Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C53949A93F111EE93F7B711C4F9AE02.roa
File: 1C53949A93F111EE93F7B711C4F9AE02.roa (raw, json)
Hash identifier: Zu5qfwHXjWGz72hT+KD2TuNaFerERPlEBDsGYP7X30c=
Subject key identifier: 46:5A:C1:16:94:3B:03:FA:0C:E8:25:A8:88:48:43:34:FB:D8:03:1B
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 02F0
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C53949A93F111EE93F7B711C4F9AE02.roa
Signing time: Wed 06 Dec 2023 04:37:07 +0000
ROA not before: Wed 06 Dec 2023 04:37:07 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 40676
IP address blocks: 203.32.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Dec 6 04:37:07 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=656ffa72-c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:66:fb:93:68:ad:46:83:ce:61:3f:a4:28:
54:5a:91:31:98:5d:d1:0d:0f:98:65:19:ed:08:a6:
7e:c1:ff:72:f0:59:b7:eb:c5:b3:fa:d1:5a:73:7d:
70:51:ce:3d:ba:20:26:27:5c:dc:29:d8:55:42:4f:
52:a1:70:4d:07:3e:92:e4:fa:9a:95:aa:3e:82:15:
21:01:8c:5d:c1:a3:2b:6c:4e:47:29:eb:95:c1:be:
16:85:d2:83:c6:59:53:12:66:e5:d0:89:e3:aa:b3:
92:10:01:15:4b:d3:1c:32:84:80:de:ad:5a:df:48:
2a:66:a8:db:09:c0:80:b7:8e:0f:28:6d:d5:3f:4e:
51:99:68:58:4a:09:e4:f4:16:b1:11:58:10:14:92:
74:7e:b7:d1:d4:25:63:85:fe:19:86:50:0e:4a:0a:
61:92:92:30:fe:a2:fd:0d:43:87:dd:0f:2c:c7:b2:
ed:9a:aa:47:cf:69:8f:2a:a3:80:46:36:12:1c:e1:
43:75:74:56:fe:6a:4a:50:ab:fd:6c:cf:d7:f4:13:
07:aa:e6:33:22:0d:4d:1d:37:81:fb:6b:e7:2c:8e:
34:69:de:91:32:77:0b:44:e4:10:a3:6f:61:95:fc:
b3:48:7b:99:59:9a:bd:68:e8:00:66:34:9f:b9:dd:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:C1:16:94:3B:03:FA:0C:E8:25:A8:88:48:43:34:FB:D8:03:1B
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C53949A93F111EE93F7B711C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a5:92:ba:b8:d1:f0:6c:92:c1:de:92:52:af:e8:83:37:1b:
11:72:cd:74:d3:91:29:18:19:6f:1b:3b:a3:2c:b6:10:34:56:
d6:43:8d:6b:dc:89:7f:77:e6:fd:21:c9:ec:8f:6c:f9:a4:75:
6f:21:85:13:39:22:fe:4c:89:67:dc:fd:4c:ab:98:ac:98:e4:
b3:d9:06:bd:70:c5:ea:82:f8:43:4f:8f:e0:e7:08:0c:da:80:
4e:d2:e3:12:03:33:44:c6:3c:4f:f8:5b:65:ad:22:47:b8:0b:
3b:4f:2b:3d:2e:6e:65:8d:c0:26:80:eb:d7:32:55:37:23:bc:
71:bf:d3:15:61:01:48:42:5e:71:e2:88:ae:20:c4:22:7f:29:
7e:f8:1c:70:8d:66:ec:6b:ed:cd:7c:dc:54:58:50:9a:33:3e:
d1:c9:8e:9d:ba:29:d8:8b:91:06:49:72:7f:8a:31:cf:54:14:
65:ed:f8:fb:a1:7c:b1:01:f2:ba:ce:d0:31:70:84:fe:d5:cb:
a2:3d:23:12:28:98:d8:aa:5b:ca:b9:ea:4a:4e:37:2e:51:d2:
c3:76:2d:5c:36:12:6f:a8:ed:11:75:e3:83:76:8b:2c:60:e2:
12:98:f2:2a:73:6a:5d:ef:72:aa:78:38:5d:c9:64:60:be:b3:
17:14:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 11:38:05 2024 by rpki-client on console-fra.rpki-client.org