Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193E80/8C01A184E55911EDBE86F381C4F9AE02/450AE17CE55F11ED93889756C4F9AE02.roa
File: 450AE17CE55F11ED93889756C4F9AE02.roa (raw, json)
Hash identifier: jfdVBVo91Wp1DdCbtuX29i0izneAHOoVod1Blvb2X/U=
Subject key identifier: EF:2B:CD:B8:7E:BD:68:D5:37:B1:15:72:7E:46:6C:C9:84:C4:FF:B6
Certificate issuer: /CN=A9193E80/serialNumber=6D27383FC0FB589E83982A46169A30E105450F03
Certificate serial: 02
Authority key identifier: 6D:27:38:3F:C0:FB:58:9E:83:98:2A:46:16:9A:30:E1:05:45:0F:03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bSc4P8D7WJ6DmCpGFpow4QVFDwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193E80/8C01A184E55911EDBE86F381C4F9AE02/450AE17CE55F11ED93889756C4F9AE02.roa
Signing time: Fri 28 Apr 2023 00:54:46 +0000
ROA not before: Fri 28 Apr 2023 00:54:46 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 134090
IP address blocks: 148.222.0.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193E80/serialNumber=6D27383FC0FB589E83982A46169A30E105450F03
Validity
Not Before: Apr 28 00:54:46 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=644b1956-a95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:9e:cd:3c:64:11:f4:3d:b8:10:ff:bf:c4:
eb:68:5b:ca:d2:ab:b2:3c:b5:ea:81:82:00:03:ab:
94:fa:91:ae:fd:07:a7:c1:10:0e:aa:cd:46:59:8c:
78:33:51:71:bb:4c:0a:39:07:03:98:d9:76:6a:b5:
79:bd:45:bc:06:2f:75:6b:dd:98:95:6c:f4:a0:b0:
fa:d9:bf:12:14:de:97:a0:51:21:92:a4:11:ab:ac:
5e:0f:b5:7f:1a:24:11:ab:fd:c2:a7:17:40:57:b2:
39:40:38:42:30:60:19:5a:93:0b:1f:82:a0:0d:8d:
3a:e3:05:2c:a6:a0:b9:5d:27:dd:9c:f3:e9:b7:f1:
30:fe:75:98:07:7e:c9:45:da:23:7b:c9:03:4b:ec:
dc:df:37:c4:b9:8a:f0:8c:cd:61:f7:7c:fe:bd:ea:
37:e1:36:9a:8e:d2:56:d5:5c:90:4d:9d:35:7c:dd:
c3:de:0b:8f:7c:88:bb:6e:9d:09:db:81:6a:5f:f3:
18:78:c4:15:07:34:e1:31:70:75:28:c4:72:c6:75:
66:6a:11:f0:1e:cc:f8:c0:3d:a1:04:51:cf:e6:aa:
55:3b:4e:89:55:88:23:ab:f4:10:90:6c:13:88:6a:
d9:99:3d:ea:1a:da:3e:83:0a:55:27:43:75:6b:ea:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:CD:B8:7E:BD:68:D5:37:B1:15:72:7E:46:6C:C9:84:C4:FF:B6
X509v3 Authority Key Identifier:
keyid:6D:27:38:3F:C0:FB:58:9E:83:98:2A:46:16:9A:30:E1:05:45:0F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193E80/8C01A184E55911EDBE86F381C4F9AE02/bSc4P8D7WJ6DmCpGFpow4QVFDwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bSc4P8D7WJ6DmCpGFpow4QVFDwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193E80/8C01A184E55911EDBE86F381C4F9AE02/450AE17CE55F11ED93889756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.222.0.0/21
Signature Algorithm: sha256WithRSAEncryption
56:3e:12:74:28:01:56:23:30:69:93:a8:2c:e7:7f:80:c5:4a:
26:28:3e:e5:b7:b7:77:f4:b0:a2:5f:c3:7d:26:44:60:36:98:
e0:c9:7e:3d:f7:6d:a3:a7:0c:4b:9a:19:45:3b:c0:9a:c9:27:
0f:cd:0e:7e:6f:dd:7a:e7:1a:79:b1:80:fc:7b:1f:02:77:6b:
35:7a:8a:2e:a1:6b:dd:e8:4c:40:c5:2c:63:68:e3:19:26:9e:
17:8a:78:fa:5b:e6:11:3d:52:49:a5:61:e5:22:c1:97:10:db:
8d:90:68:47:0f:e9:8b:6c:f0:87:2d:53:a7:95:84:d9:e8:36:
b1:f6:0c:91:db:a8:29:20:74:7c:f7:91:45:21:81:c4:2a:85:
fd:bf:b2:0e:72:5c:bb:60:87:8b:1a:09:aa:11:29:22:e8:be:
18:2b:89:23:5e:ee:8e:ae:34:41:49:d1:53:63:80:90:bc:1d:
6b:31:9a:7e:f0:58:c3:d6:42:75:5d:67:09:2a:80:b6:3c:9b:
da:ad:c5:63:4e:c2:8a:62:12:f4:fe:c4:11:79:f6:ce:b7:a7:
c0:5a:ce:ee:e5:e5:54:39:d7:90:ad:0d:3c:01:a1:13:2d:ad:
0d:82:9f:5b:26:98:10:c9:1c:fa:72:b5:96:b5:e7:0d:80:b3:
ec:99:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 23:35:35 2023 by rpki-client on console-fra.rpki-client.org