Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/0ACEE074A13711EDAF0C1813C4F9AE02.roa
File: 0ACEE074A13711EDAF0C1813C4F9AE02.roa (raw, json)
Hash identifier: 0MZxm+vUEHwRnIZo+C8TcZ+qTcV0JJAN2PNDEry0mBQ=
Subject key identifier: EB:C2:83:1E:CB:B6:0D:C2:FC:9F:24:09:C1:EC:66:92:24:06:FF:D3
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 018B
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/0ACEE074A13711EDAF0C1813C4F9AE02.roa
Signing time: Tue 31 Jan 2023 07:15:30 +0000
ROA not before: Tue 31 Jan 2023 07:15:30 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 834
IP address blocks: 203.32.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jan 31 07:15:30 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63d8c011-3261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:43:fd:db:67:4c:60:b0:2f:47:0f:d1:02:
88:66:19:12:51:57:ee:7f:7d:0b:20:0a:04:6e:8b:
e0:72:71:60:0a:e1:0a:7b:74:7c:06:0b:63:b6:a9:
47:83:3f:8e:18:80:e3:54:7a:a3:6c:c2:06:21:98:
87:0f:3a:53:b4:5a:8d:6b:83:20:75:dc:29:42:f3:
33:5d:27:df:b2:8d:03:9e:03:31:e1:13:57:c9:61:
3e:33:c7:b0:21:3d:76:0d:21:e1:77:47:29:b1:f1:
24:5c:21:2d:f3:99:56:1e:a6:2c:0d:99:e0:f1:8f:
36:0e:f2:f8:38:d2:d5:8a:21:8a:3c:05:f3:86:65:
39:74:ed:2e:2a:6f:06:eb:b0:18:a1:61:92:7d:9c:
0b:e0:e1:11:0b:da:31:82:3c:1c:b9:34:e0:75:50:
9a:a7:1d:e5:69:fb:5e:77:76:1d:f9:82:3f:ea:3d:
6d:47:9a:ce:ec:c0:cc:da:01:62:7b:25:3e:9b:c9:
18:82:a5:08:eb:06:50:2a:fe:18:68:9a:f9:57:87:
7c:41:3e:a6:e6:f0:61:a4:b3:7b:06:d2:52:2b:b1:
66:ef:24:4a:26:ba:cd:ec:51:42:17:36:c3:99:4a:
de:e7:20:5e:f6:b6:53:26:48:c9:0f:0d:6a:aa:52:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C2:83:1E:CB:B6:0D:C2:FC:9F:24:09:C1:EC:66:92:24:06:FF:D3
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/0ACEE074A13711EDAF0C1813C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c2:8f:96:12:aa:75:6b:13:a5:64:38:f0:ee:cd:12:bd:0e:
f7:08:0a:fa:ca:24:8f:8e:d3:ca:79:3c:66:f6:1e:aa:68:5c:
38:16:3f:ce:ee:fa:01:cb:64:a1:81:9d:51:64:02:9b:3f:d2:
13:6f:71:44:66:9a:3f:33:51:04:4f:bb:b6:bb:97:9b:e7:70:
15:5d:a3:22:76:10:4b:a5:fc:c6:14:3b:fb:2d:9f:54:85:68:
91:70:a0:7c:5f:16:f1:30:2a:03:e9:14:92:ce:16:26:3b:77:
d9:3b:10:1d:ef:c6:4c:af:a4:1e:f0:9d:d0:78:e9:f4:2c:81:
db:06:95:fa:5e:56:40:af:6d:fc:10:46:7d:f5:88:2b:c6:6d:
bd:b5:6e:27:ce:8a:e1:5c:96:ac:02:8b:ad:37:1b:f2:ff:4d:
3c:d1:3d:d9:bd:80:4e:8a:ca:c6:8d:65:c4:d5:e0:5b:51:2d:
73:58:0d:44:4c:cc:69:5f:2b:d5:75:94:f4:ac:f3:bf:71:f4:
8c:0d:39:18:d5:3d:6a:3e:48:88:7a:5d:c2:15:0a:03:5d:29:
f5:b9:a5:b6:cf:3f:d4:f9:f6:41:a2:4c:7a:ed:3d:50:8b:fc:
b0:04:03:94:4f:de:8b:4f:24:fd:56:8d:b4:dd:a3:9b:ad:74:
8d:de:34:22
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjMwMTMxMDcxNTMwWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Q4YzAxMS0zMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquZD/dtnTGCwL0cP0QKIZhkSUVfuf30LIAoEbovgcnFgCuEKe3R8BgtjtqlH
gz+OGIDjVHqjbMIGIZiHDzpTtFqNa4MgddwpQvMzXSffso0DngMx4RNXyWE+M8ew
IT12DSHhd0cpsfEkXCEt85lWHqYsDZng8Y82DvL4ONLViiGKPAXzhmU5dO0uKm8G
67AYoWGSfZwL4OERC9oxgjwcuTTgdVCapx3lafted3Yd+YI/6j1tR5rO7MDM2gFi
eyU+m8kYgqUI6wZQKv4YaJr5V4d8QT6m5vBhpLN7BtJSK7Fm7yRKJrrN7FFCFzbD
mUre5yBe9rZTJkjJDw1qqlKsRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOvCgx7L
tg3C/J8kCcHsZpIkBv/TMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvMEFDRUUwNzRB
MTM3MTFFREFGMEMxODEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLICkwDQYJKoZIhvcNAQELBQADggEBAGvCj5YSqnVrE6Vk
OPDuzRK9DvcICvrKJI+O08p5PGb2HqpoXDgWP87u+gHLZKGBnVFkAps/0hNvcURm
mj8zUQRPu7a7l5vncBVdoyJ2EEul/MYUO/stn1SFaJFwoHxfFvEwKgPpFJLOFiY7
d9k7EB3vxkyvpB7wndB46fQsgdsGlfpeVkCvbfwQRn31iCvGbb21bifOiuFclqwC
i603G/L/TTzRPdm9gE6KysaNZcTV4FtRLXNYDURMzGlfK9V1lPSs879x9IwNORjV
PWo+SIh6XcIVCgNdKfW5pbbPP9T59kGiTHrtPVCL/LAEA5RP3otPJP1WjbTdo5ut
dI3eNCI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:58 2023 by rpki-client on console-fra.rpki-client.org