Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/DB7D32163DFA11ED99784C2EC4F9AE02.roa
File: DB7D32163DFA11ED99784C2EC4F9AE02.roa (raw, json)
Hash identifier: yiOYV4eky/HAD6V7FvDLBxetj3BUP71f4d5pTQmW/mg=
Subject key identifier: 52:89:E0:B6:7C:1F:6C:03:C8:D6:20:B3:FE:A9:2B:90:8C:D4:8E:10
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 05
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/DB7D32163DFA11ED99784C2EC4F9AE02.roa
Signing time: Tue 27 Sep 2022 00:25:15 +0000
ROA not before: Tue 27 Sep 2022 00:25:15 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 14618
IP address blocks: 218.33.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Sep 27 00:25:15 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=633242eb-fd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:d2:89:22:6f:65:a3:13:d7:24:34:1d:02:
3b:18:8f:27:a4:71:93:3d:eb:1f:bb:c8:83:63:41:
68:20:38:78:6e:db:5c:9b:9d:31:71:9e:5d:1a:ca:
ae:62:72:99:b8:8d:0c:84:c0:d6:23:6b:a3:c9:ba:
bc:b2:8f:40:bd:e5:7e:fa:14:63:fc:ea:de:55:b3:
c2:23:07:8c:b4:6d:be:b4:b4:59:20:b9:67:d1:ad:
c4:0d:4e:89:d8:11:63:f0:14:ff:e7:db:97:db:c1:
12:e8:8c:44:f7:f9:0b:40:a3:9c:e9:11:54:55:80:
fb:34:8a:a2:3e:29:36:a4:3e:c9:d8:c3:42:c1:00:
49:8d:63:b8:43:51:80:f1:0b:a6:41:41:98:aa:d9:
c8:a9:d2:27:9d:95:21:08:ce:2e:29:6e:8d:f1:11:
9c:8d:63:af:c8:dd:8f:17:89:52:0e:f6:5d:51:6d:
ec:87:8c:81:57:a1:f0:fa:3a:fd:0a:89:6d:2a:be:
89:a8:2d:bc:fd:a1:3d:b1:f6:fb:31:52:aa:ed:c0:
2f:4e:f9:06:24:12:55:1c:bd:56:1b:b1:2c:6f:b5:
eb:48:c1:c4:6b:73:4f:39:86:b5:88:64:e0:ca:67:
43:ce:ea:ef:46:9b:15:01:b7:8d:c6:a8:99:ee:d6:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:89:E0:B6:7C:1F:6C:03:C8:D6:20:B3:FE:A9:2B:90:8C:D4:8E:10
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/DB7D32163DFA11ED99784C2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.33.0.0/18
Signature Algorithm: sha256WithRSAEncryption
96:d9:b5:46:f4:db:b1:e6:44:4a:64:c7:65:10:2c:b1:61:85:
64:3a:6a:33:68:14:e4:ef:9d:7b:63:74:78:74:1f:70:78:46:
12:b1:6d:f0:d2:52:5c:88:80:65:5f:d8:7f:5d:56:b7:ce:b4:
88:e8:33:24:35:f2:64:f7:7d:43:e8:e8:42:c5:f1:72:4f:7c:
94:8b:d5:e6:d3:cc:46:c8:59:14:21:1c:ab:46:60:15:21:0b:
1b:00:e1:63:7f:ce:2b:49:d4:d8:df:c6:d1:98:59:39:b7:e5:
56:14:60:10:13:ff:f2:2c:21:10:3f:fe:f2:48:63:bd:ea:d7:
0f:86:12:e6:a5:5a:7c:a1:f9:14:fa:73:07:3e:98:f7:9b:c3:
6c:8d:96:c8:de:9e:11:cb:cf:c3:a4:b3:7c:fc:cf:41:8e:7a:
74:23:ec:46:d2:72:65:5c:f3:5c:4f:61:1e:a3:7b:39:a5:80:
ac:0d:ce:47:df:82:3d:e0:bd:0d:a5:83:7d:ba:12:bd:e7:4e:
a1:d5:38:2c:3e:47:76:6f:9f:cf:f1:c2:7e:45:7e:19:01:56:
d5:7a:8e:fc:2a:9f:46:6b:87:08:69:ab:69:39:ce:9e:a4:fe:
a5:0f:56:11:62:49:63:c4:d5:7f:ad:5e:45:16:5f:0e:c9:47:
ee:41:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org