Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/574C50C2D46111EEA07A4568C4F9AE02.roa
File: 574C50C2D46111EEA07A4568C4F9AE02.roa (raw, json)
Hash identifier: yAg/Axjbi58irXuozneFKa6Pv1ujK2zAVJ31mXGoztk=
Subject key identifier: 78:A3:DC:15:7B:85:B0:6B:29:94:94:D8:0F:38:43:FE:7B:2B:4A:19
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0170
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/574C50C2D46111EEA07A4568C4F9AE02.roa
Signing time: Mon 26 Feb 2024 04:41:44 +0000
ROA not before: Mon 26 Feb 2024 04:41:43 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 134143
IP address blocks: 218.33.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jun 2024 03:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Feb 26 04:41:43 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65dc1687-19b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:ff:2b:d3:9d:64:61:36:86:85:7d:6f:32:
52:2b:81:ad:e2:e0:c4:a6:91:9b:3f:f2:d6:d7:93:
28:ae:a2:e2:6d:44:1e:34:6b:47:4d:80:bf:4c:ba:
0e:98:97:e2:20:ab:0f:30:2b:54:7a:20:d6:65:a1:
60:7e:2e:82:99:e9:74:12:2c:7e:92:23:28:26:d7:
ec:18:03:23:12:2a:05:09:9e:98:fb:3f:e5:ba:76:
da:9e:5a:1d:5c:57:bf:3f:8c:69:ec:fd:fd:1f:9b:
66:f7:a3:97:14:f0:a4:43:8a:6e:ef:5d:92:f9:43:
3d:53:44:51:4f:b8:d0:0e:d7:5e:b7:d4:70:5d:2e:
70:89:9f:e6:78:15:64:4a:69:2d:88:47:cf:d6:53:
cc:65:e9:8f:ac:14:b6:0d:77:7f:fe:a2:ca:aa:0f:
b4:dc:c9:88:db:e1:dd:f8:cd:65:40:1c:bd:d4:5e:
1d:3a:00:8f:ad:f8:62:7c:a9:68:bb:21:25:ee:4d:
84:d4:bf:8a:f0:bc:1a:08:6a:09:98:e0:8a:a2:f7:
1d:b2:b9:b3:65:85:82:6c:7e:32:07:ad:4a:bc:1e:
16:38:8c:03:1d:01:79:1c:dc:af:8e:47:59:4c:6a:
02:57:fc:3a:22:39:9a:1a:35:25:60:12:06:bf:e5:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:DC:15:7B:85:B0:6B:29:94:94:D8:0F:38:43:FE:7B:2B:4A:19
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/574C50C2D46111EEA07A4568C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.64.0/20
Signature Algorithm: sha256WithRSAEncryption
34:86:92:5f:8f:5c:13:bf:fb:2b:73:81:b4:8a:1b:19:76:21:
9e:59:8e:83:d4:91:07:dc:b5:03:21:2a:c3:87:69:c1:3b:5c:
d2:15:10:38:dd:62:9c:4e:d2:82:98:73:1d:27:3b:a7:86:23:
66:20:51:a3:07:68:ff:5c:5a:17:18:b1:28:a7:c0:e1:1a:d5:
5e:7e:1c:e4:d3:f6:41:f3:4b:a6:f0:cf:b0:de:9d:da:42:a0:
12:05:34:28:62:c9:05:ca:27:a1:0f:d3:03:20:ce:d9:55:78:
a6:da:2c:e7:4d:58:92:21:b4:57:21:15:f5:df:74:e9:32:a7:
00:15:97:eb:c4:d8:32:a2:31:50:3d:12:44:61:51:b7:a9:4e:
17:24:78:ea:33:c4:88:66:1d:ce:b2:96:a0:44:a6:92:26:2e:
33:75:2a:2f:c1:ce:1a:b3:a6:98:10:02:33:dc:cf:ea:7c:09:
43:3c:38:a5:5a:8e:4f:f3:34:1a:77:dc:8d:84:3f:08:81:70:
24:cc:d8:b4:da:77:f7:2e:50:9e:3b:8c:1b:a2:6c:9b:0d:72:
81:86:65:da:fa:7c:cb:5d:6c:8d:2c:38:68:3b:f9:e2:91:ff:
2a:4a:07:a3:32:a8:6c:b9:70:f3:13:96:a0:35:e2:5f:ff:48:
d1:f7:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:06 2024 by rpki-client on console-fra.rpki-client.org