Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/57F883AC2A6611EDA9B61C6EC4F9AE02.roa
File: 57F883AC2A6611EDA9B61C6EC4F9AE02.roa (raw, json)
Hash identifier: CXIKpB1IbdUNCEoH5GJEMI6GO2CDKE4pPTKOY5xx6Ww=
Subject key identifier: EA:9D:22:98:05:45:92:1E:22:97:85:93:CA:8E:71:8F:15:40:C8:1D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 014F
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/57F883AC2A6611EDA9B61C6EC4F9AE02.roa
Signing time: Fri 18 Nov 2022 22:53:39 +0000
ROA not before: Fri 18 Nov 2022 22:53:39 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.30.0/23 maxlen: 23
203.32.30.0/24 maxlen: 24
203.32.31.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
203.32.40.0/24 maxlen: 24
203.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Nov 18 22:53:39 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63780cf3-3f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:e6:4d:63:cc:66:33:65:73:cd:0a:5e:21:
35:86:3f:67:8f:d7:61:0f:3f:a1:6f:23:59:95:b1:
44:92:ed:cd:db:fa:38:fb:d4:86:c0:6b:45:2d:31:
2a:38:33:7e:08:5d:ec:0c:4e:da:9f:60:a9:f6:0e:
1a:c9:9e:1d:f9:e6:84:c7:84:e8:1a:73:1e:e2:a0:
59:e4:4d:11:c6:d5:8e:12:e0:01:fc:30:58:f2:d3:
dd:74:08:2e:42:51:93:f2:f8:b5:0c:98:3c:51:af:
62:80:c2:15:98:f6:c7:6a:3e:61:76:97:5d:88:5e:
57:f2:75:0f:d1:b4:71:ca:b6:51:91:86:d4:1b:3c:
98:ee:12:b6:21:f5:a0:29:36:66:86:65:d6:36:87:
5e:14:11:16:7a:80:22:a4:e8:7b:b9:27:58:0f:71:
41:24:4c:1a:72:ed:8c:00:52:89:38:9f:aa:7b:38:
ac:cf:45:d6:0a:c5:11:19:47:20:db:69:51:96:92:
3b:5f:fd:5a:3f:f1:2c:3e:19:96:68:31:a4:8b:e2:
5c:d8:26:df:1f:7f:43:76:df:da:5c:55:64:9d:b2:
1b:dc:ef:f3:22:48:99:98:38:ca:dd:e2:03:f6:62:
47:56:41:f7:4f:99:1f:50:18:ce:66:fe:e9:55:0b:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9D:22:98:05:45:92:1E:22:97:85:93:CA:8E:71:8F:15:40:C8:1D
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/57F883AC2A6611EDA9B61C6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.30.0-203.32.32.255
203.32.40.0/24
203.34.26.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9b:13:90:40:7e:39:fa:35:f0:67:2b:c2:df:58:03:13:57:
85:ca:de:22:5b:d2:bd:4d:93:03:ec:b0:77:47:c3:fe:64:64:
52:3f:61:1b:b7:e8:87:1b:22:56:49:44:0e:61:bf:a1:b3:54:
ce:85:41:47:24:f2:47:ce:49:71:c1:34:32:90:eb:54:2d:1f:
b1:a9:c7:98:90:3a:91:33:22:0b:67:db:f3:9a:1c:8e:08:72:
d4:81:90:8a:96:5b:60:7b:bf:dc:1e:2d:d7:f7:4d:11:0a:e3:
d9:73:cf:4d:13:61:9b:ed:b8:1a:26:1b:f3:dc:ac:79:01:25:
a9:2a:b3:fb:69:8c:03:31:2f:ef:c5:11:af:9f:39:70:11:6a:
1f:6d:db:e2:8e:cf:f6:ba:92:43:bc:f9:5a:c3:2d:40:d4:65:
d9:3d:5c:8e:e6:d4:2c:2f:f0:2a:c5:87:d4:81:56:c6:b0:d9:
91:39:fe:64:05:a2:03:ad:ff:f7:88:32:75:c8:17:33:03:bc:
61:df:62:c1:42:8b:28:09:be:3b:f8:51:db:a3:cb:9e:1d:09:
ab:ed:5d:a8:51:8a:50:1e:e6:44:bb:ab:82:25:0d:12:bd:cd:
c1:9a:38:6b:72:ef:27:a8:1e:48:e7:f6:a3:41:e0:34:03:54:
7b:b0:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org