Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1625E8602C1411EE97E63084C4F9AE02.roa
File: 1625E8602C1411EE97E63084C4F9AE02.roa (raw, json)
Hash identifier: MriVUI/eXcf0rs5jorEBsDbkWjV6QLMrVCYc9CyJkjM=
Subject key identifier: 0A:FF:4C:98:70:0E:50:24:6A:85:BE:20:73:7C:3C:10:F5:E8:18:52
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 022C
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1625E8602C1411EE97E63084C4F9AE02.roa
Signing time: Thu 27 Jul 2023 00:25:28 +0000
ROA not before: Thu 27 Jul 2023 00:25:28 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 4826
IP address blocks: 203.32.30.0/23 maxlen: 24
203.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 27 00:25:28 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64c1b978-4670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:85:ff:25:63:80:dc:0a:34:12:5b:41:d7:
0c:1d:29:c6:43:3a:81:fe:ff:31:03:ba:e9:5a:7e:
6f:b5:81:73:6c:a8:53:6b:3d:71:5a:f5:76:26:66:
2b:d8:80:68:01:a5:7a:3b:65:4a:8f:f7:a4:13:ce:
6e:e1:f6:f4:e7:2a:06:23:8f:52:36:af:be:c5:8c:
52:37:01:a4:a6:2e:5c:53:86:52:7c:de:fb:27:b1:
08:6f:15:ab:a3:17:33:93:72:08:98:e3:72:f9:ba:
3c:0e:63:ae:fe:da:49:50:37:05:8a:23:eb:a7:52:
ba:52:9b:88:69:96:47:ae:89:2b:eb:6d:2b:20:ac:
5e:18:c9:e1:df:6a:01:7b:6c:ee:7a:d5:d5:04:77:
f6:f9:d5:92:b6:60:40:fd:1b:08:9b:15:ad:ee:69:
87:71:8e:eb:9f:7c:12:3e:28:1a:9c:83:e3:79:cf:
fa:5f:f4:46:78:54:e7:45:61:ef:0a:9a:d7:c0:dc:
44:89:b7:d9:65:e5:e1:89:02:32:2e:bd:ca:ae:5f:
d6:82:a1:d3:87:e9:54:d7:fe:77:ef:f9:c0:5d:bd:
9e:4a:2a:0e:0f:f7:d5:8f:5a:5d:cf:ad:c7:ba:b5:
d7:08:85:5d:1b:7a:7b:00:e5:e6:2b:01:65:47:f4:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:4C:98:70:0E:50:24:6A:85:BE:20:73:7C:3C:10:F5:E8:18:52
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1625E8602C1411EE97E63084C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.30.0/23
203.34.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:51:d5:0d:ac:07:17:4a:c1:25:88:60:3c:ec:63:52:e4:e9:
d4:ee:38:78:a5:44:13:8a:36:56:99:a4:d9:d8:06:55:c4:56:
0a:8f:11:2f:54:ee:35:9d:7c:c0:10:a9:0c:7e:87:72:9d:29:
5c:77:0f:11:c3:b1:24:2d:cc:60:d7:09:8f:5d:dc:40:8f:50:
ce:f7:08:24:14:ce:8d:60:c7:63:fd:1c:52:e4:74:7b:91:f3:
ba:10:a8:fa:fa:f7:5a:2c:6f:5d:6c:1e:3e:f0:05:76:c3:39:
1c:48:47:63:a0:c7:d2:de:7a:21:71:6a:73:d8:2e:c5:5b:a7:
66:15:b6:f3:f5:3c:fa:ae:d3:f4:6c:b0:75:b8:a7:1e:0b:6f:
3a:ea:2c:26:fa:96:d3:d0:f6:41:eb:e9:b8:cd:f2:ca:92:66:
88:fa:a7:f2:c4:80:c3:22:d9:49:d1:55:42:25:cf:0b:ea:f1:
9f:4c:be:8a:b8:28:b1:87:12:17:94:84:e4:6d:b7:36:47:ec:
b0:ca:16:8d:94:c1:8d:3f:1a:25:b9:d4:41:54:bb:4f:57:e8:
af:c6:d6:44:04:87:11:75:8b:8e:76:e1:ba:e2:a0:2b:f3:c5:
62:46:85:f7:3d:38:97:b8:e1:64:d6:69:07:fa:57:c6:dc:0f:
42:f1:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 02:20:53 2023 by rpki-client on console-ams.rpki-client.org