Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/088333BAD22E11EDB43D0F1AC4F9AE02.roa
File: 088333BAD22E11EDB43D0F1AC4F9AE02.roa (raw, json)
Hash identifier: +5mvdj2fi1/UKRFL8xqRz+G7hN1n3kJDNwZUNJQU7Es=
Subject key identifier: 0A:3A:BC:C8:8E:CA:66:85:03:BD:21:E5:91:8F:7D:AD:A3:40:6F:20
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 0296
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/088333BAD22E11EDB43D0F1AC4F9AE02.roa
Signing time: Mon 03 Apr 2023 14:44:27 +0000
ROA not before: Mon 03 Apr 2023 14:44:27 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 35913
IP address blocks: 204.52.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Apr 3 14:44:27 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=642ae64b-b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:17:ad:53:d5:75:a5:76:c8:8f:20:d1:51:
7b:5f:79:65:1a:de:90:c6:fc:7f:2e:c6:e8:26:f3:
77:6b:a7:11:0a:b6:3f:a0:03:f8:a9:f5:29:35:45:
a0:8d:4d:cd:23:fa:94:8a:70:5a:50:9a:27:af:d9:
9f:c8:29:56:04:0e:97:4d:0b:b2:9c:28:8d:77:20:
9b:d0:ee:82:2a:ea:8b:ec:4f:a0:2b:92:e0:56:26:
a5:2a:a4:a2:e8:59:d2:b4:f1:a6:f6:7f:b7:74:c6:
72:97:d7:93:18:7a:f6:8a:90:ae:29:90:63:56:36:
70:5d:9c:43:b4:92:a5:f8:ae:4c:9a:83:ca:60:5f:
24:b2:47:9a:a8:68:ed:30:30:61:98:c6:65:03:fd:
17:bc:44:f5:52:da:a5:69:d1:09:8c:33:c0:f2:4f:
6e:cc:c4:c5:8b:bb:e7:9d:e1:a1:23:46:e8:fe:4e:
8b:89:36:90:ca:e9:ac:99:7a:06:45:9d:1b:11:9d:
72:9e:d7:16:d8:4b:1e:50:93:f0:0d:85:3b:79:26:
6e:1f:e7:91:7f:bc:41:2b:2b:63:fa:ed:8e:6f:16:
0b:e1:09:6c:cd:c0:69:f2:1b:08:78:61:df:c7:71:
53:e1:23:ab:c5:19:35:8c:75:be:a4:5b:76:91:d5:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:BC:C8:8E:CA:66:85:03:BD:21:E5:91:8F:7D:AD:A3:40:6F:20
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/088333BAD22E11EDB43D0F1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
204.52.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:30:6f:84:66:c0:ae:96:a4:b7:02:cf:f8:2c:7b:52:9a:04:
5d:ba:6f:99:65:b4:31:33:1d:70:53:5b:cc:38:7a:54:74:22:
36:83:98:15:26:2e:24:0a:3a:eb:23:87:fd:6e:e0:71:c3:d1:
ba:8c:ba:6f:3c:92:14:80:77:a1:24:c0:1f:2a:e9:cd:cf:b0:
34:f9:73:a5:37:5b:5d:91:5e:25:8e:51:00:21:26:9e:b5:f2:
ae:ba:f3:0e:27:a9:3a:12:f7:bf:b5:f3:d6:ee:14:de:27:2a:
04:85:e0:97:56:67:34:33:fb:ca:3e:0f:86:a3:88:eb:e4:ed:
af:b0:2b:f1:7d:3a:1d:fe:1c:90:df:9c:55:1f:49:9e:3f:fe:
3c:92:ad:03:07:31:c7:14:2e:e4:0b:b3:22:f1:5f:ed:de:fc:
a0:2e:92:a1:f6:06:27:b6:2a:d6:c4:b7:c6:ca:f1:91:c7:14:
98:00:f2:90:e4:a4:ef:ec:41:ee:25:2d:58:a6:1a:ac:80:8e:
b8:5a:19:c2:c6:fa:76:32:20:48:00:3f:50:d9:64:16:cd:d4:
6a:fb:96:ef:e5:69:7c:8d:68:83:ac:06:88:fe:1c:24:94:18:
c7:e6:ef:50:bf:b6:a3:85:47:2b:70:a2:3b:79:07:91:df:dc:
b5:da:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 03:30:24 2023 by rpki-client on console-ams.rpki-client.org