Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F9133F58556111EE9721D080C4F9AE02.roa
File: F9133F58556111EE9721D080C4F9AE02.roa (raw, json)
Hash identifier: /q9ls31DRRPc9oVWbiOgdFyMqH0Q11Rl6g1VFoisFsI=
Subject key identifier: 98:26:92:80:84:01:95:D9:09:21:BE:68:5E:BB:1D:BA:F8:63:0A:79
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0266
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F9133F58556111EE9721D080C4F9AE02.roa
Signing time: Sun 17 Sep 2023 13:56:17 +0000
ROA not before: Sun 17 Sep 2023 13:56:17 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 198652
IP address blocks: 203.32.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Sep 17 13:56:17 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65070581-2546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:5b:e5:b7:58:e3:1b:b1:ee:73:df:2b:c7:
6d:7b:01:18:7a:ae:79:a4:6e:85:07:8f:48:dc:93:
d9:b4:06:6c:31:89:d3:53:b8:c6:14:f4:a6:ca:30:
bc:33:e7:dc:89:b3:5e:48:f9:52:22:87:db:f4:a9:
45:4f:63:cc:93:95:4d:7b:eb:22:ed:d2:96:6a:04:
04:ed:f9:7d:57:3c:62:8d:08:2e:11:55:93:99:5d:
fa:7b:91:c4:9c:12:bf:ce:dd:e8:85:61:39:ce:1b:
6b:07:3b:0f:dc:d5:8d:88:e1:10:cb:58:46:64:43:
fc:2b:3b:e2:55:69:a0:7c:d7:b2:af:3b:89:93:26:
66:11:ad:2d:e4:30:46:59:50:8d:93:82:85:85:b6:
ea:2e:5a:cc:36:89:05:e0:40:3e:de:74:34:b9:34:
ef:9a:48:5b:7a:84:54:d2:7f:9e:89:d2:6c:f7:da:
3f:25:60:58:4e:48:9c:96:18:d8:6a:d0:85:e2:d4:
d5:84:16:04:2a:0a:56:f4:8a:bd:c5:e4:b9:37:9d:
80:56:35:f8:23:96:6d:80:c3:af:de:84:99:e6:6f:
a2:00:1d:33:d6:b0:69:75:37:6d:58:08:7e:f5:06:
91:2c:66:d3:0b:01:e1:a8:d2:fa:eb:ca:f8:29:7a:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:92:80:84:01:95:D9:09:21:BE:68:5E:BB:1D:BA:F8:63:0A:79
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F9133F58556111EE9721D080C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.23.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2c:d3:23:98:ce:bc:22:6c:fb:3f:16:07:16:2d:60:f0:1c:
d2:1b:c0:56:ef:5e:14:29:7f:ce:55:65:59:45:1d:82:83:e6:
5a:39:24:b1:71:44:42:57:97:87:9b:b9:72:69:ad:a2:eb:37:
ab:a6:f8:c8:49:fe:df:cb:bc:e7:45:b4:57:af:8e:c3:d7:80:
44:09:5c:36:49:ac:82:69:30:29:b3:0f:85:c5:f8:2c:9b:2f:
ce:4f:3f:a7:25:d3:a6:b9:e0:9f:cd:4c:db:d8:de:aa:e5:63:
c5:50:1f:9d:89:ba:66:b9:64:83:58:92:f5:1d:15:50:e8:ed:
85:71:db:e9:7b:58:ad:33:98:16:90:92:74:9a:af:33:98:3a:
75:65:85:24:d5:9b:14:fa:79:ac:4b:b1:cb:82:99:3d:81:75:
35:27:38:76:d6:f1:ee:7b:61:f7:ff:e7:8e:d1:2e:a4:45:a6:
e4:92:37:25:f5:ac:d4:c9:cf:13:a5:e9:c2:ca:00:e8:4b:1f:
d5:c1:c8:54:66:7a:e9:a0:cb:af:c1:4c:91:79:8d:74:e9:98:
52:50:00:06:93:83:89:f0:66:d6:c0:60:01:06:12:9b:18:65:
aa:de:43:41:33:34:3b:80:56:6b:d2:a5:d6:7c:b8:16:b4:89:
bb:7c:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 23:07:44 2023 by rpki-client on console-ams.rpki-client.org