Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/727C4558678B11ED8F22F91FC4F9AE02.roa
File: 727C4558678B11ED8F22F91FC4F9AE02.roa (raw, json)
Hash identifier: R0uvjHhdLgYajmDIGZTSGEons+q0zLPs/Ins6t/MpSc=
Subject key identifier: FF:D1:C0:0D:E6:2D:35:92:16:6C:B9:E9:63:31:AF:4D:BF:E2:C0:C7
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 014D
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/727C4558678B11ED8F22F91FC4F9AE02.roa
Signing time: Fri 18 Nov 2022 21:53:34 +0000
ROA not before: Fri 18 Nov 2022 21:53:34 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 40676
IP address blocks: 203.32.22.0/23 maxlen: 24
203.32.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Nov 18 21:53:34 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6377fede-d4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:d1:44:42:3f:ad:cb:f6:0f:98:85:c7:87:
1a:9f:fd:e2:8f:97:fc:92:a8:22:dc:92:dd:7e:fb:
07:46:04:9a:f8:8a:d5:33:3e:0a:5b:ca:d5:07:d6:
a9:b9:9c:09:e7:09:ea:d2:b6:e9:40:06:00:b2:00:
04:fa:48:e3:a9:1a:bd:6b:00:8f:aa:e5:84:71:ac:
7e:24:98:60:4f:81:b2:e7:9e:d0:73:47:cf:04:eb:
08:23:44:34:ef:8a:1d:9e:18:e9:c8:10:4c:64:0f:
5a:ab:d6:17:34:b3:41:b8:bd:63:a8:dc:4f:1f:58:
2b:57:d6:a9:87:09:33:f2:aa:03:13:49:1d:02:dc:
c4:78:ad:6e:66:7a:ff:02:4e:38:c4:bb:8e:3f:3d:
b3:19:d6:a3:5f:dc:d5:bf:f7:92:09:7f:71:dc:0f:
ea:67:3b:8b:de:83:d7:30:02:67:b6:e2:a3:88:e5:
e3:87:56:7e:02:37:30:52:99:db:52:0e:7b:0f:fd:
d5:2f:34:aa:eb:6e:8e:34:24:33:fa:d9:b6:57:b1:
9a:16:37:48:15:32:f4:5b:7c:14:98:8c:a8:35:cd:
26:87:7c:bd:90:5d:17:ca:31:8f:07:3a:6b:0c:00:
bb:dc:60:b4:ba:e4:4c:c9:e2:3f:8f:48:7a:27:97:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:C0:0D:E6:2D:35:92:16:6C:B9:E9:63:31:AF:4D:BF:E2:C0:C7
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/727C4558678B11ED8F22F91FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.22.0/23
203.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ea:97:6d:dc:b2:47:fd:a8:62:79:56:09:69:da:85:08:a9:
45:04:fd:c3:df:cc:74:64:5a:b4:4c:5d:92:d2:92:69:1e:d5:
05:51:66:87:a4:26:57:f0:4b:61:53:c6:2d:17:11:59:f7:ab:
08:69:f2:8a:91:11:9f:6c:a1:e8:1c:0c:8c:21:c7:0b:06:9f:
8a:10:ed:00:95:c9:00:fa:0e:28:95:7c:ca:3d:8e:41:7a:5a:
8e:ce:d1:77:74:0d:58:e0:bc:df:c8:b2:d8:53:ed:7b:ad:d2:
70:a4:cc:c2:3b:c6:6a:88:ad:1b:33:9c:96:db:8b:90:80:78:
af:5d:42:e9:33:da:49:ba:5b:19:23:c9:17:c3:e6:0b:00:4f:
f1:17:73:a1:29:fb:be:71:f3:ce:5e:aa:42:3b:9c:d9:4c:c9:
cd:f2:6e:28:cf:9f:b1:28:6e:81:91:a4:1d:84:bd:0f:92:35:
56:48:f6:68:f1:9f:40:2a:61:b5:36:17:8f:36:74:3e:bf:77:
49:89:f8:4d:1d:3f:a7:a4:4b:56:cf:d4:77:4a:33:fa:f3:78:
1b:c3:e6:27:ce:d3:6b:56:d4:56:1e:5f:c9:80:77:bb:ff:43:
ee:38:fa:a5:45:63:85:72:91:a7:a1:2c:73:8d:72:32:30:90:
ab:00:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org