Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/7A2E7A94A3AB11ED9D61DF85C4F9AE02.roa
File: 7A2E7A94A3AB11ED9D61DF85C4F9AE02.roa (raw, json)
Hash identifier: 4Ys1h7Cczuxwvf0VAMwfM9GSaO4HgwLcQvmFjNFBomU=
Subject key identifier: 24:DB:C4:8E:8A:46:2F:DD:29:0E:94:53:2E:01:63:79:13:5A:DA:01
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0191
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/7A2E7A94A3AB11ED9D61DF85C4F9AE02.roa
Signing time: Fri 03 Feb 2023 10:14:01 +0000
ROA not before: Fri 03 Feb 2023 10:14:01 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.26.0/24 maxlen: 24
203.32.30.0/23 maxlen: 23
203.32.30.0/24 maxlen: 24
203.32.31.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Feb 3 10:14:01 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63dcde68-7333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:b6:c2:82:5d:c0:b5:4b:98:5c:56:48:93:
54:4a:cc:60:ea:3f:d0:e6:52:f1:eb:d5:a2:ff:a1:
ae:28:12:85:c1:0f:8b:1b:86:95:fb:43:04:a0:85:
db:a3:cb:88:1a:5a:c5:b5:3b:8a:a1:9b:56:6c:e7:
6d:1a:b4:a6:1c:06:f8:2b:ba:bd:c7:87:13:dc:5a:
f7:61:b9:82:4a:6a:83:76:66:bd:eb:e9:15:2d:37:
5f:8b:42:44:d3:d2:d8:a5:c7:04:0e:cd:97:01:ef:
24:b7:a3:ae:94:64:d5:90:af:aa:50:45:5e:85:53:
ec:5f:85:a8:b4:13:98:19:16:f1:4c:1f:a8:9f:d6:
49:79:54:02:06:79:00:6c:6e:3f:5e:f5:9a:02:c0:
b1:50:01:6a:b5:70:2f:98:39:76:83:76:ba:7e:bf:
35:8b:69:a3:91:14:0d:59:d9:91:f1:6d:a6:68:14:
60:d8:a3:2d:90:8e:69:6b:5f:0d:22:77:dc:b1:b6:
b3:b7:60:a2:fe:ef:f8:a5:16:57:33:a1:b8:a4:1b:
ca:df:5c:0d:bd:81:0f:2b:51:58:e3:a6:81:1c:9b:
1e:42:57:b9:42:fa:88:47:ef:73:a0:6b:80:83:fe:
34:79:a0:eb:02:72:ff:70:c9:49:4a:8b:2f:c1:57:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:C4:8E:8A:46:2F:DD:29:0E:94:53:2E:01:63:79:13:5A:DA:01
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/7A2E7A94A3AB11ED9D61DF85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.26.0/24
203.32.30.0-203.32.32.255
Signature Algorithm: sha256WithRSAEncryption
22:c3:5e:0a:54:c1:9e:b2:35:16:d8:9d:ee:dd:e3:b0:69:be:
2d:9e:83:46:f6:10:30:7d:d9:22:89:ca:b8:90:4c:66:a0:dc:
e7:b3:de:4d:f3:fd:1d:74:c4:6c:e8:02:a0:4c:2e:1d:47:f4:
49:bd:d0:02:cd:a0:ce:85:48:7b:e4:9e:48:41:45:58:3a:5d:
4a:78:d2:e7:98:95:64:6f:9a:18:26:42:7a:89:9c:6e:74:b4:
77:8f:a8:3b:a6:c7:b5:3b:65:51:a2:8f:b8:10:e1:33:61:c3:
c7:92:0d:2b:f8:a9:dd:2d:c1:32:df:40:32:09:6f:42:9b:00:
49:a9:2d:24:e6:35:cb:03:15:cf:20:a2:66:9a:4c:af:f2:be:
23:8f:1c:57:63:af:16:f4:60:a7:80:c3:ab:9f:04:5c:e0:0d:
be:db:af:42:39:d3:de:28:c5:aa:32:da:de:e4:76:5e:f4:71:
57:9b:d1:29:cf:fd:ad:36:f0:7e:f1:36:16:a6:0d:00:bd:0d:
de:7a:20:fd:fb:17:36:da:fd:16:0a:ed:b7:ee:77:de:54:fa:
c2:44:3f:30:48:72:03:5b:7b:19:de:bf:83:d7:3b:01:3e:06:
5e:fa:97:56:6c:92:8b:b8:56:c1:b8:c5:35:88:7b:bd:7d:ff:
df:62:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org