Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/B1DA6C9A090111EDB6B9BF3FC4F9AE02.roa
File: B1DA6C9A090111EDB6B9BF3FC4F9AE02.roa (raw, json)
Hash identifier: N3XkYE9R3AKwrKx1hdg6kN0ZsO4jEwUi9RtgAm84IfU=
Subject key identifier: 06:1E:CC:98:99:57:88:25:83:B8:AF:10:8C:15:DA:90:DA:9E:5E:B5
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 0439
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/B1DA6C9A090111EDB6B9BF3FC4F9AE02.roa
Signing time: Thu 29 Sep 2022 17:02:01 +0000
ROA not before: Thu 29 Sep 2022 17:02:00 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 3836
IP address blocks: 203.185.96.0/19 maxlen: 19
203.185.101.0/24 maxlen: 24
203.185.102.0/24 maxlen: 24
203.185.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Sep 29 17:02:00 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6335cf88-b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:e1:c5:d3:9b:38:b8:30:37:1f:7f:b3:b7:
c1:a2:18:b1:2a:f8:e7:27:82:3d:d1:10:87:26:d5:
12:24:c6:65:70:4a:2f:e9:80:f2:4b:a7:6d:ad:a1:
ed:75:94:3e:7b:21:6f:0a:95:54:7c:de:c8:4e:df:
33:72:b1:9d:71:52:06:11:a0:82:28:3e:31:03:ca:
c0:6f:69:0b:09:85:b3:f6:52:d1:0b:0e:f9:b2:f4:
49:3b:2f:28:b9:67:7d:5c:c4:03:6a:bf:19:d8:2c:
b0:e9:93:62:20:5d:98:17:c6:db:e5:9c:e6:36:d7:
ca:e5:86:5d:da:13:58:10:38:34:d8:3d:b8:48:52:
b3:60:50:aa:cb:ef:10:37:9d:5c:c4:22:d3:e8:75:
51:a2:45:9e:84:d7:26:77:48:82:e9:a5:1d:91:47:
9b:7c:dd:46:c0:bb:e0:be:f8:79:eb:44:c7:4e:46:
0d:e5:2c:3b:48:d1:7d:db:ca:56:eb:4c:9c:d9:f2:
bc:66:d0:da:71:32:43:ff:0b:c0:e1:1f:8d:58:9f:
ce:35:ea:52:9e:a5:da:72:f4:11:79:fb:ed:fb:fc:
e9:77:04:17:8b:65:1f:9b:a1:b7:de:d9:a7:cc:b1:
2b:73:4d:6f:12:ae:5a:e3:64:8e:89:bb:3d:18:14:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:CC:98:99:57:88:25:83:B8:AF:10:8C:15:DA:90:DA:9E:5E:B5
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/B1DA6C9A090111EDB6B9BF3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.185.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:78:fd:b1:2f:a3:63:07:70:15:20:7b:a1:97:35:0a:b8:2e:
b3:f3:3c:ab:01:87:bf:e7:e6:56:da:05:9f:d4:45:2a:4f:db:
0b:3a:00:08:cf:18:5b:92:4f:4f:7a:8d:c4:b4:fa:ce:34:47:
e7:1f:4d:dd:b0:a1:a7:d6:1e:28:7a:bd:0e:e0:b5:6b:c0:bd:
ff:3c:b0:ae:ab:c0:34:9f:6c:57:d6:ae:2c:a1:b5:e9:59:11:
fc:6e:53:a1:07:26:9b:64:42:ab:aa:9e:75:41:4c:2f:0a:26:
e6:09:ee:6d:8b:02:37:b4:15:38:81:be:de:3d:5e:ec:14:f3:
83:df:f2:6d:27:b9:9f:7f:8c:c2:3f:33:24:0b:3a:06:35:de:
56:41:23:d2:6f:2e:06:ef:70:46:97:2d:08:e5:59:74:7f:04:
1f:0e:50:5b:fb:5a:08:c7:08:04:9a:20:5a:87:e4:44:60:6a:
d2:f7:3d:a4:df:ba:80:48:8a:ff:a4:1b:4d:6e:1c:96:35:af:
4f:54:00:bd:5d:5a:75:e1:5e:e9:cb:63:ef:23:13:4c:53:58:
8a:8b:92:62:43:d7:a6:10:43:e7:09:6a:4d:65:37:a6:5d:28:
28:4f:53:b7:ff:4b:ac:0f:e1:f0:0e:4c:f1:04:6d:88:b8:1f:
83:cf:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org