Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/2F4D6E4A857A11ECA3F32D50C4F9AE02.roa
File: 2F4D6E4A857A11ECA3F32D50C4F9AE02.roa (raw, json)
Hash identifier: HYHUcmd8xoslokRWgiIBxzbWE78or8dB8ziGWFUZpc8=
Subject key identifier: C6:3A:62:AC:DB:23:97:8A:79:51:C4:0B:5B:14:E1:24:1D:83:78:CF
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 33B3
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/2F4D6E4A857A11ECA3F32D50C4F9AE02.roa
Signing time: Wed 20 Sep 2023 14:50:51 +0000
ROA not before: Wed 20 Sep 2023 14:50:51 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 140045
IP address blocks: 110.39.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13235 (0x33b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Sep 20 14:50:51 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=650b06cb-ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:5e:98:f1:48:4c:d4:4f:22:a3:7d:44:ad:
e1:d2:65:79:57:1d:70:2b:ce:6a:13:44:1a:d6:9d:
40:f0:10:9f:bc:a7:0b:ad:9f:48:b2:26:c0:ba:30:
1e:41:47:4b:0f:01:f0:c5:31:77:98:3b:da:3a:50:
97:51:6a:76:f6:ab:76:01:8b:3f:35:9f:e2:6a:69:
05:99:93:88:24:2a:dc:a9:4f:11:83:f4:06:e7:f5:
d0:90:af:58:10:a7:28:f0:d3:d3:3d:27:35:db:e6:
40:3d:8f:f0:bc:32:bb:18:b7:b6:0e:fa:1a:5c:98:
35:ec:44:e0:36:73:a8:62:34:9f:aa:ef:b0:14:94:
a2:af:89:79:e8:f1:64:bb:02:5b:c9:6a:e1:6f:c8:
a7:61:95:f3:4a:86:0a:2f:1f:02:da:86:cc:9e:62:
28:31:06:77:34:44:5e:7b:55:f4:ca:46:4a:10:97:
5a:d0:2e:02:45:7f:79:0a:b6:e4:ca:7b:73:03:de:
b9:43:de:28:f9:37:e2:82:4d:d4:9f:a5:3c:42:44:
a0:91:12:99:4d:05:9c:6d:88:98:d0:83:82:c6:99:
c1:71:21:50:78:13:5c:35:fe:e4:c5:cb:9c:b1:c2:
4d:01:fb:dc:6f:23:7c:0b:9c:0e:1d:e0:5b:d3:2c:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:62:AC:DB:23:97:8A:79:51:C4:0B:5B:14:E1:24:1D:83:78:CF
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/2F4D6E4A857A11ECA3F32D50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.39.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:72:85:89:35:71:8e:44:8d:cf:fb:da:2f:4b:e8:71:e4:5d:
c0:14:94:60:29:46:44:7b:fa:94:a4:3f:33:95:cf:15:d5:4c:
9d:c8:ea:b0:a6:7f:d0:2d:4d:ac:4c:e0:14:97:20:73:ad:c7:
3f:b1:ff:d3:d4:f7:eb:1e:0b:6e:fe:88:87:40:c8:52:19:fc:
76:1f:10:ef:99:3c:b0:73:7e:61:1c:03:d6:5a:5b:7e:1b:f1:
5b:4c:33:96:5a:43:22:9a:ce:a7:bd:a8:0e:03:9d:58:bd:2d:
d1:aa:8d:ec:b4:85:f8:61:7e:09:27:14:d1:47:49:d9:7b:1d:
cf:27:52:7a:c1:fc:7b:27:4d:dc:cf:3d:81:98:d7:a7:ae:17:
59:78:b0:bc:cf:7d:3f:11:e8:15:ea:7f:64:3e:51:b3:2a:43:
46:59:f5:e3:79:2e:10:48:97:0b:91:28:0e:72:8f:f9:9e:8c:
69:a4:0c:fd:7e:cd:ed:32:15:8e:42:f0:86:6e:f9:29:47:88:
8e:dd:7d:e5:1f:ed:5b:86:14:b1:77:5f:f3:a2:42:d1:40:94:
f9:d6:8f:ad:34:1b:87:1b:b1:7b:4e:1a:c6:79:64:f0:7d:57:
5d:fd:59:b1:f0:fd:dd:69:6e:0c:83:63:40:e6:2c:10:72:a7:
4c:8f:d1:80
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0
MzEzMEMzRjIwHhcNMjMwOTIwMTQ1MDUxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBiMDZjYi1iYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOhemPFITNRPIqN9RK3h0mV5Vx1wK85qE0Qa1p1A8BCfvKcLrZ9IsibAujAe
QUdLDwHwxTF3mDvaOlCXUWp29qt2AYs/NZ/iamkFmZOIJCrcqU8Rg/QG5/XQkK9Y
EKco8NPTPSc12+ZAPY/wvDK7GLe2DvoaXJg17ETgNnOoYjSfqu+wFJSir4l56PFk
uwJbyWrhb8inYZXzSoYKLx8C2obMnmIoMQZ3NERee1X0ykZKEJda0C4CRX95Crbk
yntzA965Q94o+Tfigk3Un6U8QkSgkRKZTQWcbYiY0IOCxpnBcSFQeBNcNf7kxcuc
scJNAfvcbyN8C5wOHeBb0yz2UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMY6Yqzb
I5eKeVHEC1sU4SQdg3jPMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE
OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0ZGQjAvRTU1N0MwMDAxRDkyMTFFMjkzM0EyMUY2MDhCMDJDRDIvMkY0RDZFNEE4
NTdBMTFFQ0EzRjMyRDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABuJz8wDQYJKoZIhvcNAQELBQADggEBAKRyhYk1cY5Ejc/7
2i9L6HHkXcAUlGApRkR7+pSkPzOVzxXVTJ3I6rCmf9AtTaxM4BSXIHOtxz+x/9PU
9+seC27+iIdAyFIZ/HYfEO+ZPLBzfmEcA9ZaW34b8VtMM5ZaQyKazqe9qA4DnVi9
LdGqjey0hfhhfgknFNFHSdl7Hc8nUnrB/HsnTdzPPYGY16euF1l4sLzPfT8R6BXq
f2Q+UbMqQ0ZZ9eN5LhBIlwuRKA5yj/mejGmkDP1+ze0yFY5C8IZu+SlHiI7dfeUf
7VuGFLF3X/OiQtFAlPnWj600G4cbsXtOGsZ5ZPB9V139WbHw/d1pbgyDY0DmLBBy
p0yP0YA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org