Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/9D00ED34B69511ED9F022F81C4F9AE02.roa
File: 9D00ED34B69511ED9F022F81C4F9AE02.roa (raw, json)
Hash identifier: 96ybfdRRRCV4sSHQ7CUsNGiXHSj8OY7Esf0E7PNaSb4=
Subject key identifier: 31:12:D4:B6:A1:61:BB:3B:EE:EC:0F:80:81:89:78:73:B4:9A:73:7E
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 01A9
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/9D00ED34B69511ED9F022F81C4F9AE02.roa
Signing time: Mon 27 Feb 2023 11:55:22 +0000
ROA not before: Mon 27 Feb 2023 11:55:22 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 43260
IP address blocks: 203.32.21.0/24 maxlen: 24
203.32.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Feb 27 11:55:22 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63fc9a2a-656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:a3:1f:25:c6:27:51:33:3e:09:09:8e:0f:
b6:55:00:c3:2e:0c:8e:38:f4:d3:27:ed:a9:39:b4:
df:b0:aa:ec:78:3f:08:97:ec:af:1d:9c:57:86:33:
d8:98:ce:ae:22:68:92:72:10:47:9c:41:43:d9:6d:
c7:ec:fc:b8:71:40:53:e5:fd:07:6c:91:76:bb:d1:
b4:82:af:12:57:43:28:22:57:cb:8c:db:7d:35:ec:
5a:b2:3d:f0:0d:7b:e1:04:cf:73:9c:87:0c:d9:21:
87:2c:fb:7c:92:f5:0e:c5:95:95:0b:a3:b9:21:80:
81:6f:09:3b:22:32:d8:4d:77:99:4f:de:39:7a:5d:
6f:6e:47:ca:96:4e:b6:f5:bc:4f:60:1d:bf:40:71:
b3:63:8f:89:82:c1:04:7c:32:a0:5f:62:f3:65:a3:
37:b6:88:87:a3:cd:15:7b:b5:80:73:a5:3c:7f:d5:
da:d7:4d:f6:0e:f8:de:04:f2:bb:e7:6d:b1:d2:1c:
a8:b4:17:23:c3:a9:57:a7:ea:6a:fb:41:92:65:fe:
d3:a1:ff:83:e1:78:75:59:e3:8f:b2:9b:19:ae:a2:
98:55:84:51:1c:c5:13:6b:e4:cf:69:42:38:16:80:
f1:a2:eb:69:bc:64:47:f1:92:d6:c2:af:3e:01:f0:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:D4:B6:A1:61:BB:3B:EE:EC:0F:80:81:89:78:73:B4:9A:73:7E
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/9D00ED34B69511ED9F022F81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.21.0/24
203.32.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:91:02:e2:68:39:d0:0d:a1:48:68:a1:b7:e0:f7:cc:b7:
be:71:b5:34:fe:01:24:89:f8:90:d0:bf:82:6a:b4:cc:f2:de:
6f:00:10:85:16:22:b7:be:38:7a:92:69:34:d0:3a:d2:51:76:
6a:39:ad:27:68:be:5a:45:4b:bb:c3:2e:0c:1c:51:7c:5a:7a:
76:c5:1b:b9:d4:f7:07:bd:51:ac:f2:e2:03:86:5e:7f:cc:4b:
11:6c:9b:84:a3:74:76:a4:36:c0:ee:2b:58:f5:c0:09:5d:e5:
16:d8:01:9e:55:7d:13:e7:d0:4b:99:f6:c5:19:77:a6:53:86:
08:ee:0f:f3:32:b7:31:5f:75:e0:49:b1:fa:80:63:ae:8e:4b:
97:f4:6d:56:b0:3e:62:97:5f:4b:d9:82:36:1e:b8:b7:d7:74:
99:bd:c7:bf:55:f1:26:eb:3c:8c:99:ff:c9:63:87:78:3f:0e:
e1:98:25:f5:57:29:81:4c:80:cf:8d:53:1f:d5:90:ac:aa:06:
d7:3a:0e:12:fd:6d:1f:d9:f2:55:60:c3:3e:4a:39:a1:93:a8:
07:8e:32:51:d9:d8:03:86:00:0a:b6:f5:4b:32:16:5e:2a:f9:
76:67:74:eb:ee:ec:b8:b5:75:c5:1e:7a:9f:c9:c0:24:fb:58:
0e:9c:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org