Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B8BCEC183FF111EE9745E64BC4F9AE02.roa
File: B8BCEC183FF111EE9745E64BC4F9AE02.roa (raw, json)
Hash identifier: l1VfASx/Itn+D9YQnp70NfsUFQMDKp6y4XpVL161/5Y=
Subject key identifier: C7:BE:9F:55:FD:64:5C:17:F7:85:22:33:1F:DC:48:A8:1A:99:62:03
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: FC
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B8BCEC183FF111EE9745E64BC4F9AE02.roa
Signing time: Mon 21 Aug 2023 07:09:51 +0000
ROA not before: Mon 21 Aug 2023 07:09:51 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 49999
IP address blocks: 218.33.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Aug 21 07:09:51 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64e30dbf-319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:56:12:9e:a1:68:2e:d3:8b:af:1f:02:ed:
c0:65:c9:96:5b:5e:2b:3f:bc:ab:4c:a4:d6:5c:87:
e7:ab:d4:56:74:1f:1b:e4:ba:fe:9b:3a:3a:f5:92:
e2:b0:b0:dc:de:71:df:3c:fe:72:3f:fd:8d:2f:84:
c4:d4:28:27:db:c4:59:c5:3c:f3:d6:e4:92:a4:32:
b4:b6:2b:83:f0:09:fd:03:c2:53:8e:a6:33:95:a8:
f5:82:06:a4:ff:68:44:31:26:8c:0a:05:76:fa:47:
3b:4f:78:f5:81:6e:9d:7d:49:c0:f6:8e:29:64:04:
12:42:ab:0e:82:c3:18:78:2c:e4:2b:8d:98:6a:16:
c4:f6:51:38:e6:8c:25:81:0c:d9:a4:ca:19:b5:79:
9f:2c:c9:75:e8:7e:1a:50:e8:ae:25:9e:07:ac:7c:
e9:6d:47:34:18:39:a5:37:25:24:1f:f5:5f:16:3e:
53:b8:d4:03:2d:32:76:bf:b7:89:cc:e1:e7:b0:fa:
5f:4b:5e:65:a0:8c:7c:f5:6f:29:ae:59:9d:83:c9:
07:06:db:28:69:52:87:47:39:d3:d5:08:ad:bf:64:
93:d2:a5:76:f3:7f:78:76:2d:5b:0d:4e:27:99:a1:
5f:61:50:30:a9:e1:d2:4c:26:68:5f:f4:16:a5:71:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:9F:55:FD:64:5C:17:F7:85:22:33:1F:DC:48:A8:1A:99:62:03
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/B8BCEC183FF111EE9745E64BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:90:91:46:a3:e2:db:5e:09:2e:8a:ae:95:1b:08:b8:af:06:
da:29:f7:d3:02:af:1e:f0:3c:a2:da:50:26:a3:79:59:18:88:
5a:0c:d6:75:ab:30:45:af:c0:3c:9d:c2:2c:8b:19:fa:a8:8a:
56:88:52:f4:b6:e5:a7:93:7b:f8:0b:63:f1:8c:4b:b0:99:9d:
1d:7a:cb:6f:fb:c8:99:7b:64:3d:64:cb:31:0b:1d:78:67:1f:
b5:d0:82:b7:ad:4d:8f:ac:d6:cf:3d:5e:08:9d:fc:84:63:60:
f4:6b:f7:27:09:2d:a9:96:df:81:bb:b0:9b:08:99:d5:38:f3:
ab:3e:f9:07:9f:4d:09:c5:ac:72:f9:e9:7b:f5:96:02:60:ac:
4f:51:5b:01:a4:7a:44:0e:65:06:01:c3:c4:e9:f3:bd:86:e5:
8c:8c:69:de:55:4c:dc:65:ca:19:56:40:cc:81:48:55:60:6f:
aa:9c:40:4d:9d:3a:57:5c:25:b6:3c:05:4d:ee:c7:76:7e:b0:
2f:61:3c:ea:0a:8b:88:b6:f9:d4:07:2b:32:78:2e:e6:29:68:
e3:88:b3:40:45:44:13:66:79:d3:54:41:ba:4d:25:7f:71:39:
1c:4f:8f:87:fa:01:3f:33:77:5e:ab:33:2e:5c:25:16:20:92:
c2:04:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 11:18:33 2023 by rpki-client on console-fra.rpki-client.org