Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/08B8A31A7B4E11EDBDEC8A7BC4F9AE02.roa
File: 08B8A31A7B4E11EDBDEC8A7BC4F9AE02.roa (raw, json)
Hash identifier: TT56707Li2zh36F2ZTePE+OAQpbB0TmzwZAFxGCR5Jc=
Subject key identifier: 5B:CD:06:DE:B7:1C:42:AB:6B:69:9F:C2:47:AA:47:1F:93:B2:99:E6
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 44
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/08B8A31A7B4E11EDBDEC8A7BC4F9AE02.roa
Signing time: Wed 14 Dec 2022 01:24:21 +0000
ROA not before: Wed 14 Dec 2022 01:24:21 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 49999
IP address blocks: 218.33.88.0/22 maxlen: 24
218.33.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Dec 14 01:24:21 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=639925c4-4bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:13:84:94:b2:02:70:85:ab:ca:bd:d1:1d:
a5:d1:9b:eb:a4:58:f2:46:9e:c4:a4:63:24:b1:95:
83:c4:5b:4d:a2:9b:27:19:34:7e:bc:15:55:56:2e:
85:3c:25:70:61:ec:3e:bc:bb:de:02:7a:34:c6:af:
85:30:8f:0f:ba:c6:64:0d:af:6f:34:5a:cd:56:58:
4c:47:fd:3d:a0:93:00:36:07:ea:c8:ba:ab:21:77:
89:5d:78:d3:e0:15:76:4f:20:93:29:9d:d6:28:ec:
d3:93:ef:3b:73:52:2b:48:38:f9:61:75:d7:b8:ab:
7a:c3:b5:7e:e7:30:17:11:f6:48:1a:bb:aa:af:22:
a7:40:32:65:37:f6:0a:a7:c3:7c:f9:1b:97:73:20:
ff:7b:3a:e9:ff:dc:56:9b:b0:95:82:f2:25:f3:4a:
13:a5:fe:0c:5a:c1:f2:b1:14:55:a4:32:36:97:2d:
c5:f8:bb:91:43:47:e0:22:7c:b3:a5:1b:60:2c:d2:
f9:3f:18:42:7d:8c:1a:a3:54:ff:31:67:40:0e:bc:
dc:fd:7d:21:bd:e1:33:db:a3:92:9f:ab:be:ba:89:
a2:e7:40:1c:14:f1:54:1e:7a:a0:c9:38:a4:88:62:
5b:d8:56:a4:46:bf:82:83:a6:34:0d:f5:7f:4c:98:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CD:06:DE:B7:1C:42:AB:6B:69:9F:C2:47:AA:47:1F:93:B2:99:E6
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/08B8A31A7B4E11EDBDEC8A7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.88.0/22
218.33.112.0/22
Signature Algorithm: sha256WithRSAEncryption
07:54:48:af:78:f9:08:16:8e:7b:58:6c:59:89:60:d1:f3:90:
53:68:cc:a8:a8:79:55:3d:29:24:f8:3c:fd:c9:c0:91:15:6b:
88:1b:8b:00:37:c5:3c:a0:ec:45:b6:57:a9:07:a2:50:d7:30:
28:a5:11:57:16:bd:ea:81:f3:31:01:ab:17:a3:e2:43:89:70:
d7:6e:4a:92:30:bd:0b:4f:2d:40:e4:90:d2:40:85:26:6e:62:
86:f3:23:92:c6:e7:18:23:1f:b6:08:66:8e:30:cf:5a:ce:e0:
9d:df:6a:f0:09:d1:19:bb:34:32:e6:49:41:9d:fe:48:8d:20:
b3:05:3e:43:5c:c7:62:7d:ef:af:f1:dd:1b:18:70:fe:5d:f3:
1c:1f:b8:91:39:e4:1f:ce:fc:a4:cf:ca:b7:ee:91:f3:a4:d6:
65:02:e1:52:4e:f6:86:e5:39:cf:0a:38:f9:62:51:98:ba:c8:
30:be:54:f5:97:fc:dc:ee:7e:a4:5f:18:fc:c9:4a:95:ec:81:
53:f4:44:c2:a3:fe:57:4a:1f:95:a5:e9:75:66:c5:c4:cc:51:
68:38:21:13:2e:d9:34:c6:82:6c:1d:06:64:2a:14:5a:e8:53:
5a:e3:80:12:7a:87:47:be:a5:d5:75:bb:18:50:7c:c2:96:98:
7a:19:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org