Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A81BC2CEF2C311ED93EBB954C4F9AE02.roa
File: A81BC2CEF2C311ED93EBB954C4F9AE02.roa (raw, json)
Hash identifier: 2rAvJU8C0Db4fXAD3OwijE54vrrTbUXkod5axMIXeow=
Subject key identifier: 75:38:ED:BA:A5:D1:D6:96:39:75:4A:FC:0D:20:D2:5D:1B:F6:38:F2
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: B4
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A81BC2CEF2C311ED93EBB954C4F9AE02.roa
Signing time: Mon 15 May 2023 01:56:08 +0000
ROA not before: Mon 15 May 2023 01:56:08 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 49999
IP address blocks: 218.33.64.0/22 maxlen: 24
218.33.68.0/22 maxlen: 24
218.33.112.0/22 maxlen: 24
218.33.116.0/22 maxlen: 24
218.33.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: May 15 01:56:08 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64619137-9766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:22:52:46:e1:fe:50:b3:6d:81:fa:16:13:
f1:8d:d0:57:4f:40:1c:90:ef:43:4e:5e:b5:a7:05:
75:a1:92:39:2a:6c:06:f9:ba:12:c9:d3:7c:89:4c:
e5:17:a5:0a:46:f1:1c:4c:ca:e9:43:06:3d:1e:3d:
4d:5c:8d:62:5d:81:af:7f:54:19:e9:8c:88:54:5a:
37:19:97:fd:d8:9b:fe:2d:ac:90:4d:8d:9d:c6:a5:
b8:b7:b6:60:0a:87:aa:40:18:13:91:7c:ab:4a:31:
30:9b:15:e6:d7:0a:1f:c3:ae:a2:7a:b6:8e:d9:c8:
68:74:30:ca:b1:20:19:dc:38:76:a0:d7:91:c0:98:
34:61:5c:c0:13:c4:4d:bf:65:46:2a:6e:e6:dd:16:
df:da:53:58:76:24:f6:c2:2d:7b:63:39:d7:53:d1:
fd:8d:0b:ab:49:2a:7f:29:6a:ae:b0:eb:e0:28:2d:
55:d5:21:4f:1e:e7:99:bd:f9:f2:a9:93:8b:b3:ee:
02:f5:80:61:9f:03:6b:4c:2d:3d:78:4d:9a:cd:81:
c3:ce:57:28:e6:47:ab:2b:9c:ab:03:4b:61:f3:ea:
55:02:ba:78:3b:76:fb:b3:3f:d7:b1:62:09:3f:91:
8a:6f:7c:97:39:0b:0c:a9:ba:9f:de:c2:f8:5d:0c:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:ED:BA:A5:D1:D6:96:39:75:4A:FC:0D:20:D2:5D:1B:F6:38:F2
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A81BC2CEF2C311ED93EBB954C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.64.0/21
218.33.112.0/21
218.33.124.0/22
Signature Algorithm: sha256WithRSAEncryption
74:93:ff:93:03:34:18:6c:7c:a0:b2:6f:6a:99:ca:dd:e0:03:
03:05:8a:bb:f2:97:a3:9b:98:6a:13:16:6d:d5:69:a5:d0:6a:
ee:bc:e5:26:1a:4e:27:9a:ca:aa:21:5c:2e:6e:fb:0e:e4:ee:
56:3f:82:6b:2b:6c:82:7a:84:c2:1f:21:8a:67:fd:7e:dc:c2:
e1:b7:4a:ae:a4:bb:01:e3:01:59:38:84:8f:d7:76:c5:bb:0c:
51:48:a3:d0:bd:e7:e6:ae:59:33:21:4d:91:e0:f1:ea:10:98:
d4:75:78:20:a1:ff:7d:94:07:81:4d:2d:e3:ce:1f:02:ba:c6:
aa:69:c3:4d:9f:94:2f:9d:c4:27:8b:af:e5:85:1a:03:70:5e:
14:43:f1:91:96:b4:43:96:a2:80:5d:ac:c4:2e:cd:c9:b1:41:
99:d4:b4:8f:a9:97:78:61:b4:93:99:54:d9:ae:a8:df:e7:87:
68:cc:ed:83:dc:75:a2:11:ed:58:ca:ad:87:d6:f0:ed:05:40:
cb:35:ac:9a:43:63:6d:bb:f5:51:11:25:91:d0:a8:3b:07:9c:
a7:70:f4:35:d8:f4:2a:71:ea:a9:53:fa:71:65:ec:02:36:9b:
8b:34:f9:d3:3b:ad:a9:cc:cb:9d:fa:d4:bf:cd:ee:df:68:e2:
90:e7:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-ams.rpki-client.org