Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6013C946443A11ED91896785C4F9AE02.roa
File: 6013C946443A11ED91896785C4F9AE02.roa (raw, json)
Hash identifier: BCWBdOXA1MxbyXO9zwFK3FSnabjK+hqc96sv9icRRqQ=
Subject key identifier: 6D:07:7D:D7:DE:5E:E2:92:8A:C4:20:AD:22:C7:03:AC:E0:8D:BD:C5
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 1F
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6013C946443A11ED91896785C4F9AE02.roa
Signing time: Tue 11 Oct 2022 15:54:28 +0000
ROA not before: Tue 11 Oct 2022 15:54:28 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 49999
IP address blocks: 218.33.84.0/22 maxlen: 24
218.33.88.0/22 maxlen: 24
218.33.92.0/22 maxlen: 24
218.33.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Oct 11 15:54:28 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=634591b3-1209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:4b:00:b1:c1:93:fc:30:25:bd:3c:78:42:
ab:a1:58:8e:2f:3f:7b:9e:47:39:13:08:0d:eb:93:
22:64:4f:dd:1d:1f:7a:24:b4:58:28:b5:e8:9e:6c:
7d:0f:aa:06:60:ec:22:cf:7f:ce:6c:e5:9a:3a:91:
21:65:4e:17:d5:03:2c:96:cd:cc:9e:ab:3e:df:c3:
5b:07:30:50:c6:df:f7:46:6d:5a:18:58:c1:fb:9c:
a3:e1:28:cd:2d:6d:8c:0a:34:d3:ff:d9:78:ba:d5:
e9:ed:42:fb:44:69:6d:35:ba:84:4b:23:f4:7a:76:
b6:51:e0:27:2e:af:6e:b9:5d:94:25:af:73:82:b6:
fe:54:84:2c:d0:ff:68:24:81:27:9e:15:1b:69:f6:
88:4c:0c:e1:12:03:40:db:a9:1c:92:7e:fe:66:03:
7e:41:04:a2:1f:b2:fa:8c:cc:27:a7:cd:9c:9e:9e:
75:3f:16:e8:44:68:0d:0c:02:eb:e5:ac:94:d9:bf:
d4:51:4a:dd:cd:7d:03:ac:61:da:6a:2d:aa:f8:89:
1c:fc:c0:55:01:d5:80:b7:87:75:f0:18:e1:92:09:
4e:b6:8e:f0:98:ba:f0:04:84:b2:63:b7:a9:4d:6a:
fc:80:76:8f:4f:ef:7b:7c:a0:7d:af:15:20:b3:e2:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:07:7D:D7:DE:5E:E2:92:8A:C4:20:AD:22:C7:03:AC:E0:8D:BD:C5
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6013C946443A11ED91896785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.84.0-218.33.95.255
218.33.112.0/22
Signature Algorithm: sha256WithRSAEncryption
55:74:45:46:d0:18:f7:00:4c:c7:32:47:41:a8:da:27:40:f1:
94:0d:bc:01:8f:0d:1f:c6:89:b2:13:2a:c5:94:bf:22:d7:a1:
f3:db:64:d6:86:57:28:94:dd:d3:4f:f4:3f:fa:8c:20:ab:ee:
de:1d:da:9d:e9:ba:a8:d8:b1:92:df:0a:52:b2:7f:27:1b:fa:
a4:ad:86:02:f2:b5:bb:e4:74:78:26:d2:53:3f:c9:59:ed:dc:
05:21:37:fc:19:95:e9:db:6b:5e:c3:d4:46:56:48:c1:98:d3:
df:34:00:05:dd:81:34:18:df:a5:97:06:d8:f6:17:7e:9e:04:
ee:26:2d:da:db:81:6b:a9:a7:f3:db:2f:bd:85:62:1c:1b:f6:
a0:7d:0d:94:5c:bf:37:f4:61:75:e3:36:6b:05:a7:a1:e1:43:
3d:41:81:08:7b:d1:e5:a5:a1:f1:88:a2:a3:6f:3c:e2:cc:4f:
87:06:7c:1b:5c:ce:12:fa:f9:80:7b:81:ed:3a:15:ed:79:27:
7d:c0:af:39:7d:ad:cd:8d:dc:7a:13:0d:05:db:aa:a3:5e:fb:
b3:a4:83:7a:fe:ff:7a:93:0f:4a:80:9b:fb:d5:7f:6a:10:b2:
03:3d:3b:e9:7a:56:20:80:f0:ea:3c:f9:d2:6a:21:aa:c4:39:
1b:72:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org