Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/CA67DBF4F0E111ECAE21CF84C4F9AE02.roa
File: CA67DBF4F0E111ECAE21CF84C4F9AE02.roa (raw, json)
Hash identifier: +fki+M3xQD89XsvZzO3iwQC8BdMRljZPdjtr5J1n7I4=
Subject key identifier: B7:F9:6F:26:BF:64:E3:91:6C:8E:DE:76:B8:38:7A:11:F1:AD:A6:38
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 8E
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/CA67DBF4F0E111ECAE21CF84C4F9AE02.roa
Signing time: Fri 29 Jul 2022 06:33:05 +0000
ROA not before: Fri 29 Jul 2022 06:33:05 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.21.0/24 maxlen: 24
203.32.22.0/23 maxlen: 23
203.32.22.0/24 maxlen: 24
203.32.23.0/24 maxlen: 24
203.32.25.0/24 maxlen: 24
203.32.26.0/24 maxlen: 24
203.32.28.0/24 maxlen: 24
203.32.30.0/23 maxlen: 23
203.32.30.0/24 maxlen: 24
203.32.31.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
203.32.38.0/24 maxlen: 24
203.32.40.0/23 maxlen: 23
203.32.40.0/24 maxlen: 24
203.32.41.0/24 maxlen: 24
203.34.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 29 06:33:05 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62e37f21-3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:05:cb:ea:41:9e:59:27:07:0f:10:20:49:
c8:24:19:94:e7:83:09:6b:ea:c3:8a:7f:88:c6:7b:
4b:ae:df:0c:7e:db:a6:5d:0c:72:6b:3e:e8:69:5c:
08:a4:6c:95:2e:6f:b8:3c:8c:6b:1d:25:70:1e:c1:
04:e6:47:c9:4a:18:27:4b:93:92:53:21:06:56:42:
c5:b3:5d:b9:5d:32:23:cc:ac:e5:db:5d:97:af:da:
8a:6e:ae:7d:3d:d2:2d:0f:1d:f3:27:f7:0a:ef:46:
d0:2d:b6:79:14:bf:25:66:50:ec:4c:65:28:f0:50:
8f:8b:e7:0c:16:9e:4b:7d:c6:b1:6e:9d:5d:ff:b5:
32:03:bc:0f:bc:01:3a:4b:06:67:57:b6:a0:9b:29:
9d:cc:16:1f:cd:65:a0:db:7f:24:fd:81:d8:20:37:
08:6e:5f:3c:87:bf:d1:24:ae:3b:fc:04:e6:e9:53:
db:26:ef:d4:b8:1c:b3:42:4e:5a:ab:8a:a9:7a:e6:
66:24:71:f0:50:23:af:d2:ca:43:da:bb:35:d5:2b:
33:97:11:4f:fc:7b:39:ae:ec:79:76:be:04:a0:5a:
41:27:55:ed:ca:55:5a:07:87:d3:54:9e:a2:b9:04:
a7:dc:c0:5f:3f:ba:9c:66:90:89:b2:c5:85:54:d1:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:6F:26:BF:64:E3:91:6C:8E:DE:76:B8:38:7A:11:F1:AD:A6:38
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/CA67DBF4F0E111ECAE21CF84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.21.0-203.32.23.255
203.32.25.0-203.32.26.255
203.32.28.0/24
203.32.30.0-203.32.32.255
203.32.38.0/24
203.32.40.0/23
203.34.26.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:68:10:76:3f:2d:e3:43:04:4d:b1:d0:4a:23:c7:c5:2f:
45:43:53:b5:70:91:58:d2:5e:f4:ba:9c:ab:f7:5e:c6:27:b6:
f7:d9:ac:04:a1:8d:29:dc:8f:28:4c:da:fe:4f:93:b3:b3:79:
27:d6:5f:e5:f6:18:eb:b4:a2:2e:a3:11:f7:60:78:d7:71:f9:
fe:85:a6:13:8a:7c:79:04:8e:61:9e:87:1a:d0:b5:05:2a:4c:
4b:e6:d8:7f:8d:b1:9d:f7:e6:df:f0:c4:66:b6:1f:23:d8:e0:
52:bb:7c:3d:ff:84:28:d8:da:4d:43:21:2d:a5:b0:ff:64:3e:
77:ca:06:39:85:74:46:1b:2c:24:4c:cd:d5:fc:61:5b:cb:8b:
e4:45:5d:16:bb:87:6d:dc:22:a6:75:61:72:d2:67:b2:6e:e7:
2a:fc:ba:a0:58:99:98:41:28:41:cd:15:97:e5:55:5a:68:90:
46:42:1f:73:1c:28:35:e2:86:9d:34:89:a6:89:4d:9e:f9:f0:
f0:7b:c3:4b:43:4f:22:12:e1:e8:7f:b1:31:85:59:14:4c:2f:
14:db:86:3b:a8:a0:27:02:0a:22:22:d5:ac:c8:40:f5:19:a6:
b4:48:7e:9a:e3:6d:f1:82:d1:17:fd:4f:7d:6d:44:7e:8f:35:
e1:7e:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org