Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/800A47AE78B211EE97EE6055C4F9AE02.roa
File: 800A47AE78B211EE97EE6055C4F9AE02.roa (raw, json)
Hash identifier: v7jZR41kw27xMky7GSFXgd71IHdEjaWkPguZewU4OtE=
Subject key identifier: 16:8C:E1:2E:7E:9E:84:F9:45:8C:0F:84:67:BB:D2:BF:7C:79:4E:E1
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 02B0
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/800A47AE78B211EE97EE6055C4F9AE02.roa
Signing time: Wed 01 Nov 2023 12:30:54 +0000
ROA not before: Wed 01 Nov 2023 12:30:54 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 40676
IP address blocks: 203.32.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Nov 1 12:30:54 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=654244fe-2a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:84:1f:ca:93:1a:63:80:ef:f0:75:39:5e:
9e:24:a2:8d:48:fb:cc:47:7e:a1:b8:95:35:1d:db:
2e:98:1c:ef:ff:35:a7:1c:60:70:f8:de:ca:a1:8c:
bb:e0:3a:cd:2b:a5:28:36:f1:d0:9f:0c:70:95:eb:
fc:09:29:0e:9f:e1:89:05:53:ca:1d:0e:94:1a:17:
a0:42:c9:76:b1:4a:f6:7f:22:92:6c:b1:ac:8a:af:
8b:a1:2e:88:ae:05:a6:9b:4e:23:35:cd:6c:f8:76:
67:1b:17:5e:ad:31:2e:cc:d9:88:ca:c5:d9:fa:6e:
f2:9a:ca:5e:f7:c3:30:6e:f7:2a:3a:a0:57:b6:a8:
70:2d:97:3b:b5:c4:9d:20:1f:46:cf:94:fa:56:c5:
1f:68:7d:7b:d9:96:34:63:e7:b4:a6:02:d5:fd:ba:
b6:56:3b:84:2d:b5:92:9f:d8:7e:4d:e1:65:82:92:
8b:72:42:09:9d:17:a6:4c:b3:a7:bb:e3:3b:65:eb:
16:2e:25:e5:e9:9c:99:e1:70:a3:67:84:0b:19:b2:
1d:39:4f:79:8a:71:96:3e:e2:9e:6a:54:56:b0:a0:
80:1c:81:96:2a:f5:f6:85:3f:7c:b9:b7:7f:cb:bb:
eb:46:7c:3e:1b:7b:c4:ab:8c:f0:90:15:0f:a7:09:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:E1:2E:7E:9E:84:F9:45:8C:0F:84:67:BB:D2:BF:7C:79:4E:E1
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/800A47AE78B211EE97EE6055C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6a:a0:85:f8:33:1f:00:64:1b:5f:92:fe:de:59:01:e5:7f:
6e:5e:78:e5:6a:56:78:6b:16:f2:40:7a:90:40:4f:8d:6e:23:
3d:e8:3d:eb:b6:92:5f:73:12:53:d8:fc:0d:23:9c:a3:07:2d:
5c:46:e3:49:9f:b0:e0:96:3a:63:26:f1:90:9d:9f:4b:42:11:
89:80:3b:be:ea:4c:ff:e5:17:af:0f:95:b3:1e:47:fc:b8:03:
2f:14:21:2a:14:03:85:04:76:46:db:83:47:b7:49:85:ad:df:
78:86:a4:17:2d:1f:67:f3:70:34:e2:5f:c3:27:b8:f0:ac:fd:
79:1f:6c:1f:d3:e4:c9:f2:47:9a:a6:c3:5a:a7:0f:fc:3d:79:
b0:01:3f:68:cf:23:70:a6:d5:d5:b8:ba:01:06:fc:69:ea:f0:
83:05:dd:62:fb:fd:1b:0b:68:7b:ca:46:af:a4:24:37:10:4c:
82:67:15:7f:f6:fc:db:2b:63:b2:f2:2a:2d:1b:e6:04:e1:c9:
1b:3b:bb:43:03:38:8f:f9:ad:67:df:9e:e7:d0:ac:ab:1c:dd:
0b:44:73:e7:57:44:30:32:98:5f:2d:ae:38:11:41:ee:d7:0d:
2f:4e:08:b4:2f:e6:bf:a7:f6:98:27:d6:1b:cb:72:e9:b8:fe:
cc:22:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 22:50:22 2023 by rpki-client on console-ams.rpki-client.org