Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/44DD945CE4FE11EE9E471D70C4F9AE02.roa
File: 44DD945CE4FE11EE9E471D70C4F9AE02.roa (raw, json)
Hash identifier: j0fgT2Rk1WcE1XlW5vVXpjZeCwy83bpbr/sOaDxtp/g=
Subject key identifier: 47:41:51:E6:F1:E1:18:1B:AD:8E:84:D1:73:CB:4B:6D:CE:58:5E:BA
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0344
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/44DD945CE4FE11EE9E471D70C4F9AE02.roa
Signing time: Mon 18 Mar 2024 08:05:22 +0000
ROA not before: Mon 18 Mar 2024 08:05:22 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 150110
IP address blocks: 203.32.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 04:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Mar 18 08:05:22 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65f7f5c2-f45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:ab:99:0f:e3:28:37:1e:94:5c:20:cf:9e:
0a:9b:64:ab:af:ec:93:b2:05:ce:bd:b5:61:5f:bd:
57:79:50:91:90:05:13:fd:b3:2a:57:52:84:3e:05:
b8:8c:46:74:d1:67:a3:c0:8b:6e:17:50:f3:ff:31:
d8:1d:dc:c6:7f:e7:40:2b:29:03:3c:d7:2c:fc:bb:
a1:48:2a:36:0b:19:6a:dc:17:10:5a:51:23:57:98:
91:87:10:74:3b:08:93:5e:1e:48:10:67:e0:00:ee:
59:a1:65:b1:f7:d0:04:ee:bb:17:c7:50:c9:6a:f9:
b4:b0:c8:4a:84:e6:a3:00:69:66:13:53:d0:7b:03:
a1:1a:97:44:01:2f:0c:88:b6:9e:7f:c9:6d:ea:eb:
a4:cb:23:0b:b7:33:4c:f0:fa:65:ed:3e:83:d0:31:
5b:d5:f7:c2:26:75:67:fb:59:88:db:b3:2e:87:36:
b3:d6:0f:14:b6:06:8c:8b:8c:d8:6f:be:c6:d7:7d:
bc:5f:41:5b:c7:bf:3f:2f:36:f0:75:fd:8f:f4:db:
f0:a1:2f:d7:99:75:18:a1:b0:03:c1:6c:69:f6:4e:
f0:b5:25:5e:85:f2:e8:f0:b1:f7:f6:71:92:f8:20:
bd:ce:8f:8e:5d:30:d6:2f:30:10:c2:93:ba:14:84:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:51:E6:F1:E1:18:1B:AD:8E:84:D1:73:CB:4B:6D:CE:58:5E:BA
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/44DD945CE4FE11EE9E471D70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:81:00:61:b2:60:c2:d0:53:5f:2d:73:33:dc:d0:cd:84:b4:
35:9d:2a:59:ff:4a:7b:be:7e:fd:e3:93:59:05:d2:c8:db:8d:
da:51:28:68:aa:80:60:fc:c1:1a:fb:f4:5e:38:07:9e:a1:ef:
3e:3e:5b:11:8c:39:4e:9d:72:70:26:f8:fc:82:1c:fd:8f:c6:
e3:e2:69:12:dd:d1:de:c2:73:02:db:54:b9:ab:27:cf:13:89:
04:5e:8d:e9:9f:f6:00:90:5c:36:fa:1e:dd:4a:dd:e5:07:37:
5b:f4:29:6b:22:87:a6:8e:cd:4a:c4:e4:f6:b2:f4:7d:65:56:
e6:8e:2d:d9:81:56:67:e2:da:19:7a:0a:24:51:ce:72:4b:ea:
87:7f:c4:39:11:f1:0a:2f:58:bf:61:1a:d2:d6:86:0c:6c:b2:
6d:ee:39:15:d5:8d:79:de:85:87:b0:69:a2:1d:d4:ea:3f:a8:
4e:05:f3:e1:72:79:df:0d:99:1c:03:34:50:eb:2f:4a:ed:51:
10:d7:05:58:f2:59:be:c9:1a:f5:55:a7:09:7d:40:cf:91:c6:
c0:ea:71:77:db:6f:48:d7:f4:79:1b:80:4a:b9:58:79:b2:e2:
a4:25:fb:30:65:bf:59:4d:7f:3b:b2:1c:94:ce:f6:b6:54:0c:
b5:50:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 08:04:09 2024 by rpki-client on console-ams.rpki-client.org