Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/08390A94AA3A11EEAF95E110C4F9AE02.roa
File: 08390A94AA3A11EEAF95E110C4F9AE02.roa (raw, json)
Hash identifier: p4mBVTmVgCTog+LnP52ZMwnri6TsFy1AEIGJ7SQ0CGY=
Subject key identifier: B8:70:A9:63:11:BF:9F:A7:DE:A9:D2:6B:EC:40:E8:FC:9D:44:99:58
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 04EE
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/08390A94AA3A11EEAF95E110C4F9AE02.roa
Signing time: Wed 03 Jan 2024 13:14:32 +0000
ROA not before: Wed 03 Jan 2024 13:14:32 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 61302
IP address blocks: 122.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 09:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Jan 3 13:14:32 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65955db8-0edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:ce:75:32:d2:37:16:fd:f4:0a:72:57:e5:
67:64:13:cc:a9:11:26:e3:b1:0f:81:f9:6a:1e:cf:
7c:e8:c9:0a:5c:32:56:02:07:62:df:da:cf:5e:13:
cf:b7:a4:f2:ee:7e:ee:ee:aa:cc:dd:1f:00:99:af:
fc:a4:1e:d0:85:1d:dd:0e:07:dd:2f:71:ab:f1:52:
52:6d:76:d4:fe:12:a5:b2:6d:59:93:12:b2:cd:23:
b9:cc:08:13:3b:49:98:45:11:da:65:1b:b6:79:f8:
d4:f2:2e:0a:9d:3c:79:c2:45:37:04:fe:74:8d:2d:
f3:1f:2b:c0:00:9f:58:42:f4:4f:e0:d1:a8:f4:cb:
28:73:9c:c0:8e:68:68:ab:cf:42:ed:f1:41:f3:6a:
a9:bc:26:5a:ee:b2:51:db:48:12:b8:93:67:e3:31:
b8:0c:ea:77:88:ef:a8:80:39:fb:ef:51:e9:a8:79:
03:c2:32:04:f8:70:0a:af:73:2f:ef:23:6c:d1:16:
c9:39:b2:32:9c:23:be:ae:15:ca:65:cd:82:72:af:
e6:5d:aa:4e:61:92:b0:3c:b3:6d:bf:aa:3c:eb:ca:
6c:9b:3f:f4:69:7a:fc:13:21:6d:20:b4:49:3f:73:
70:eb:cc:a3:b4:9e:19:57:76:8d:14:6c:dc:fa:8b:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:70:A9:63:11:BF:9F:A7:DE:A9:D2:6B:EC:40:E8:FC:9D:44:99:58
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/08390A94AA3A11EEAF95E110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a1:61:de:9f:3f:4b:23:8d:0e:d4:c6:1a:5f:94:0f:29:49:
b9:c6:3a:1c:e5:37:c3:87:36:e8:c3:33:d9:39:1a:76:70:f8:
4a:22:48:d0:08:e9:d5:f7:69:5a:a7:06:a9:3c:46:05:f2:40:
da:3a:e8:c2:23:55:e3:b2:a6:88:36:8b:eb:ea:a2:9d:e8:28:
bf:45:92:69:63:97:f2:8a:68:98:7e:05:e8:a3:a8:b8:af:fd:
1d:6f:f5:8b:a5:d8:08:56:82:53:e5:aa:8b:b9:af:3e:28:ec:
d3:68:a3:fb:bb:ce:80:a2:b0:00:ad:5a:0c:10:7b:72:46:3a:
0b:29:f1:b5:a0:ac:38:10:43:b8:76:a8:a6:69:6c:14:7a:1d:
29:a7:e4:ce:1d:d3:02:ea:6d:57:85:5c:75:6d:37:c0:76:bd:
2f:49:0e:72:8e:72:28:fb:26:10:45:89:9f:8c:3e:5f:1a:76:
55:87:d6:21:4b:46:f6:dc:71:0e:35:a7:9c:f4:4a:2a:4e:5e:
90:1d:53:12:a8:fc:6e:70:1b:05:86:b6:ec:fa:2f:79:23:01:
c1:da:4c:85:c2:98:3f:db:06:75:5a:77:f8:86:6e:f5:34:a2:
5e:79:ec:b2:9e:27:e1:a6:45:3a:c7:03:4b:6c:73:a7:da:97:
35:fc:2b:80
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjQwMTAzMTMxNDMyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk1NWRiOC0wZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvfOdTLSNxb99ApyV+VnZBPMqREm47EPgflqHs986MkKXDJWAgdi39rPXhPP
t6Ty7n7u7qrM3R8Ama/8pB7QhR3dDgfdL3Gr8VJSbXbU/hKlsm1ZkxKyzSO5zAgT
O0mYRRHaZRu2efjU8i4KnTx5wkU3BP50jS3zHyvAAJ9YQvRP4NGo9Msoc5zAjmho
q89C7fFB82qpvCZa7rJR20gSuJNn4zG4DOp3iO+ogDn771HpqHkDwjIE+HAKr3Mv
7yNs0RbJObIynCO+rhXKZc2Ccq/mXapOYZKwPLNtv6o868psmz/0aXr8EyFtILRJ
P3Nw68yjtJ4ZV3aNFGzc+otuEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLhwqWMR
v5+n3qnSa+xA6PydRJlYMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvMDgzOTBBOTRB
QTNBMTFFRUFGOTVFMTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6MgAwDQYJKoZIhvcNAQELBQADggEBAFShYd6fP0sjjQ7U
xhpflA8pSbnGOhzlN8OHNujDM9k5GnZw+EoiSNAI6dX3aVqnBqk8RgXyQNo66MIj
VeOypog2i+vqop3oKL9Fkmljl/KKaJh+BeijqLiv/R1v9Yul2AhWglPlqou5rz4o
7NNoo/u7zoCisACtWgwQe3JGOgsp8bWgrDgQQ7h2qKZpbBR6HSmn5M4d0wLqbVeF
XHVtN8B2vS9JDnKOcij7JhBFiZ+MPl8adlWH1iFLRvbccQ41p5z0SipOXpAdUxKo
/G5wGwWGtuz6L3kjAcHaTIXCmD/bBnVad/iGbvU0ol557LKeJ+GmRTrHA0tsc6fa
lzX8K4A=
-----END CERTIFICATE-----
Generated at Tue Jan 16 13:17:11 2024 by rpki-client on console-fra.rpki-client.org