Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E3BFBA92258111EEA197162DC4F9AE02.roa
File: E3BFBA92258111EEA197162DC4F9AE02.roa (raw, json)
Hash identifier: QxjkyWTtmgTJMJOtKT8N7L2Kyxo4GfO0BxrsGwyLYOQ=
Subject key identifier: 5D:71:BB:7B:1D:42:29:25:D7:BF:33:80:2E:C3:7A:D9:65:68:E4:04
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 04E8
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E3BFBA92258111EEA197162DC4F9AE02.roa
Signing time: Fri 29 Dec 2023 00:42:48 +0000
ROA not before: Fri 29 Dec 2023 00:42:48 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 61302
IP address blocks: 122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Dec 29 00:42:48 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=658e1608-7737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:fe:f1:38:3b:f2:45:0f:a1:50:da:ac:99:
2a:fb:cd:1e:c5:f9:d8:71:c0:c5:67:6e:92:12:4c:
f0:b6:f5:1a:df:f0:56:09:b3:4f:c0:74:c2:b5:50:
05:1d:3e:cd:81:18:85:df:1b:90:18:09:77:c9:a2:
dc:2a:51:b9:59:a7:b9:08:20:19:64:2e:bd:3d:42:
9c:19:87:35:52:72:71:4a:05:41:68:43:0f:fa:c2:
85:73:c9:d3:b0:55:3a:52:92:9a:d8:98:e7:22:b0:
20:a4:0c:f0:b5:bd:54:45:92:6e:ed:d4:2c:af:bc:
46:8a:41:b8:23:1d:5b:c7:52:8e:4d:74:b7:9e:71:
c8:e8:51:b5:39:70:be:ce:a8:d3:66:51:d0:78:20:
9e:f3:1c:d5:c5:98:75:14:44:c0:15:15:ed:4b:5d:
08:25:6c:87:ac:fa:75:92:9a:dd:15:7b:94:ee:29:
7f:2b:ae:67:84:79:79:c9:7c:cb:dc:38:39:19:9e:
3a:b5:46:2e:c7:99:12:55:8c:19:76:90:3c:79:9d:
bb:ee:d4:dc:89:76:87:33:0c:a6:29:48:8f:e9:b7:
10:ba:4d:0f:b9:e9:a4:a6:bf:56:6f:f4:2e:a2:d4:
c1:57:ee:a3:98:2b:b4:d3:f5:db:d6:4b:3c:df:60:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:71:BB:7B:1D:42:29:25:D7:BF:33:80:2E:C3:7A:D9:65:68:E4:04
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E3BFBA92258111EEA197162DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.0.0/24
122.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0c:00:2d:21:75:ba:61:b1:3e:74:d5:b5:4a:fc:a5:f2:0e:
6b:cd:f9:14:66:6f:00:9a:97:f2:f1:21:15:08:f3:57:5f:dd:
41:1f:58:1e:b9:fe:7e:c7:64:e0:f6:14:3c:5d:8c:85:f3:7f:
bb:35:1a:aa:a0:27:8a:e9:fc:86:96:5e:ee:10:44:e0:ee:7b:
aa:ec:c3:32:34:23:7b:84:47:d2:26:5b:19:55:50:06:71:84:
f5:3e:91:29:0e:6f:7e:47:f3:d3:3e:f8:65:ad:0d:3f:d1:83:
27:37:06:b5:3e:a8:48:dc:8e:7d:d9:da:ea:0c:e6:8c:e8:1e:
fb:9d:1c:47:d6:b2:3c:76:aa:dd:d6:b6:56:9b:f8:66:44:cd:
9b:99:a3:a3:af:db:77:86:9e:80:f0:ae:a0:fe:f0:36:0f:dd:
69:5c:ba:61:73:b5:5a:7d:96:bd:2e:48:f7:9e:76:7c:2a:4b:
0d:69:c6:b2:18:bd:9b:18:31:19:0c:08:c1:2c:77:ff:05:ac:
d0:c4:57:7d:09:e3:57:08:3d:7d:a6:4b:64:7f:c9:87:b9:d7:
b4:ce:6e:47:31:0c:5e:55:0b:90:e6:58:e4:f9:de:9e:3e:ee:
9a:5c:30:14:9b:0f:ab:c4:42:c1:b3:19:53:c2:6d:c6:3e:2d:
8b:a5:5c:e9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjMxMjI5MDA0MjQ4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThlMTYwOC03NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYD+8Tg78kUPoVDarJkq+80exfnYccDFZ26SEkzwtvUa3/BWCbNPwHTCtVAF
HT7NgRiF3xuQGAl3yaLcKlG5Wae5CCAZZC69PUKcGYc1UnJxSgVBaEMP+sKFc8nT
sFU6UpKa2JjnIrAgpAzwtb1URZJu7dQsr7xGikG4Ix1bx1KOTXS3nnHI6FG1OXC+
zqjTZlHQeCCe8xzVxZh1FETAFRXtS10IJWyHrPp1kprdFXuU7il/K65nhHl5yXzL
3Dg5GZ46tUYux5kSVYwZdpA8eZ277tTciXaHMwymKUiP6bcQuk0Puemkpr9Wb/Qu
otTBV+6jmCu00/Xb1ks832D7RQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF1xu3sd
Qikl178zgC7DetllaOQEMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvRTNCRkJBOTIy
NTgxMTFFRUExOTcxNjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB6MgADBAB6MgIwDQYJKoZIhvcNAQELBQADggEBAAcMAC0h
dbphsT501bVK/KXyDmvN+RRmbwCal/LxIRUI81df3UEfWB65/n7HZOD2FDxdjIXz
f7s1GqqgJ4rp/IaWXu4QRODue6rswzI0I3uER9ImWxlVUAZxhPU+kSkOb35H89M+
+GWtDT/Rgyc3BrU+qEjcjn3Z2uoM5ozoHvudHEfWsjx2qt3Wtlab+GZEzZuZo6Ov
23eGnoDwrqD+8DYP3WlcumFztVp9lr0uSPeednwqSw1pxrIYvZsYMRkMCMEsd/8F
rNDEV30J41cIPX2mS2R/yYe517TObkcxDF5VC5DmWOT53p4+7ppcMBSbD6vEQsGz
GVPCbcY+LYulXOk=
-----END CERTIFICATE-----
Generated at Wed Jan 3 16:21:21 2024 by rpki-client on console-fra.rpki-client.org