:90:
ff:98:52:ac:36:6a:31:3e:09:a1:1b:9d:d0:00:38:
c5:55:af:34:91:e3:ee:24:a8:03:6d:ec:a4:47:1f:
2d:ed:9b:fb:3d:18:4a:39:0b:36:76:c0:67:9b:c8:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:88:07:84:1B:5A:3F:C8:3E:E4:02:9E:CA:0D:5E:98:39:1D:EA
X509v3 Authority Key Identifier:
keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/CDC15DACED7B11ECB2031D1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.196.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:96:3f:94:db:44:08:5a:0d:6a:88:4b:d9:cb:f6:58:e1:b5:
2e:ae:61:e6:6e:0c:ca:b7:c2:bc:7b:59:ef:5c:89:3e:64:28:
ca:32:e5:13:f0:03:d2:ba:1d:94:6c:72:27:6b:1b:12:b6:c9:
2a:48:a5:a6:51:e0:4a:a9:1f:cd:8d:cf:c3:8c:f3:90:3a:f9:
4f:cc:8f:ff:08:ef:e6:bd:11:ec:46:b7:32:2a:11:27:85:f4:
a1:3d:08:b9:46:80:fc:a1:17:2d:da:15:d6:78:26:d5:02:f7:
03:90:0c:2a:89:32:20:b9:f9:e5:c7:45:45:b5:ac:81:26:0e:
e4:d7:85:ec:c2:5c:27:5c:1e:1a:67:63:59:1a:85:6d:6d:a6:
1c:01:bc:60:02:f9:66:ab:01:85:67:60:ff:36:94:0b:4d:c6:
28:db:21:b5:37:02:03:fa:7d:f0:89:ad:96:a9:78:e7:2c:8a:
43:fa:59:1b:95:5f:6f:ab:6c:72:e0:af:66:52:27:65:e4:55:
e8:71:11:6e:96:47:37:38:c3:55:ce:c0:cb:dd:21:84:eb:c3:
88:19:7c:56:47:64:30:38:81:e3:2f:e7:bd:78:21:ed:f4:d1:
55:d0:5f:7c:7b:a3:3c:8d:cd:c5:d5:03:e4:8f:ad:59:df:06:
a3:2f:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 16:16:32 2023 by rpki-client on console-ams.rpki-client.org