Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/98D1020C806111EF9876433EC4F9AE02.roa
File: 98D1020C806111EF9876433EC4F9AE02.roa (raw, json)
Hash identifier: vomkfk7XpY5rNGZTRB7ph/USIRriuqjHBWpUDoUE7C0=
Subject key identifier: 5E:C9:73:24:C4:F4:7B:9B:C3:A9:E3:D8:47:FD:0B:75:8A:4D:9A:48
Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Certificate serial: 0185
Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/98D1020C806111EF9876433EC4F9AE02.roa
Signing time: Wed 02 Oct 2024 01:56:54 +0000
ROA not before: Wed 02 Oct 2024 01:56:54 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 141196
IP address blocks: 202.81.224.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Validity
Not Before: Oct 2 01:56:54 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66fca865-f501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:bc:3a:05:8e:cc:eb:b6:bf:61:a6:15:bc:
99:f7:a3:bc:19:dd:c5:c7:d4:ea:98:3b:dd:ac:72:
63:65:66:8c:b8:d5:d1:65:59:63:db:9c:1e:b6:cd:
25:a6:6d:b1:76:3b:4a:27:14:ba:6b:b5:0f:93:df:
df:c5:75:58:65:e9:5c:ab:49:f0:73:f0:71:52:bf:
38:07:50:39:73:c6:05:82:e5:24:3b:20:8c:90:d0:
3a:bd:49:eb:70:9a:ea:48:01:da:9c:09:37:f7:18:
d2:74:28:32:25:17:a2:3b:2f:ca:b5:03:ff:e3:1b:
5a:4e:08:26:18:9c:2b:d3:ef:25:bc:9d:5b:f3:9e:
73:67:a1:8b:6c:00:d5:c8:c4:cc:3e:75:4b:25:ac:
89:90:e2:b5:3b:4c:c4:09:57:c6:91:47:91:b1:69:
7c:f1:a1:04:32:16:b1:8a:c6:e1:bd:21:7e:59:8b:
fb:d9:fa:cf:a4:58:98:41:48:40:28:5e:ad:92:ec:
3c:45:48:f8:85:b9:d2:e1:43:8b:5b:a8:74:cc:15:
1a:a0:71:04:87:dd:69:c6:a9:07:5b:16:8e:cf:ba:
2d:71:a2:3a:95:f2:83:56:93:dd:86:8e:89:a7:22:
fe:96:a7:57:08:f5:b7:0f:82:44:60:17:37:2f:49:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C9:73:24:C4:F4:7B:9B:C3:A9:E3:D8:47:FD:0B:75:8A:4D:9A:48
X509v3 Authority Key Identifier:
keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/98D1020C806111EF9876433EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.81.224.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:1c:0c:14:62:61:d3:1d:28:dd:d4:00:c6:60:e5:93:32:70:
16:62:b1:90:2b:82:f1:a3:92:92:54:e7:6b:33:8e:14:e2:bb:
b6:72:9b:26:49:67:59:dd:f3:a2:99:4b:68:61:41:bb:5e:db:
a7:4e:52:c8:56:9a:34:b0:8e:d2:97:54:8e:c0:2b:3c:9a:c5:
71:b9:4d:4a:a9:b4:a0:f1:3e:af:4e:04:c2:89:c4:f7:d5:0a:
9f:78:98:6a:64:16:8a:23:74:15:40:fc:d7:e1:24:e4:2a:6b:
0a:f1:dc:42:db:32:e7:1a:3c:ac:26:8a:71:08:0d:ba:b2:7b:
e0:92:d3:1a:89:05:65:70:b9:71:2b:5e:4a:4d:32:c3:92:13:
26:29:f5:5a:6e:f2:f9:0e:fe:cb:48:49:b3:b7:2d:3a:a4:d5:
2c:9f:f9:82:21:c7:bf:d9:9c:ac:a4:57:07:a3:61:24:c3:c3:
7b:2d:f8:ae:d3:5a:ab:0f:0f:4d:00:50:79:cc:df:36:19:78:
b9:06:89:02:7d:bb:82:81:e8:f6:64:e2:d9:d0:5c:5d:7f:fc:
2a:30:1f:c4:50:d6:0f:b2:f5:98:bc:94:44:d1:46:b0:7a:84:
6c:6a:6b:e3:76:c8:5d:ae:4a:19:0c:e8:20:78:8d:34:ac:0c:
f6:52:c8:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC
ODQxQTYwQzIwHhcNMjQxMDAyMDE1NjU0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZjYTg2NS1mNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3BC8OgWOzOu2v2GmFbyZ96O8Gd3Fx9TqmDvdrHJjZWaMuNXRZVlj25wets0l
pm2xdjtKJxS6a7UPk9/fxXVYZelcq0nwc/BxUr84B1A5c8YFguUkOyCMkNA6vUnr
cJrqSAHanAk39xjSdCgyJReiOy/KtQP/4xtaTggmGJwr0+8lvJ1b855zZ6GLbADV
yMTMPnVLJayJkOK1O0zECVfGkUeRsWl88aEEMhaxisbhvSF+WYv72frPpFiYQUhA
KF6tkuw8RUj4hbnS4UOLW6h0zBUaoHEEh91pxqkHWxaOz7otcaI6lfKDVpPdho6J
pyL+lqdXCPW3D4JEYBc3L0kRXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF7JcyTE
9Hubw6nj2Ef9C3WKTZpIMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz
MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEQ2RkMvODg3NTkxODI0MzJGMTFFREJCRDk4RjVDQzRGOUFFMDIvOThEMTAyMEM4
MDYxMTFFRjk4NzY0MzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKUeAwDQYJKoZIhvcNAQELBQADggEBANMcDBRiYdMdKN3U
AMZg5ZMycBZisZArgvGjkpJU52szjhTiu7ZymyZJZ1nd86KZS2hhQbte26dOUshW
mjSwjtKXVI7AKzyaxXG5TUqptKDxPq9OBMKJxPfVCp94mGpkFoojdBVA/NfhJOQq
awrx3ELbMucaPKwminEIDbqye+CS0xqJBWVwuXErXkpNMsOSEyYp9Vpu8vkO/stI
SbO3LTqk1Syf+YIhx7/ZnKykVwejYSTDw3st+K7TWqsPD00AUHnM3zYZeLkGiQJ9
u4KB6PZk4tnQXF1//CowH8RQ1g+y9Zi8lETRRrB6hGxqa+N2yF2uShkM6CB4jTSs
DPZSyNk=
-----END CERTIFICATE-----
Generated at Wed Oct 16 09:53:48 2024 by rpki-client on console-fra.rpki-client.org