Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/047DC2FAD85311ED813CCF42C4F9AE02.roa
File: 047DC2FAD85311ED813CCF42C4F9AE02.roa (raw, json)
Hash identifier: aVP8yc4Mhq/7w6nu2BGwlySpiG78qucK8LNcQfZwZ0s=
Subject key identifier: 10:F7:42:B8:09:F3:95:3F:DD:43:37:D6:41:9E:D2:95:9F:34:E4:B4
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0200
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/047DC2FAD85311ED813CCF42C4F9AE02.roa
Signing time: Thu 01 Jun 2023 06:54:50 +0000
ROA not before: Thu 01 Jun 2023 06:54:50 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 211373
IP address blocks: 203.32.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jun 1 06:54:50 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647840b9-9113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:97:56:97:a0:ed:c9:84:1d:77:56:63:1d:
0a:06:fb:ab:b6:08:18:08:dc:26:85:13:51:51:3a:
cd:8f:7c:f9:0e:fa:98:71:7c:78:a0:ba:56:33:c7:
76:31:69:b5:3a:fb:b8:ea:3c:80:2a:4a:f4:21:e6:
e8:8f:31:fa:34:ba:18:11:8c:f6:93:a6:58:16:36:
6b:94:32:1a:2c:57:bc:82:9e:ea:43:c4:4d:f5:30:
03:5a:04:74:6e:ce:d1:87:3e:9b:39:85:81:dc:01:
4b:16:e7:d7:b8:dd:59:90:f6:79:2b:63:31:40:20:
92:17:e1:08:d6:c0:44:d7:5a:a8:92:c3:36:12:1c:
98:57:9f:55:41:02:b2:e3:e0:14:6e:50:8f:84:84:
86:0a:3d:dc:69:ea:c2:35:a3:72:91:d6:aa:23:db:
10:f1:95:0c:c3:c8:c4:45:27:7e:39:3b:ff:b8:d2:
2a:b2:b3:fe:fd:c3:f0:78:b8:78:71:78:16:2f:d8:
56:47:6d:38:1a:2e:23:77:65:37:f9:53:5f:46:71:
ed:9e:c6:ae:99:f6:c4:0f:17:53:60:56:49:bb:27:
53:92:dc:52:56:7a:2c:f2:b7:27:66:55:10:e0:73:
e2:b6:9b:02:c0:cc:32:44:30:86:c1:b9:3b:98:bf:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:42:B8:09:F3:95:3F:DD:43:37:D6:41:9E:D2:95:9F:34:E4:B4
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/047DC2FAD85311ED813CCF42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e2:8a:99:68:7a:08:21:10:6c:79:38:f0:87:99:94:60:e6:
b8:a5:ff:67:31:7d:51:8b:c9:c3:0a:1b:5c:80:a9:92:c1:d7:
09:75:72:33:01:18:e0:4b:0b:19:ad:5c:74:c7:a8:7f:2f:7f:
17:9b:44:ec:9d:aa:ae:46:19:c3:dd:1f:a2:49:38:ac:55:f2:
79:38:7c:7c:20:c9:bf:e2:8a:a9:0f:95:44:04:31:e7:20:bc:
62:bd:c6:34:9f:33:cc:14:42:2a:61:38:38:ba:07:64:2d:66:
23:1f:b3:e3:5d:db:fa:f7:0a:d3:f0:f6:94:36:cb:a9:48:48:
38:5f:96:10:31:54:ad:69:08:78:4e:31:01:0e:30:73:a7:50:
79:5b:08:70:49:17:98:af:11:38:c9:b0:fc:f0:e9:8a:28:a3:
9e:81:6d:d1:25:36:09:c8:4b:ca:47:bf:bf:4f:30:ff:00:5b:
3a:67:ec:ee:81:4c:79:7b:84:67:f1:d3:3f:b6:d5:76:d0:6e:
dd:54:00:4c:5a:2e:1f:c9:d7:83:6f:c8:ce:04:7d:89:56:fe:
d7:1d:e2:1f:28:a4:05:6a:52:82:1e:b0:1e:85:aa:47:72:d5:
2d:04:14:8e:e4:3f:14:9c:f9:cd:e0:0b:20:62:87:b4:74:e4:
d1:5d:d3:76
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjMwNjAxMDY1NDUwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc4NDBiOS05MTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5zqXVpeg7cmEHXdWYx0KBvurtggYCNwmhRNRUTrNj3z5DvqYcXx4oLpWM8d2
MWm1Ovu46jyAKkr0IebojzH6NLoYEYz2k6ZYFjZrlDIaLFe8gp7qQ8RN9TADWgR0
bs7Rhz6bOYWB3AFLFufXuN1ZkPZ5K2MxQCCSF+EI1sBE11qoksM2EhyYV59VQQKy
4+AUblCPhISGCj3caerCNaNykdaqI9sQ8ZUMw8jERSd+OTv/uNIqsrP+/cPweLh4
cXgWL9hWR204Gi4jd2U3+VNfRnHtnsaumfbEDxdTYFZJuydTktxSVnos8rcnZlUQ
4HPitpsCwMwyRDCGwbk7mL+8rQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBD3QrgJ
85U/3UM31kGe0pWfNOS0MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvMDQ3REMyRkFE
ODUzMTFFRDgxM0NDRjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLIBYwDQYJKoZIhvcNAQELBQADggEBAD3iiploegghEGx5
OPCHmZRg5ril/2cxfVGLycMKG1yAqZLB1wl1cjMBGOBLCxmtXHTHqH8vfxebROyd
qq5GGcPdH6JJOKxV8nk4fHwgyb/iiqkPlUQEMecgvGK9xjSfM8wUQiphODi6B2Qt
ZiMfs+Nd2/r3CtPw9pQ2y6lISDhflhAxVK1pCHhOMQEOMHOnUHlbCHBJF5ivETjJ
sPzw6Yooo56BbdElNgnIS8pHv79PMP8AWzpn7O6BTHl7hGfx0z+21XbQbt1UAExa
Lh/J14NvyM4EfYlW/tcd4h8opAVqUoIesB6Fqkdy1S0EFI7kPxSc+c3gCyBih7R0
5NFd03Y=
-----END CERTIFICATE-----
Generated at Mon Sep 11 17:28:42 2023 by rpki-client on console-fra.rpki-client.org