Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/948523C43D3111EDAF0A5A79C4F9AE02.roa
File: 948523C43D3111EDAF0A5A79C4F9AE02.roa (raw, json)
Hash identifier: OTJn03022673z7B+y7q/GBAyONB+NMWPqDDBE4Xrdos=
Subject key identifier: 01:2F:E7:B0:79:7B:A9:17:34:A7:73:EB:2D:B2:DE:49:06:93:B5:A7
Certificate issuer: /CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Certificate serial: BD
Authority key identifier: 84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/948523C43D3111EDAF0A5A79C4F9AE02.roa
Signing time: Mon 26 Sep 2022 00:24:27 +0000
ROA not before: Mon 26 Sep 2022 00:24:27 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 65535
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=847014B15AFA781D228192BE054153DB6667D576
Validity
Not Before: Sep 26 00:24:27 2022 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=6330f13b-cdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:cf:99:03:c7:05:a2:d5:72:91:60:3a:5f:
55:da:8f:8e:71:67:be:79:34:5c:9c:f6:b5:60:ac:
df:40:dc:95:1b:e5:62:c0:2c:02:9e:bc:0a:8f:25:
be:bc:b3:5a:99:16:83:eb:58:1f:f2:ec:94:a6:d8:
34:e3:b4:cb:8f:10:c7:3e:f3:76:3c:60:ff:c0:1d:
be:a5:5b:76:21:38:4f:2e:ee:88:54:89:d3:81:cd:
9c:f0:be:ba:37:5e:cb:6c:89:ec:de:2e:68:4e:96:
66:d1:2d:e9:67:8d:ae:ff:ad:cb:aa:fb:e4:de:45:
1a:de:eb:46:68:4b:40:97:48:ab:7b:f8:2f:c2:51:
70:a8:2a:0a:2d:6f:27:78:8c:ce:b6:e3:a7:d1:f1:
c5:00:05:94:55:68:78:60:53:0c:f1:14:48:be:87:
11:8f:62:45:be:ed:ff:b1:91:39:dd:bd:b3:8e:70:
f7:8b:b2:7d:28:3c:04:09:da:e9:61:01:40:dc:97:
fe:f8:c0:40:17:81:1f:83:7d:47:da:24:25:e1:c0:
5e:53:c0:62:a5:8b:4b:0c:16:88:2e:06:54:11:ab:
b7:16:cf:36:84:86:53:99:24:a3:03:6b:ed:cb:86:
56:d5:b4:b4:37:5b:58:61:ef:a1:a8:56:cf:91:61:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:E7:B0:79:7B:A9:17:34:A7:73:EB:2D:B2:DE:49:06:93:B5:A7
X509v3 Authority Key Identifier:
keyid:84:70:14:B1:5A:FA:78:1D:22:81:92:BE:05:41:53:DB:66:67:D5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/hHAUsVr6eB0igZK-BUFT22Zn1XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHAUsVr6eB0igZK-BUFT22Zn1XY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/861FD87AF5AA11ECBF15E774C4F9AE02/948523C43D3111EDAF0A5A79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
29:09:4d:76:4c:25:6e:51:cc:5d:89:45:50:5f:63:0a:62:3d:
ed:04:63:be:ca:0d:00:5e:ef:13:2b:df:ab:58:80:91:bd:b2:
cf:d8:60:d8:96:16:55:ed:f9:a5:71:62:6f:fc:a3:b3:0d:56:
39:7d:a3:2f:7b:fb:d5:18:e9:09:ad:6b:1f:bf:4f:81:f9:cf:
17:49:c5:2f:2f:43:ce:73:4c:2f:66:c4:24:cc:3d:e3:ce:c1:
da:53:57:e2:b6:d4:6c:2c:a1:91:71:4c:25:8e:e6:d0:f7:b8:
63:4d:9b:0a:79:f4:be:49:b7:6b:0e:ad:6b:e5:4a:52:b4:16:
cd:3f:fb:85:4a:9a:26:d3:dd:cf:e2:15:0c:5e:db:e3:9c:17:
1a:20:e0:47:71:1f:6b:6e:c1:d3:74:2e:ce:42:c1:d7:5c:b2:
75:11:a8:66:5d:a3:1b:87:53:08:4c:69:71:71:12:9f:1b:6d:
ee:7a:b0:03:60:77:5a:fc:c0:90:c4:d9:4c:65:ed:99:68:4c:
de:8a:9c:aa:4b:97:72:50:88:8e:87:dc:14:19:58:28:2a:62:
93:23:70:63:ab:d1:ea:2d:cd:b6:0a:52:cc:e8:43:ed:9a:e7:
7f:02:94:76:a0:e9:97:6d:18:95:79:20:5c:6d:e6:17:0b:01:
c0:b4:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org