Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/5A27A78673CE11EEAC953A47C4F9AE02.roa
File: 5A27A78673CE11EEAC953A47C4F9AE02.roa (raw, json)
Hash identifier: hi7OPyAGeKD5L19qlXiuqef/hu1M/rN0wkwl0dYZBfE=
Subject key identifier: A0:B1:7D:F1:D6:F7:12:E6:9F:50:CE:A7:4C:60:D2:87:8C:73:51:86
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 010C
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/5A27A78673CE11EEAC953A47C4F9AE02.roa
Signing time: Thu 26 Oct 2023 07:07:41 +0000
ROA not before: Thu 26 Oct 2023 07:07:41 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 47602
IP address blocks: 139.5.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Oct 26 07:07:41 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=653a103d-263e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d6:bc:7c:34:30:39:5f:b4:6f:2e:44:cc:42:
0b:a3:03:2b:ec:27:cb:77:58:38:5a:7a:99:53:1e:
f3:12:2e:72:dd:f5:97:5e:3a:38:88:53:13:08:62:
0b:b6:9d:ba:23:b5:fc:43:19:bb:dd:7f:c4:27:be:
9e:e5:65:6b:3c:13:72:db:80:64:88:75:8a:42:b3:
57:2c:e5:4e:12:02:b2:43:3d:2d:77:09:2b:8b:5c:
e4:5a:aa:a5:32:0a:59:8b:79:af:ae:ce:72:19:65:
bc:d2:1f:1b:5a:59:92:e7:5d:39:92:3c:53:94:f8:
52:4a:e3:8f:50:68:be:95:c8:3b:52:25:7b:81:b7:
a4:4a:5c:b5:54:c5:9d:7f:0d:b9:98:c5:42:aa:42:
73:97:a3:4f:ca:37:76:60:19:9f:56:ec:42:d6:9d:
ac:35:b4:87:1a:03:b4:0f:7c:f4:83:58:e0:c8:49:
93:e8:43:ca:5a:25:7c:98:17:c4:56:81:b5:47:d6:
44:df:ab:03:86:7b:fa:9f:30:d7:c7:58:1a:57:a8:
1f:86:ee:19:3f:19:7c:20:5b:61:ca:5d:f3:a2:37:
94:06:39:ed:58:5c:63:cd:85:73:6c:6c:8c:c1:1b:
a1:83:af:96:5c:2a:20:c8:35:06:21:fc:d3:ce:fd:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:7D:F1:D6:F7:12:E6:9F:50:CE:A7:4C:60:D2:87:8C:73:51:86
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/5A27A78673CE11EEAC953A47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.5.88.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b3:e1:5d:d3:8b:dd:0c:5f:83:77:a1:ab:05:da:38:2c:19:
b3:45:03:51:9f:5b:57:b3:60:b4:a0:ba:cd:31:9f:f9:5e:73:
c5:3d:8d:76:3f:d8:cf:10:5d:1f:73:a6:bd:73:13:0d:3e:9f:
f3:d2:db:c1:7d:84:ad:d5:9f:61:cf:be:a5:18:57:6b:7a:0b:
7a:b6:33:80:8e:fb:3c:e7:40:30:99:a9:e7:89:7f:c5:1e:ae:
76:19:c0:32:6e:c4:fc:74:be:af:4a:1a:51:14:75:be:51:0a:
85:85:7d:7a:28:31:67:dc:84:1a:c2:36:46:4a:c4:41:48:27:
89:86:f6:28:28:c4:6b:dd:a6:97:e1:7b:7b:41:7c:94:17:5f:
5d:8d:fd:b5:9b:cb:36:38:62:59:16:4b:14:c6:6d:26:58:74:
37:f6:20:3a:0d:97:d2:40:2c:25:07:59:80:4c:04:85:13:f7:
7f:a1:5c:80:aa:66:3d:b2:6a:47:6a:5f:58:2b:d9:3f:dd:18:
d6:fc:bf:ee:ee:ab:15:76:54:84:cc:40:fb:01:34:17:34:84:
04:dd:c9:e8:19:65:80:f0:f2:0c:35:52:c3:18:a0:e5:85:25:
27:d1:0f:1c:69:ad:97:90:01:5f:75:bf:a0:b4:c7:f8:0a:e8:
f2:b1:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 12:48:39 2023 by rpki-client on console-fra.rpki-client.org