Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/AB5B2644D2C111E9B5D20B2AC4F9AE02.roa
File: AB5B2644D2C111E9B5D20B2AC4F9AE02.roa (raw, json)
Hash identifier: 9Qw9Baf0L5XjQdHCWx1Rofkv8NLLuJQqma1kF/8jBXw=
Subject key identifier: ED:96:A9:9B:01:7F:B9:95:7D:95:02:79:0C:CD:39:A5:AE:52:18:AF
Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial: 1C14
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/AB5B2644D2C111E9B5D20B2AC4F9AE02.roa
Signing time: Fri 04 Nov 2022 17:03:20 +0000
ROA not before: Fri 04 Nov 2022 17:03:20 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 58424
IP address blocks: 146.88.200.0/21 maxlen: 24
167.179.0.0/23 maxlen: 24
167.179.20.0/23 maxlen: 24
167.179.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7188 (0x1c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Validity
Not Before: Nov 4 17:03:20 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=636545d8-ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:1e:e1:42:46:88:2e:22:ee:9f:06:82:59:
8b:95:e6:be:cd:4a:c4:50:42:96:8b:55:d3:f2:f0:
77:6b:0e:c6:86:1e:d2:bd:1d:42:fd:62:84:d2:7c:
15:53:92:37:a6:d8:49:32:4d:1d:5f:d2:ca:e4:18:
96:57:60:57:07:3d:56:81:c3:9b:80:aa:b3:62:95:
95:f6:c4:55:29:59:2d:34:cc:bd:b2:67:6a:dd:76:
0c:b1:7b:55:fe:f1:15:0a:0a:af:f1:f1:ac:ac:da:
69:bd:9a:14:02:46:ae:43:02:40:81:a1:29:3c:7b:
1c:34:bd:6b:49:82:3b:e0:47:72:d7:69:23:a0:cd:
16:57:7a:1a:63:70:4b:ef:84:2b:b7:92:59:b0:21:
a5:07:70:a6:79:3c:2c:64:fc:7d:21:2b:17:d1:61:
a9:c3:73:c8:5f:54:0b:ca:85:75:d5:c7:0a:59:81:
3a:2d:62:39:15:3a:a0:4d:9b:6c:ff:95:da:f5:bb:
fb:61:98:07:46:f2:4b:90:75:56:e0:7c:82:18:54:
e4:76:42:13:14:5d:f1:8f:47:2e:90:59:9e:06:f4:
ff:5d:36:7a:a7:98:80:6b:7b:85:22:56:57:bc:82:
7e:cc:dd:81:f8:26:95:97:8e:2d:07:dd:84:fe:7e:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:A9:9B:01:7F:B9:95:7D:95:02:79:0C:CD:39:A5:AE:52:18:AF
X509v3 Authority Key Identifier:
keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/AB5B2644D2C111E9B5D20B2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.200.0/21
167.179.0.0/23
167.179.20.0/23
167.179.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:20:29:98:4f:6a:c4:81:08:56:6a:8f:c9:bd:7b:df:94:e3:
5d:15:fb:ec:4c:cf:af:22:db:88:00:af:fe:de:69:d2:78:db:
61:bb:50:07:08:63:0a:c3:2f:b6:d0:d3:33:76:2b:c0:3c:c9:
cf:64:d0:17:4b:f2:52:2b:4c:c5:42:f6:b2:ee:a3:03:6d:ea:
7f:5e:aa:95:26:38:99:39:55:3a:2d:e0:4a:79:17:c2:2e:43:
40:b9:b2:be:be:76:ac:01:ab:b9:1f:f8:3c:35:a3:0d:ad:4a:
e7:f6:b4:d4:d3:8d:b7:02:23:db:8e:a7:be:74:9b:cf:e2:c5:
5c:cd:2d:90:45:ab:00:c9:fd:15:13:e0:a3:58:5e:a9:d8:d3:
e2:98:bc:f3:18:33:83:26:7d:56:31:b4:5a:8c:7d:5c:9b:ab:
cb:22:62:6a:ea:4f:e5:d6:94:04:6a:83:d8:00:e9:1f:df:47:
02:f0:00:d1:f0:e0:0f:bd:57:33:74:e4:6f:b2:aa:81:d5:a4:
50:b2:ce:46:b7:92:ef:ea:93:6c:eb:08:e1:ed:30:51:fb:91:
5a:94:70:ce:fd:7a:e9:ef:88:87:57:67:62:dc:6f:ad:9c:23:
d9:7c:e9:de:69:70:ea:c4:c6:5c:35:a9:fa:47:a2:11:6a:a6:
d7:b8:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 07:21:51 2023 by rpki-client on console-fra.rpki-client.org