Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/07B203CC4B4811EBB0167D63C4F9AE02.roa
File: 07B203CC4B4811EBB0167D63C4F9AE02.roa (raw, json)
Hash identifier: L/EvhAAJCs6iOjEKv5I4nbWGyJvwxVTJ8E7rLgiZUbo=
Subject key identifier: 67:BF:EB:C8:4A:00:67:CA:A7:DD:73:F0:7E:CF:15:81:F1:68:E4:F1
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3322
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/07B203CC4B4811EBB0167D63C4F9AE02.roa
Signing time: Sat 01 Oct 2022 15:10:51 +0000
ROA not before: Sat 01 Oct 2022 15:10:51 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 134496
IP address blocks: 117.121.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13090 (0x3322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 1 15:10:51 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6338587b-7643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:52:6b:65:25:22:76:89:07:61:7a:bb:f7:
5e:99:8f:81:ab:7f:01:bb:d0:80:fa:0c:67:18:6f:
fa:d4:cc:9d:51:c0:93:a1:ab:2a:9a:a8:aa:32:d8:
d1:74:dc:76:cf:a0:79:e1:27:2c:34:1f:1f:87:7b:
19:42:4e:84:81:97:f1:7d:ac:1c:ef:17:2f:94:72:
60:90:21:12:27:5f:38:81:a7:ae:03:59:d9:df:57:
4e:48:fc:f6:16:f6:8b:30:f3:e6:2f:d1:72:a0:73:
b8:8f:d7:f2:bd:19:08:58:8b:be:8c:a2:72:5f:66:
d6:b3:12:9e:ea:d5:aa:b6:88:3d:48:fb:0e:25:b9:
50:9f:c8:ec:11:5a:61:94:64:a8:e4:f0:ee:3b:ff:
9b:98:98:6f:98:0a:d5:48:0a:64:bd:9c:ae:c7:bb:
1d:d4:01:cf:4b:f6:aa:a0:86:f7:3e:2f:6b:17:b3:
25:52:0c:c4:6f:d3:2c:cb:82:e7:42:03:e3:f6:54:
82:33:e5:b6:f9:fe:49:89:36:df:fc:79:7c:d5:f4:
e4:de:72:04:6a:ff:ab:5c:44:f1:ef:f1:0d:8f:10:
a8:04:9d:a2:40:c8:2b:77:3f:0c:09:07:85:30:28:
d4:99:62:61:28:6a:bb:71:7f:5a:da:f9:ae:35:a9:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:EB:C8:4A:00:67:CA:A7:DD:73:F0:7E:CF:15:81:F1:68:E4:F1
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/07B203CC4B4811EBB0167D63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.243.0/24
Signature Algorithm: sha256WithRSAEncryption
22:26:34:e5:87:c2:54:a0:c9:a3:84:3c:76:48:03:2b:73:21:
ba:12:65:c0:6a:ab:61:fd:b2:95:98:32:98:62:2c:8d:73:63:
e5:54:23:99:c7:0d:f0:58:b1:61:fa:03:7b:9f:e1:e3:cd:1a:
37:1f:1c:8c:57:98:cb:d9:ce:36:1a:be:e2:25:75:49:05:24:
62:44:d8:71:3e:0c:ff:a2:27:9b:4e:e2:59:e6:4c:a7:0e:75:
92:ba:6f:c8:77:81:98:b0:e9:60:59:cd:81:d2:42:d9:9e:d7:
92:7c:ed:0a:eb:ca:15:f8:89:18:0d:e1:a9:47:b8:df:e4:cf:
89:7e:75:c2:84:62:3c:5e:28:20:1f:8f:b7:22:20:b4:ce:46:
0e:12:b1:27:2c:8d:3c:00:06:e4:40:ba:55:93:b7:05:2f:92:
4c:d3:87:3f:24:cf:fb:14:7a:f4:59:d6:24:b4:82:d6:03:bd:
59:90:7a:62:f1:f0:cf:ba:bd:88:2f:b5:6b:c6:f0:de:e7:8a:
eb:b3:da:7c:fb:88:e4:7a:1a:6b:54:58:2b:77:bb:57:57:98:
66:96:b9:a7:7d:7b:1f:f1:ec:b2:4b:a7:b3:de:2c:45:f8:2d:
6f:2e:ee:04:a3:b4:1e:e7:00:1a:6e:67:db:d0:c7:f1:8b:be:
d7:35:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 00:11:17 2023 by rpki-client on console-ams.rpki-client.org