Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/C2A68FD8A34A11EE8696E97EC4F9AE02.roa
File: C2A68FD8A34A11EE8696E97EC4F9AE02.roa (raw, json)
Hash identifier: mYZOJV90gsz51LaOO81nSi/ZKIvwL6i4Xl8X0rdvbsI=
Subject key identifier: BC:06:87:82:A8:17:C4:ED:48:FA:05:99:62:80:74:67:6C:7E:E0:CA
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 056A
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/C2A68FD8A34A11EE8696E97EC4F9AE02.roa
Signing time: Mon 25 Dec 2023 17:26:39 +0000
ROA not before: Mon 25 Dec 2023 17:26:39 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 47813
IP address blocks: 43.255.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 15 Jan 2024 17:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Dec 25 17:26:39 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6589bb4e-9d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:22:72:54:81:ef:b5:9b:c8:81:60:8d:d1:
dd:8a:be:b2:5f:75:ef:ef:69:c1:81:e2:e3:d0:eb:
7f:91:c8:6f:7e:db:28:8d:f9:88:c3:b5:46:5b:89:
c8:53:1f:f0:5e:0e:f0:a7:81:a1:d6:49:37:2b:01:
06:a5:23:6b:ed:6e:b2:1c:d5:25:30:d0:9f:15:69:
98:36:44:0f:e2:26:56:98:5e:c4:77:43:91:2b:f7:
fa:00:ba:22:b3:20:6e:17:06:73:08:0e:2f:35:c3:
36:64:b0:e0:9d:d9:2b:1b:ee:f6:38:34:91:4d:0b:
b4:cc:bf:bd:3c:0d:05:13:1b:a0:1c:8f:52:bd:e1:
d4:25:e2:8c:ee:d3:01:7f:0a:f9:19:5c:71:71:03:
b4:6c:09:30:d3:11:8e:ce:f7:1b:71:71:3f:87:0c:
cb:0b:08:48:0e:2b:98:08:fa:e8:a9:6e:43:e5:21:
93:a8:42:45:bd:0c:f0:4f:49:25:14:69:cf:5d:fa:
e2:d7:da:88:ef:22:e6:e5:39:f5:8a:51:47:bd:d8:
9c:53:cb:c6:69:df:89:6e:61:36:ec:5f:98:fc:3b:
f7:10:e6:39:9b:a9:8c:14:03:9f:46:70:dc:21:d9:
77:7a:ac:c7:50:97:7c:6e:78:39:8a:60:62:00:1d:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:87:82:A8:17:C4:ED:48:FA:05:99:62:80:74:67:6C:7E:E0:CA
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/C2A68FD8A34A11EE8696E97EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.158.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:b2:85:35:93:c9:13:b4:d0:75:1a:63:29:dc:f3:f2:94:18:
88:fd:77:85:49:1c:3e:9e:ae:82:e0:d4:5a:e8:ad:7f:4d:32:
7c:e8:10:6b:bd:2c:a1:61:21:04:fa:3d:90:88:30:8b:a7:bf:
93:97:a8:d7:67:44:23:6a:8d:c1:5b:74:3f:5b:51:65:64:91:
da:b9:71:7d:32:d5:ce:bb:ad:f6:6a:1c:50:ec:08:ec:fb:32:
dd:82:40:7c:46:f2:13:a3:e7:06:cd:bc:9d:6b:1a:c1:4e:e2:
91:ba:99:35:7d:a4:eb:bc:b3:2a:f3:67:4f:d6:aa:33:26:fe:
6c:fb:71:8f:ca:3d:f9:de:88:c8:a2:bd:25:6a:fa:e5:ab:de:
3e:e8:44:d4:45:f0:5c:d2:ec:9d:0e:7e:7c:9f:aa:e1:78:3e:
20:77:e0:99:e4:07:59:59:64:af:9d:ef:c2:b7:2c:63:d7:43:
77:4e:b9:94:e1:ff:da:81:a6:cb:d8:e2:31:9f:8f:1c:da:a3:
fc:25:b8:5f:7a:aa:c4:88:64:6e:1d:9a:10:78:43:fc:c2:10:
69:dd:97:04:8b:eb:5d:3a:22:1a:3c:7f:f5:8b:0d:c7:a0:8c:
e9:e8:e0:6e:d1:8a:9c:96:a6:fc:8c:cf:7b:0f:5d:5e:7d:c0:
6f:ba:ce:0b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF
QTNDNzEwMTMwHhcNMjMxMjI1MTcyNjM5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTg5YmI0ZS05ZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RUiclSB77WbyIFgjdHdir6yX3Xv72nBgeLj0Ot/kchvftsojfmIw7VGW4nI
Ux/wXg7wp4Gh1kk3KwEGpSNr7W6yHNUlMNCfFWmYNkQP4iZWmF7Ed0ORK/f6ALoi
syBuFwZzCA4vNcM2ZLDgndkrG+72ODSRTQu0zL+9PA0FExugHI9SveHUJeKM7tMB
fwr5GVxxcQO0bAkw0xGOzvcbcXE/hwzLCwhIDiuYCProqW5D5SGTqEJFvQzwT0kl
FGnPXfri19qI7yLm5Tn1ilFHvdicU8vGad+JbmE27F+Y/Dv3EOY5m6mMFAOfRnDc
Idl3eqzHUJd8bng5imBiAB2LJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLwGh4Ko
F8TtSPoFmWKAdGdsfuDKMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2
NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvQzJBNjhGRDhB
MzRBMTFFRTg2OTZFOTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEr/54wDQYJKoZIhvcNAQELBQADggEBAMOyhTWTyRO00HUa
Yync8/KUGIj9d4VJHD6eroLg1FrorX9NMnzoEGu9LKFhIQT6PZCIMIunv5OXqNdn
RCNqjcFbdD9bUWVkkdq5cX0y1c67rfZqHFDsCOz7Mt2CQHxG8hOj5wbNvJ1rGsFO
4pG6mTV9pOu8syrzZ0/WqjMm/mz7cY/KPfneiMiivSVq+uWr3j7oRNRF8FzS7J0O
fnyfquF4PiB34JnkB1lZZK+d78K3LGPXQ3dOuZTh/9qBpsvY4jGfjxzao/wluF96
qsSIZG4dmhB4Q/zCEGndlwSL6106Iho8f/WLDcegjOno4G7RipyWpvyMz3sPXV59
wG+6zgs=
-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:29 2024 by rpki-client on console-ams.rpki-client.org