Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/0CA043A22A6C11EEBA39642EC4F9AE02.roa
File: 0CA043A22A6C11EEBA39642EC4F9AE02.roa (raw, json)
Hash identifier: gLOmdZOUcaf5SBOwSoiU9BX4c0BVH/RFDcjwTHRHp3Y=
Subject key identifier: F9:14:D1:A8:DD:F5:85:D7:DB:F8:1C:D5:66:47:7B:1A:A6:C9:B0:1F
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0654
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/0CA043A22A6C11EEBA39642EC4F9AE02.roa
Signing time: Mon 24 Jul 2023 21:50:05 +0000
ROA not before: Mon 24 Jul 2023 21:50:05 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 49999
IP address blocks: 202.139.244.0/22 maxlen: 24
202.139.248.0/22 maxlen: 24
202.148.136.0/22 maxlen: 24
210.247.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Jul 24 21:50:05 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=64bef20d-af14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:1b:fc:53:94:92:a7:9c:6a:d0:6d:ad:88:
15:7f:bc:0a:d8:2a:25:39:86:ae:ab:02:e7:cb:c4:
23:73:b4:5f:8f:64:33:99:2b:97:ee:b2:ad:e3:56:
e2:da:f7:00:29:a8:66:ec:92:bc:07:4e:b5:b6:c0:
8c:a5:30:d5:95:f6:79:5b:e0:54:2c:7c:d3:52:5a:
f7:d0:df:c4:e4:96:f2:e5:b3:ea:02:c6:76:fe:c1:
0b:98:5e:a3:07:bf:d7:ab:36:2f:e3:24:a9:ee:c3:
c8:ad:83:f6:c8:ff:86:c4:bb:d9:54:a5:ad:50:f0:
cc:23:5c:3a:93:f6:e8:40:14:a9:28:89:be:e4:a5:
4c:18:06:3e:4a:e4:bd:86:70:c6:6f:aa:22:dc:75:
c5:02:bc:05:27:17:c2:60:cf:fa:ac:ab:9f:d0:51:
e8:f7:0c:ef:5a:43:e4:08:7a:97:17:e1:79:80:91:
07:2e:79:a2:df:37:6e:dd:97:e4:8d:f9:53:30:db:
02:b1:2a:e1:51:cf:a8:49:59:87:f6:22:9a:9c:47:
3e:35:e8:1f:28:4c:a3:d5:bb:11:63:a0:da:bb:62:
e8:c0:25:63:33:8e:fb:40:2b:e5:23:3d:74:06:f9:
09:a6:f7:78:83:cd:29:59:e7:a6:0f:27:ba:8c:f5:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:D1:A8:DD:F5:85:D7:DB:F8:1C:D5:66:47:7B:1A:A6:C9:B0:1F
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/0CA043A22A6C11EEBA39642EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.244.0-202.139.251.255
202.148.136.0/22
210.247.212.0/22
Signature Algorithm: sha256WithRSAEncryption
54:03:12:b0:74:c0:23:c7:57:60:97:df:b6:1b:43:24:85:ab:
77:c8:24:38:6b:21:1c:bb:88:3b:74:2d:39:71:88:fd:a5:a6:
0b:0c:52:65:93:dd:80:e8:b5:da:bf:cf:e5:e1:86:15:96:fd:
eb:16:10:f7:8e:6f:9b:2a:3f:27:9d:de:a2:d9:cf:ac:35:0e:
03:f0:b1:8d:3b:e4:60:a8:98:cb:ed:f9:15:af:8c:34:76:a6:
af:7e:ca:a1:99:48:71:fc:d0:74:d1:5c:94:e0:53:a5:74:a0:
2a:85:57:74:f2:19:bc:57:ea:e1:fa:4b:ec:65:26:1b:5b:76:
5c:bc:c0:e2:bb:03:c8:b8:71:e6:a5:4f:96:41:2b:04:40:11:
e2:97:2c:7f:a0:aa:f5:42:68:53:1e:55:d1:17:58:82:88:37:
50:61:2e:5c:8f:36:80:cf:1b:9f:b2:9a:d5:d7:47:d8:46:93:
e0:73:53:87:42:0e:5e:8b:a9:0a:56:94:b7:05:94:b1:36:3a:
22:ec:c6:3b:00:08:bb:a6:94:43:2c:94:22:76:2b:d2:d6:70:
a8:17:ec:d3:e8:3f:a6:a2:ae:9a:94:b3:ea:49:39:0d:ff:28:
2d:7e:5d:ee:12:5d:0f:80:2b:a1:e1:68:37:c7:2e:01:88:c3:
cc:f1:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 22:32:18 2023 by rpki-client on console-fra.rpki-client.org