Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/89F91D1A6CB611EEBF465752C4F9AE02.roa
File: 89F91D1A6CB611EEBF465752C4F9AE02.roa (raw, json)
Hash identifier: 03DFO7w47HJuS6f7UFMlUX0cZUfdspBBdIeLwhG4eZg=
Subject key identifier: EA:62:50:66:2B:20:C8:C9:99:72:8E:AB:9B:8D:C8:79:23:E9:04:AE
Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76
Certificate serial: 0C65
Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/89F91D1A6CB611EEBF465752C4F9AE02.roa
Signing time: Tue 17 Oct 2023 06:29:35 +0000
ROA not before: Tue 17 Oct 2023 06:29:35 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 65295
IP address blocks: 202.185.181.0/24 maxlen: 24
202.185.188.0/24 maxlen: 24
211.25.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76
Validity
Not Before: Oct 17 06:29:35 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=652e29cf-a218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:80:49:c6:79:9b:22:38:40:2a:02:4b:01:
95:02:77:ad:ff:63:76:dc:31:38:84:74:51:dd:e1:
07:cc:ca:9a:6f:20:b8:6c:76:23:1a:b4:f8:6b:c4:
27:7f:34:1c:c9:d0:fc:7f:8c:7a:e9:f1:df:2f:46:
4e:d9:33:48:92:19:ba:35:ae:d4:a4:6e:16:8f:92:
0b:d8:a2:27:eb:cd:3e:cf:41:8b:12:23:44:4e:31:
27:3d:33:93:60:b6:e5:2f:37:8d:0d:aa:10:c0:89:
40:e2:bb:0d:68:9c:f0:28:b7:50:01:33:32:92:56:
9a:1f:3f:b4:72:9a:59:9c:0f:7b:9a:26:e8:75:c1:
c9:89:d0:08:ea:b0:b9:2e:7f:0b:44:d5:f2:b7:4d:
d6:82:e0:be:7f:a1:f5:06:6e:2d:81:cd:be:4d:88:
bf:b6:2e:1b:a7:84:46:36:81:57:fc:18:bf:8d:03:
e3:15:57:83:e1:83:c6:58:55:e8:c2:e0:3a:63:d9:
2f:bb:22:2a:19:a5:b7:74:7b:28:23:bd:cd:0f:8f:
56:b8:d4:01:e3:b4:3a:71:64:b6:78:31:3a:8f:ea:
9c:0d:eb:de:ff:53:e9:40:99:dd:97:40:ed:ea:53:
1d:12:98:af:6b:43:1c:6e:21:ab:bb:a8:bf:77:27:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:50:66:2B:20:C8:C9:99:72:8E:AB:9B:8D:C8:79:23:E9:04:AE
X509v3 Authority Key Identifier:
keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/89F91D1A6CB611EEBF465752C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.185.181.0/24
202.185.188.0/24
211.25.244.0/22
Signature Algorithm: sha256WithRSAEncryption
79:4a:cd:36:bd:3d:4b:37:3c:95:06:9a:36:cc:46:04:22:17:
41:74:6e:99:9b:dc:31:b5:b5:3a:47:4e:f2:2c:6d:f8:c1:22:
81:47:32:ef:5a:56:9d:d1:fa:30:a3:10:94:f6:b7:f6:56:92:
9c:50:9e:01:39:99:a3:c6:5a:8b:8f:bf:ce:3b:5f:06:e8:d0:
65:02:29:60:20:ca:d1:05:08:a4:1a:01:18:df:45:fb:c6:6c:
a6:06:5c:10:d6:8a:ce:fb:2d:79:6b:fe:1b:ae:31:7e:54:85:
a7:ed:44:0c:ff:60:c1:14:01:9e:63:49:1f:bd:0f:3c:64:f7:
00:c7:67:93:74:43:95:4c:c8:eb:b6:e9:d3:8d:e5:28:43:92:
62:6a:a2:a7:e8:56:3d:4a:6b:98:60:58:4d:6d:5c:3c:1a:88:
30:fd:51:c4:5c:0a:ca:77:da:29:75:01:e2:f7:03:81:9a:d7:
40:10:ad:c4:c2:be:c0:a3:4d:c1:2b:b6:02:11:d8:57:95:db:
06:14:66:e3:0f:7f:a1:b0:f7:6d:bb:bb:f0:38:31:21:cb:18:
80:3a:a6:a1:50:98:20:01:ee:d4:d0:07:d7:50:0b:c8:99:9a:
fc:2c:1d:33:ec:4e:4d:ca:28:04:5d:da:2c:5d:84:46:1b:0d:
41:9e:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 02:26:19 2023 by rpki-client on console-fra.rpki-client.org