Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/5D80A6A2552B11ED81EFA355C4F9AE02.roa
File: 5D80A6A2552B11ED81EFA355C4F9AE02.roa (raw, json)
Hash identifier: xA+LhFzneiAC6qESmVDTozVxqK4sk/5YZvEXlu4XyIk=
Subject key identifier: 48:94:35:2B:DC:C1:C1:1E:FC:A5:A5:80:86:D9:5A:BE:92:42:6B:D8
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3385
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/5D80A6A2552B11ED81EFA355C4F9AE02.roa
Signing time: Wed 26 Oct 2022 13:00:27 +0000
ROA not before: Wed 26 Oct 2022 13:00:27 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 140900
IP address blocks: 175.29.112.0/24 maxlen: 24
175.29.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13189 (0x3385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 26 13:00:27 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63592f6b-9d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:98:74:d8:d0:36:c4:3f:1d:72:64:2b:43:
bc:34:78:ad:14:f2:df:42:61:37:72:a0:68:22:e3:
c1:1c:e8:8d:38:c5:72:0c:b5:44:f4:71:eb:58:9d:
9b:b5:c0:d1:d8:dd:eb:35:36:3e:8e:a9:72:d4:c0:
63:d5:f7:1c:92:5c:97:84:91:74:a7:55:57:11:0b:
38:4b:68:36:8a:a8:00:ac:57:00:6b:87:a8:2f:7e:
14:63:5c:ff:80:77:ae:f5:17:80:75:e7:0e:97:b0:
85:72:b4:ad:cd:7d:52:a3:fa:8f:dc:12:08:a5:01:
c9:8b:03:93:ac:7a:b7:a0:56:55:92:aa:11:5b:66:
46:52:7d:e6:a2:c5:99:b3:5d:75:0c:c5:46:47:5e:
0d:b0:01:d5:a6:b2:a1:80:33:f2:d4:cd:42:d4:cf:
47:98:50:18:e9:9c:cb:1b:55:02:fe:6f:c7:ed:56:
4c:dc:ad:bf:8b:99:b2:5b:a3:c3:91:6a:4b:fe:66:
e4:b2:13:58:fa:13:37:8e:81:5f:48:3c:ff:bb:33:
2b:6f:55:24:28:13:ef:e7:b3:d7:25:ee:6a:db:2b:
11:55:6d:e8:68:65:f1:9a:1e:0f:c7:d6:76:db:bb:
74:79:05:5b:85:84:88:96:1c:59:6b:55:63:68:2d:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:35:2B:DC:C1:C1:1E:FC:A5:A5:80:86:D9:5A:BE:92:42:6B:D8
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/5D80A6A2552B11ED81EFA355C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.112.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:cd:03:8b:91:36:c4:d7:fb:3b:bf:2a:29:79:af:f3:df:57:
59:c6:bc:e2:aa:79:bc:f8:0d:9a:22:23:59:e9:fc:52:ca:f6:
61:01:ab:cb:71:dd:f8:b3:db:db:ab:7e:1b:01:ae:82:39:75:
04:2d:60:02:1f:d7:e2:d7:2b:22:dd:33:de:a1:df:b0:38:f4:
98:f1:f1:85:61:52:0f:f1:d3:bd:c2:a8:18:98:d1:1b:40:fd:
1f:fb:13:9e:0b:b1:9f:16:15:6a:90:10:95:b5:db:7c:cf:b9:
d1:85:31:74:f3:3e:0e:b0:c2:bf:a2:c2:9a:14:e1:18:38:78:
96:50:8a:bf:c9:73:11:11:5b:17:54:a0:8c:71:b6:15:30:06:
96:1e:8f:f5:8d:ca:22:46:c9:9f:90:12:1c:d4:77:a2:e2:f9:
43:70:91:6b:19:7a:3c:ed:b2:6a:09:f3:26:9b:33:8d:e7:a1:
3a:ba:1c:7c:f2:48:ef:ac:6b:ce:ad:cb:26:00:a9:ee:72:82:
dd:3a:2e:2e:d0:79:24:15:0e:48:9a:c8:47:35:1c:49:44:de:
41:92:5a:eb:d1:8f:e1:7c:7a:d4:cc:86:ec:49:1c:25:4a:3d:
6b:89:b8:0e:89:7c:4c:1e:73:3b:e9:98:67:13:ed:5d:a0:8a:
8c:ba:dc:75
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjIxMDI2MTMwMDI3WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzU5MmY2Yi05ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA11qYdNjQNsQ/HXJkK0O8NHitFPLfQmE3cqBoIuPBHOiNOMVyDLVE9HHrWJ2b
tcDR2N3rNTY+jqly1MBj1fccklyXhJF0p1VXEQs4S2g2iqgArFcAa4eoL34UY1z/
gHeu9ReAdecOl7CFcrStzX1So/qP3BIIpQHJiwOTrHq3oFZVkqoRW2ZGUn3mosWZ
s111DMVGR14NsAHVprKhgDPy1M1C1M9HmFAY6ZzLG1UC/m/H7VZM3K2/i5myW6PD
kWpL/mbkshNY+hM3joFfSDz/uzMrb1UkKBPv57PXJe5q2ysRVW3oaGXxmh4Px9Z2
27t0eQVbhYSIlhxZa1VjaC2cEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEiUNSvc
wcEe/KWlgIbZWr6SQmvYMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvNUQ4MEE2QTI1
NTJCMTFFRDgxRUZBMzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGvHXAwDQYJKoZIhvcNAQELBQADggEBACvNA4uRNsTX+zu/
Kil5r/PfV1nGvOKqebz4DZoiI1np/FLK9mEBq8tx3fiz29urfhsBroI5dQQtYAIf
1+LXKyLdM96h37A49Jjx8YVhUg/x073CqBiY0RtA/R/7E54LsZ8WFWqQEJW123zP
udGFMXTzPg6wwr+iwpoU4Rg4eJZQir/JcxERWxdUoIxxthUwBpYej/WNyiJGyZ+Q
EhzUd6Li+UNwkWsZejztsmoJ8yabM43noTq6HHzySO+sa86tyyYAqe5ygt06Li7Q
eSQVDkiayEc1HElE3kGSWuvRj+F8etTMhuxJHCVKPWuJuA6JfEweczvpmGcT7V2g
ioy63HU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org