Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DE33706A04D311EE908FBA14C4F9AE02.roa
File: DE33706A04D311EE908FBA14C4F9AE02.roa (raw, json)
Hash identifier: SShF1/R0HfnpzhbJMFlgQQ3eZFYK9HwzUKEtSMkF/3o=
Subject key identifier: A4:34:CD:F9:13:2F:D5:49:63:9C:3E:0D:0B:49:94:55:45:F6:42:36
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 062F
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DE33706A04D311EE908FBA14C4F9AE02.roa
Signing time: Wed 07 Jun 2023 01:37:31 +0000
ROA not before: Wed 07 Jun 2023 01:37:31 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 208485
IP address blocks: 203.147.228.0/22 maxlen: 24
203.147.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Jun 7 01:37:31 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=647fdf5b-5cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:f9:c9:97:ec:68:e5:08:d7:e8:f9:2f:ee:
51:1a:e8:b9:c4:01:99:b3:54:d7:99:7a:4f:5d:d0:
82:d7:0d:65:fc:1a:3f:39:01:e9:f2:03:d9:f5:02:
57:8f:9c:a1:51:1a:91:fc:f5:bc:c8:8c:c8:e7:7d:
cb:f1:2e:95:8a:5a:3e:a1:ec:71:d0:9a:25:d3:97:
6e:a4:94:c4:93:24:3e:1a:c0:bf:47:73:94:6a:9b:
bb:74:71:1c:87:c6:d0:28:17:87:c2:63:21:b2:5c:
90:87:57:72:81:c8:40:0a:ae:af:4e:32:41:12:86:
12:9b:e9:e7:d0:9f:aa:4e:00:d1:0d:5a:41:84:2e:
8a:16:c4:33:25:6c:55:25:ef:58:7b:17:eb:7b:08:
b4:72:5b:34:a5:34:09:53:c5:cb:48:82:98:e3:46:
a4:88:10:9d:9c:b8:1e:59:df:97:6d:3c:99:dc:f5:
32:35:29:3e:a0:e7:0a:bc:05:38:d9:ba:f4:2f:3d:
38:b1:b9:68:84:3f:ae:bf:6e:8a:e0:a8:f0:18:cd:
08:d6:4d:c3:11:ea:79:90:d6:a1:b0:ce:8f:c0:1f:
70:92:bd:07:1a:7c:5b:69:22:64:f7:94:b8:a0:b2:
d9:4d:a4:c6:e4:11:56:9d:13:fa:f5:18:68:c7:03:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:CD:F9:13:2F:D5:49:63:9C:3E:0D:0B:49:94:55:45:F6:42:36
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/DE33706A04D311EE908FBA14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.147.228.0-203.147.235.255
Signature Algorithm: sha256WithRSAEncryption
1c:7d:be:19:21:df:40:72:73:f4:16:58:a0:04:f4:c3:ec:1f:
f2:fe:33:d5:0f:08:d8:77:c4:91:54:1e:ca:2d:eb:41:3d:40:
fb:38:6a:39:f3:d3:ef:65:b6:56:da:48:a7:8f:1f:08:c5:ea:
1d:ab:51:d9:f5:70:15:2a:ba:7a:07:22:4a:aa:89:58:33:bb:
3d:e5:29:88:5b:12:db:d5:6e:55:22:33:d9:b0:e6:97:9d:66:
53:c3:28:d4:9c:9d:b1:55:22:73:7c:02:75:7f:8c:ef:75:d6:
d1:d6:09:55:0a:ae:02:3d:86:9d:91:b6:15:3c:2f:dd:b8:eb:
50:47:76:3c:48:79:c0:ff:cc:00:c0:64:d6:55:42:fa:da:ae:
66:51:22:ac:41:95:c3:34:4d:b6:06:1b:95:01:cf:b1:d2:fd:
53:53:f4:18:17:4e:97:54:1c:ea:d7:69:e7:5b:f2:ef:3f:0d:
c3:ba:de:2e:93:59:0f:86:d6:3a:b2:ad:35:cf:d0:2d:16:31:
a8:54:b9:13:41:e3:f2:0c:af:62:dc:e4:7b:e1:41:ba:c3:cc:
03:04:3f:2a:59:4c:2f:a5:7c:b7:0e:e3:f5:1e:25:ed:9a:75:
1e:56:07:e9:c7:9c:37:d7:0b:a4:26:6b:00:2d:14:53:f4:3e:
c2:35:50:43
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 7 02:21:53 2023 by rpki-client on console-fra.rpki-client.org