Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/64A2B982E67211EEB3DACC2AC4F9AE02.roa
File: 64A2B982E67211EEB3DACC2AC4F9AE02.roa (raw, json)
Hash identifier: zvHQyTu53eFJCdrGA//zWaSAxwwl5TIllUByTjwQKYw=
Subject key identifier: 21:A5:48:2F:01:66:99:14:37:99:C2:E9:56:43:08:BF:C7:1B:8F:67
Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial: 1C
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/64A2B982E67211EEB3DACC2AC4F9AE02.roa
Signing time: Thu 09 May 2024 03:48:23 +0000
ROA not before: Thu 09 May 2024 03:48:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152634
IP address blocks: 202.36.116.0/23 maxlen: 24
2001:df3:88c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 06:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Validity
Not Before: May 9 03:48:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663c4787-2055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:c8:e6:1b:f6:86:1f:cc:0b:7d:3f:71:04:
1c:fa:29:14:bb:ee:04:a1:13:fa:ee:d7:a6:c9:17:
4a:9e:79:15:6b:df:bf:66:58:95:af:25:28:92:29:
f5:1c:61:50:78:64:4c:33:f0:d2:b9:ee:67:76:43:
eb:2b:da:2a:80:18:77:a3:f7:3f:bb:0e:5b:c7:c5:
11:9b:28:68:fa:6c:9e:2e:39:eb:79:50:29:44:da:
e4:43:6b:c4:1f:d2:29:cd:23:7b:ba:39:42:e5:cf:
42:f2:61:2f:d8:52:b2:42:7a:e3:9b:e0:a4:9f:83:
a5:e1:e2:7d:1b:6c:f8:69:1d:dd:11:6b:cf:94:de:
75:41:1a:b1:bd:2d:fe:cf:a8:4a:2f:25:9a:70:d0:
87:15:4d:25:4f:6d:7e:4c:6a:96:7d:d2:62:0f:4c:
20:ef:45:ce:d3:e3:46:c4:22:2a:50:1e:db:e5:e0:
34:49:6c:56:55:ff:05:ae:bc:4a:e8:58:45:24:4b:
7a:0e:94:6e:4c:18:5b:6a:76:31:1c:d4:b4:45:d3:
7e:4a:11:3c:56:35:59:5a:a8:a7:81:56:46:92:c5:
6c:1e:99:fd:54:6e:bb:04:6a:cc:4a:e4:f9:da:da:
28:99:3f:21:49:f4:3b:52:b9:f9:b5:3e:5a:fd:d8:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A5:48:2F:01:66:99:14:37:99:C2:E9:56:43:08:BF:C7:1B:8F:67
X509v3 Authority Key Identifier:
keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/64A2B982E67211EEB3DACC2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.36.116.0/23
IPv6:
2001:df3:88c0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c8:55:3f:c3:b3:2a:9a:c8:65:7f:52:f2:c5:4e:fb:ad:25:
8a:0e:c8:04:e7:60:3d:e6:2b:77:ea:39:6d:91:f3:1c:6d:5d:
67:81:b5:8b:82:4d:14:d9:12:04:b0:f9:94:c1:c4:5f:f3:76:
9e:de:b1:c0:32:c1:7a:4f:89:7b:34:8d:fc:3e:5e:07:46:08:
3b:e9:f1:3f:98:92:65:92:b6:72:ae:d6:cc:ca:d4:42:71:7f:
71:7d:53:d6:dc:63:95:c1:b1:94:6c:16:40:74:0b:8f:d4:10:
17:c2:5c:e0:cd:a9:f1:a6:90:5d:b2:e3:5a:39:b9:aa:32:a7:
99:eb:2e:9e:17:3d:51:48:b7:44:cd:a3:bd:4c:ce:0c:72:db:
9d:8f:ce:18:9b:7e:c3:4b:fd:fe:fe:ac:d1:49:5a:00:3d:08:
9e:3a:f5:a8:c9:f8:ad:df:69:67:0e:11:fa:3c:72:12:c5:6a:
f1:2b:04:7e:9d:2c:f1:89:c8:c0:73:1d:a9:cd:ba:1f:b9:b2:
32:b8:4e:24:9d:c6:17:01:49:02:c3:c9:c7:19:17:14:fe:4c:
61:b0:05:a0:a1:e5:b5:e0:a5:8e:46:8c:af:8b:05:06:c1:ac:
14:f6:35:22:ce:b7:4b:16:5e:dc:4e:76:52:b1:a5:1d:cc:a3:
33:83:bd:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTVERjExMC8GA1UEBRMoNzVEMzE5Njk1NjlCNUMwREYwREE1M0IzRDkzMTM2NjMz
NDcyMTA4MjAeFw0yNDA1MDkwMzQ4MjNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2M2M0Nzg3LTIwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0gcjmG/aGH8wLfT9xBBz6KRS77gShE/ru16bJF0qeeRVr379mWJWvJSiSKfUc
YVB4ZEwz8NK57md2Q+sr2iqAGHej9z+7DlvHxRGbKGj6bJ4uOet5UClE2uRDa8Qf
0inNI3u6OULlz0LyYS/YUrJCeuOb4KSfg6Xh4n0bbPhpHd0Ra8+U3nVBGrG9Lf7P
qEovJZpw0IcVTSVPbX5MapZ90mIPTCDvRc7T40bEIipQHtvl4DRJbFZV/wWuvEro
WEUkS3oOlG5MGFtqdjEc1LRF035KETxWNVlaqKeBVkaSxWwemf1UbrsEasxK5Pna
2iiZPyFJ9DtSufm1Plr92AOdAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIaVILwFm
mRQ3mcLpVkMIv8cbj2cwHwYDVR0jBBgwFoAUddMZaVabXA3w2lOz2TE2YzRyEIIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNURGL0NCRUZDRDlDRTY3
MTExRUVCN0JDQkUyOUM0RjlBRTAyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJ
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZGRNWmFWYWJYQTN3MmxPejJURTJZelJ5RUlJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi82NEEyQjk4MkU2
NzIxMUVFQjNEQUNDMkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAcokdDAPBAIAAjAJAwcAIAEN84jAMA0GCSqGSIb3DQEBCwUA
A4IBAQAvyFU/w7Mqmshlf1LyxU77rSWKDsgE52A95it36jltkfMcbV1ngbWLgk0U
2RIEsPmUwcRf83ae3rHAMsF6T4l7NI38Pl4HRgg76fE/mJJlkrZyrtbMytRCcX9x
fVPW3GOVwbGUbBZAdAuP1BAXwlzgzanxppBdsuNaObmqMqeZ6y6eFz1RSLdEzaO9
TM4Mctudj84Ym37DS/3+/qzRSVoAPQieOvWoyfit32lnDhH6PHISxWrxKwR+nSzx
icjAcx2pzbofubIyuE4kncYXAUkCw8nHGRcU/kxhsAWgoeW14KWORoyviwUGwawU
9jUizrdLFl7cTnZSsaUdzKMzg73n
-----END CERTIFICATE-----
Generated at Tue Aug 20 09:33:11 2024 by rpki-client on console-fra.rpki-client.org