Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/60622D0C4D0D11EEA9D45584C4F9AE02.roa
File: 60622D0C4D0D11EEA9D45584C4F9AE02.roa (raw, json)
Hash identifier: XUQrTF2at7X+3VI1SbJv/BYWUmioIGpgdEekrQxo5iE=
Subject key identifier: CE:31:00:69:29:89:54:C8:2D:5C:37:48:08:6B:49:D2:74:43:B6:79
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 025A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/60622D0C4D0D11EEA9D45584C4F9AE02.roa
Signing time: Wed 06 Sep 2023 23:30:34 +0000
ROA not before: Wed 06 Sep 2023 23:30:34 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 205320
IP address blocks: 203.32.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Sep 6 23:30:34 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64f90b9a-bc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:a7:ad:5a:90:ee:82:4a:b0:46:60:28:e7:
02:55:5f:c9:92:65:7b:8a:77:2e:9a:03:60:1d:9c:
50:1d:cc:57:a3:45:67:e5:97:1e:e5:6c:c9:5b:c9:
89:61:f3:ea:3f:66:25:2a:88:50:0d:ba:23:c5:40:
c8:31:fb:bb:7b:0d:78:9a:f7:1a:c5:c4:ad:96:0e:
22:e7:d7:d2:b9:a5:17:48:85:64:bc:6e:30:c3:dd:
d9:fc:96:6c:ea:23:49:e1:19:0a:62:50:a6:63:7d:
9b:64:a0:f9:fb:6f:66:06:64:89:58:ac:66:0f:fc:
b3:b1:90:01:36:ed:2f:79:76:e7:fe:17:06:49:ad:
3d:76:5e:eb:85:1b:97:8f:77:1f:47:ce:3c:86:1b:
ed:e4:88:c4:da:4a:3f:1e:cd:b2:04:d4:cc:49:29:
ed:07:a2:09:7d:9c:a7:67:e4:16:88:8f:d8:73:93:
93:d5:1f:b1:52:92:c3:c4:5a:fe:d9:ae:3d:e4:ab:
57:c3:7d:e7:b3:34:78:10:da:94:ab:1f:2d:d4:0d:
25:24:2e:12:65:81:f2:7e:05:71:f9:6e:68:98:19:
5c:1d:5a:cd:a8:b0:b8:ff:1f:25:ff:89:97:c5:23:
d2:3c:72:4a:99:94:f6:56:24:37:a9:7d:ee:2e:fd:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:00:69:29:89:54:C8:2D:5C:37:48:08:6B:49:D2:74:43:B6:79
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/60622D0C4D0D11EEA9D45584C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.38.0/24
Signature Algorithm: sha256WithRSAEncryption
91:21:38:83:13:ba:c7:a3:ec:f8:91:2a:c7:c7:66:ea:c3:da:
93:36:85:68:32:65:a2:d0:b4:47:2e:8c:6e:4a:f0:2a:a0:2e:
ca:1c:a3:de:5b:a7:70:6c:91:96:b6:d7:35:53:ac:cf:31:fc:
65:68:63:e9:97:3c:3a:61:e9:e0:a9:73:6c:24:0d:d2:b3:62:
8b:26:63:f3:0d:11:9b:cd:9b:7c:e3:62:2f:a2:79:60:1a:a0:
03:a9:6c:8b:ad:ff:53:b3:cf:f9:45:7b:d5:e2:b3:4b:03:d3:
ac:7a:08:e7:8f:c4:2e:1e:ad:61:07:5b:1b:b7:f7:39:3d:cb:
a7:f2:4f:4c:7a:a0:66:1b:6e:20:3a:53:53:db:5c:f8:90:3a:
93:4d:d2:e1:23:10:cd:f0:c8:eb:f1:78:89:68:80:e3:fe:79:
a8:4b:0a:73:24:93:6a:3c:ee:d7:66:c7:ff:41:4e:08:69:9d:
d1:af:db:1e:42:ed:22:91:74:6e:46:5f:c3:8e:9c:e7:3f:99:
13:a7:21:e1:1d:bf:aa:77:21:a4:f8:15:5d:74:11:18:1d:f9:
91:e6:e5:33:df:65:5d:44:ac:6b:bb:ad:91:e7:80:04:63:22:
73:cf:ff:92:f1:d4:cb:4e:76:6b:97:0d:52:c5:9b:84:c0:6b:
a5:dd:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 04:55:24 2023 by rpki-client on console-fra.rpki-client.org