Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/05B91648AE5411ED906B6278C4F9AE02.roa
File: 05B91648AE5411ED906B6278C4F9AE02.roa (raw, json)
Hash identifier: cdYnYpaoHOz3nLz+G1a9I4OpQDvkiOI8csYzVRTSBO0=
Subject key identifier: 51:13:F6:16:25:8D:FC:5F:6E:68:63:AC:F3:B4:4C:42:6C:62:BD:49
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 98
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/05B91648AE5411ED906B6278C4F9AE02.roa
Signing time: Fri 14 Apr 2023 03:05:14 +0000
ROA not before: Fri 14 Apr 2023 03:05:14 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 211585
IP address blocks: 218.33.72.0/22 maxlen: 24
218.33.76.0/22 maxlen: 24
218.33.120.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Apr 14 03:05:14 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6438c2ea-3c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:82:9a:ba:1f:b3:48:8f:96:fa:63:78:92:
5b:1e:b1:f4:bb:4f:40:53:76:17:14:03:0a:c9:45:
ba:8a:ff:33:f2:6b:67:1b:e1:71:3e:fc:88:f1:d4:
39:cb:66:aa:4d:f6:78:a2:ca:a2:88:ce:82:56:fc:
bc:2b:d7:32:49:46:4e:fb:98:d6:cb:5f:82:67:f7:
5a:4a:0d:69:96:6b:ba:ee:46:f1:57:d8:41:07:55:
ab:e9:a8:61:6b:d2:ef:06:82:8b:e1:46:d1:03:fa:
b9:ac:db:40:77:f7:93:46:20:d6:b4:55:fe:1b:e4:
f0:ff:7d:4c:02:59:10:f7:c9:0a:a8:fd:0b:23:ad:
ca:6c:de:1a:0c:7c:63:66:d5:0a:16:d3:be:ff:c6:
58:3d:16:34:d4:9a:7a:f5:11:3d:c1:ec:35:69:53:
3c:2a:92:f7:b3:27:08:28:d5:51:94:0e:bd:26:bc:
0c:8a:28:43:f4:c1:1f:dd:ca:34:ee:64:a0:67:f1:
51:ea:fd:4e:04:07:8d:60:10:a2:61:71:9c:73:ac:
57:1b:18:66:d4:c1:68:d2:28:a6:80:ba:b1:7b:4b:
e9:4b:60:ac:52:b2:a0:05:e0:9d:ba:06:58:88:56:
be:ab:4f:21:7d:a1:2b:1f:c3:c4:1b:2d:d6:08:db:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:F6:16:25:8D:FC:5F:6E:68:63:AC:F3:B4:4C:42:6C:62:BD:49
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/05B91648AE5411ED906B6278C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.72.0/21
218.33.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f3:65:38:83:c2:51:b5:27:31:48:4c:7f:f8:d2:08:8f:03:
d2:a6:2c:dc:3a:c8:c5:6f:21:29:b1:a0:2e:c8:6e:88:d1:2f:
dc:8f:5b:c1:53:4e:ef:c7:bb:10:b4:d6:59:c1:69:3f:d8:7b:
37:23:73:61:ff:c2:f4:5c:a2:85:46:bf:87:00:86:53:87:db:
fe:5f:39:86:bb:66:45:5c:ed:96:c3:84:30:dd:62:18:5e:a6:
b6:0b:59:65:71:e2:d9:34:49:ec:eb:61:5e:1b:d2:1e:c0:e3:
36:f4:65:9d:64:92:f6:c0:40:f6:b6:22:d3:57:96:0f:4d:03:
12:9f:bd:e4:8c:1b:fa:9e:18:48:75:69:65:97:25:be:4a:64:
ea:2c:2e:a0:be:2b:e5:76:3b:cd:8f:55:e7:d8:a8:4e:ab:48:
10:df:4a:d8:12:f6:01:f8:00:6b:df:db:eb:cb:cf:ac:10:41:
41:c9:aa:09:ce:c8:c1:8d:27:1e:2e:93:57:b6:f4:f2:d9:87:
ec:dd:b3:07:ec:f3:1e:ea:eb:55:9c:93:36:5b:ff:e0:1d:cc:
c4:c8:3e:9c:90:d3:52:e2:6f:d8:84:e6:94:ec:6a:ce:3f:6a:
af:2c:33:70:50:d8:f4:d1:14:30:81:7a:d1:6a:54:27:6e:fe:
81:69:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org