Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/9173E9A8609F11EEB0CED231C4F9AE02.roa
File: 9173E9A8609F11EEB0CED231C4F9AE02.roa (raw, json)
Hash identifier: Qs25xH5RZ3Y7in1osr72ygeNWyBNI82NLJYSjTnX83A=
Subject key identifier: AB:C5:A2:3F:82:F0:AC:C8:4D:FD:96:59:AA:D2:05:B1:B3:6D:00:0E
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 010E
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/9173E9A8609F11EEB0CED231C4F9AE02.roa
Signing time: Sun 01 Oct 2023 21:14:55 +0000
ROA not before: Sun 01 Oct 2023 21:14:55 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 216394
IP address blocks: 203.18.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Oct 1 21:14:55 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6519e14f-7598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:ea:6b:90:95:7f:a0:9e:0a:37:31:79:89:
72:c6:03:b3:df:ad:25:1a:2b:dd:98:33:09:db:c8:
07:a6:dd:76:b8:26:ca:e1:e0:87:8c:3a:c3:5b:ec:
aa:99:3b:24:78:77:5a:52:5b:93:b9:c9:f3:7a:d9:
17:0e:25:4b:1b:93:32:b4:e4:41:2a:66:ef:f8:a3:
9f:b4:96:86:f0:bb:b0:1c:02:16:64:79:37:20:17:
09:3d:e4:f6:2e:eb:ad:8e:6b:71:3d:f5:e6:b4:f9:
23:21:9e:1a:cc:14:45:5c:64:19:13:38:4e:65:b5:
42:bb:c2:ae:a9:51:3f:1c:8c:69:6e:ea:b6:30:63:
07:d4:0c:6e:b7:6e:f3:48:c3:3d:41:ac:39:a3:21:
10:8c:91:43:4a:ef:32:37:ef:b4:03:67:02:af:06:
f3:a7:c0:9b:9c:89:0b:f5:22:91:c2:50:94:d9:a2:
80:47:e7:db:32:07:0e:b0:fa:41:f5:57:4b:40:00:
e4:48:59:b0:0f:4c:47:f2:1d:df:03:73:d8:ae:df:
0b:25:f6:88:ea:dd:07:36:ae:6f:26:5b:ef:e2:04:
16:1f:7d:d6:8a:34:6a:6a:83:f9:7a:90:16:e5:04:
8b:0d:99:26:64:26:10:90:57:34:1b:07:12:d7:63:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:A2:3F:82:F0:AC:C8:4D:FD:96:59:AA:D2:05:B1:B3:6D:00:0E
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/9173E9A8609F11EEB0CED231C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.18.98.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d4:c5:d0:e7:a5:bc:a1:79:5f:f3:eb:6d:38:0b:32:ab:65:
13:2c:40:e5:6b:32:8b:dc:42:d6:e3:69:02:d4:49:80:4e:ae:
07:e6:c1:5b:19:80:2b:7f:78:e9:eb:21:45:a1:31:f2:da:96:
c2:70:9b:bd:e4:1f:59:36:30:65:23:a2:e1:65:83:eb:9e:91:
ab:d2:2d:c0:fc:c1:7d:10:38:f8:f4:78:e7:49:71:dd:b5:cf:
a3:58:48:4c:91:27:52:0c:98:f9:58:60:34:04:c1:c6:4d:b6:
37:0b:00:fe:f2:a9:b1:03:d3:ad:bb:22:59:08:b5:1f:85:2b:
d8:32:a0:8f:2c:a5:b7:ac:83:71:69:2b:5c:60:4b:38:64:d1:
cb:79:f7:96:01:06:52:81:c0:6e:36:e5:a5:d7:fb:b0:f6:ef:
2f:1a:8d:e6:e7:2c:10:47:6c:9f:ba:87:d6:a3:7a:34:ef:1d:
3e:79:e0:96:45:d2:71:3b:be:94:44:8a:3d:93:3c:d7:77:ec:
d1:0d:34:91:4a:69:86:ec:29:52:41:87:5d:8e:15:08:52:3c:
df:cb:7e:de:39:18:4c:f4:89:0c:81:b3:fd:0f:c7:26:01:35:
72:c0:cd:7d:65:e8:6d:1d:54:38:f2:64:47:fa:a0:8a:55:9f:
db:7c:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 22:01:38 2023 by rpki-client on console-fra.rpki-client.org