Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/BCBADE90DD5C11EC856C507AC4F9AE02.roa
File: BCBADE90DD5C11EC856C507AC4F9AE02.roa (raw, json)
Hash identifier: QfdjmLO4UjwBTtv9FZD/yDNhE6YaN+7sRbyFyab5Hzk=
Subject key identifier: 0E:5F:D9:98:00:BD:85:9B:55:2E:3E:14:58:8E:6B:15:E3:82:2E:25
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 02
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/BCBADE90DD5C11EC856C507AC4F9AE02.roa
Signing time: Fri 27 May 2022 01:31:32 +0000
ROA not before: Fri 27 May 2022 01:31:32 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.7.0/24 maxlen: 24
203.32.21.0/24 maxlen: 24
203.32.22.0/24 maxlen: 24
203.32.23.0/24 maxlen: 24
203.32.26.0/24 maxlen: 24
203.32.30.0/24 maxlen: 24
203.32.31.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
203.32.38.0/24 maxlen: 24
203.32.40.0/24 maxlen: 24
203.32.41.0/24 maxlen: 24
203.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: May 27 01:31:32 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=629029f3-210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:a5:ea:5e:a7:45:0c:f0:77:5e:86:81:ca:
cf:7c:30:45:7e:07:61:83:74:ef:9e:3a:33:6b:3d:
56:3b:cc:4f:a2:8f:6e:48:48:ce:b2:31:a2:e0:6b:
6b:cd:37:4f:ce:c3:4c:f4:ac:e5:b8:8f:43:25:17:
00:33:c2:88:71:52:e6:28:f4:b3:b7:d8:c1:e0:a7:
9b:f1:0a:6f:c5:50:3a:c8:49:6e:af:e2:8b:48:ea:
79:af:ef:85:32:59:2b:09:ea:bd:dd:ba:92:55:c6:
0d:4b:78:59:55:82:a5:e4:3d:32:51:2b:dd:10:5e:
e1:1e:4c:c0:66:4c:2a:70:66:3d:f8:1c:2a:3e:14:
c8:6a:50:75:e7:f7:38:f3:ad:33:6e:15:ff:ce:71:
30:ff:ad:9e:ba:b7:42:16:16:63:e1:17:04:ea:69:
ce:41:6c:88:37:fa:d5:0c:e0:f1:e1:12:2f:09:a8:
82:19:ee:36:99:81:1c:63:35:7a:46:01:72:91:0b:
4e:23:e9:fb:e3:fa:5c:3b:50:a7:9f:b0:95:45:55:
33:b0:00:f6:8d:0c:bf:fc:74:88:cb:2d:79:ac:ef:
35:a9:79:a8:c6:a9:41:ec:92:8c:e4:d7:db:9a:db:
93:d5:5b:c6:5c:c6:d7:a1:82:a8:07:67:7f:a5:00:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:D9:98:00:BD:85:9B:55:2E:3E:14:58:8E:6B:15:E3:82:2E:25
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/BCBADE90DD5C11EC856C507AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.7.0/24
203.32.21.0-203.32.23.255
203.32.26.0/24
203.32.30.0-203.32.32.255
203.32.38.0/24
203.32.40.0/23
203.34.26.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b8:90:ac:59:6f:1b:5e:d4:ee:8b:42:c6:6d:51:81:f1:89:
81:18:66:3c:c9:4e:da:ef:e1:50:3c:6d:eb:0c:49:61:ae:2f:
39:99:ec:a4:3c:ff:b6:e0:95:a0:78:1a:56:6e:0f:54:61:a7:
06:47:60:52:ee:b7:fa:bf:45:6c:ca:77:d3:5b:c1:5a:a0:d5:
63:05:6d:16:12:ae:1a:14:6c:b3:a4:38:4a:4c:f4:59:2e:59:
26:64:8f:39:f7:aa:ca:c4:11:b3:ff:11:4d:23:08:ab:36:87:
5e:5d:be:5b:c2:eb:1f:f3:2d:84:cd:40:f4:ab:1c:b9:0b:60:
66:7e:6e:7c:ec:70:b5:81:43:9b:ad:6a:41:b8:62:93:5b:4b:
0b:0d:f0:cf:2a:54:c3:d2:8f:4b:ae:95:93:96:d8:d8:d5:dc:
eb:5c:56:05:d2:b2:b0:d0:ae:11:7f:2e:11:ea:bb:ed:eb:7b:
9e:96:eb:73:6c:19:e2:ff:4b:01:8e:c5:3d:66:4b:ff:88:c5:
ad:f5:b2:39:77:e3:cd:91:27:67:f8:4a:aa:ce:06:f7:28:7d:
c9:a4:d6:44:39:96:2b:d7:8d:c6:50:0f:7f:1a:a2:4e:e1:72:
52:7b:84:88:55:bc:2e:6c:28:70:d8:67:14:3b:fe:cd:a7:ec:
34:18:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org