Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0252B276D10711EE80DDFA5FC4F9AE02.roa
File: 0252B276D10711EE80DDFA5FC4F9AE02.roa (raw, json)
Hash identifier: ljpVfhGkQcqyCyy6QYs7XJYkpqPOcl6hX7xoxsXnqVs=
Subject key identifier: BE:26:32:3D:38:FC:9B:A7:64:0A:23:89:BC:BC:8D:16:65:E3:1A:E1
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 0343
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0252B276D10711EE80DDFA5FC4F9AE02.roa
Signing time: Sun 07 Apr 2024 03:05:02 +0000
ROA not before: Sun 07 Apr 2024 03:05:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136454
IP address blocks: 116.204.240.0/24 maxlen: 24
116.204.241.0/24 maxlen: 24
2400:e640:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 07 Jul 2024 11:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Apr 7 03:05:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66120d5e-3d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:ad:a0:8c:e6:06:36:f9:2d:32:16:3d:d2:
c7:1a:85:17:43:44:9a:c8:54:88:17:5f:ee:a7:37:
41:8b:11:fc:f5:ca:6d:04:7d:3f:74:5d:68:08:4e:
d5:ad:08:1d:4b:6d:c4:50:46:05:27:c6:28:84:3c:
81:1f:38:6b:61:d1:d7:3f:b5:6f:24:7f:c7:d3:da:
80:b6:33:9f:6c:ef:4d:a4:e1:59:53:73:b8:62:41:
b4:5f:c8:d5:0d:e2:93:83:00:30:72:f9:4a:bf:11:
7a:7a:6a:5d:25:37:4c:19:82:c5:a5:ea:86:d3:52:
60:8c:b6:c7:b4:1d:35:3a:53:37:b7:51:d8:4b:d6:
d6:df:97:b7:7c:54:55:de:fb:cd:e8:44:e4:36:52:
b2:4a:8c:c6:e9:a2:2e:51:8b:56:f8:13:92:a8:24:
82:c6:34:d4:26:5e:5c:bb:c8:dc:6e:0c:4a:a8:cb:
2b:ef:ac:90:45:53:f7:24:09:f1:a8:f4:db:d5:3f:
c7:db:66:f2:e2:3b:6e:81:ea:7e:d6:36:2e:8b:0d:
81:e6:9e:fc:92:ed:64:46:5d:91:a3:ca:41:9d:27:
21:c9:e5:f1:27:6e:18:78:41:4b:9a:2a:43:e3:4f:
0f:8b:ca:40:81:fb:50:32:11:28:fa:4f:7d:0e:fb:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:32:3D:38:FC:9B:A7:64:0A:23:89:BC:BC:8D:16:65:E3:1A:E1
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/0252B276D10711EE80DDFA5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.240.0/23
IPv6:
2400:e640:1000::/36
Signature Algorithm: sha256WithRSAEncryption
4a:92:dc:f3:41:9c:2d:fe:5e:01:f5:68:cb:5b:3b:eb:61:43:
e4:a0:11:23:56:51:8a:e4:d2:b3:14:bd:90:2e:a6:63:ab:4f:
4b:d3:68:68:50:0f:75:30:c0:0b:65:49:4a:09:26:a4:e3:a6:
35:36:86:e0:af:71:34:78:e8:41:19:a6:67:fa:d2:fd:7e:46:
fa:42:4a:86:c2:c5:3d:b1:f3:73:5d:2e:f6:20:34:75:fc:f5:
8b:a4:aa:4a:b4:eb:43:ad:d4:4a:b5:26:e8:54:86:a4:89:94:
63:60:9c:12:8d:30:d5:ad:6f:7f:12:36:c3:f5:29:06:ba:24:
14:79:2b:d0:d3:1f:3e:35:e3:60:d6:7f:58:e6:6d:98:37:cc:
ca:06:27:a4:2b:a9:b8:7b:eb:46:1e:7c:e5:00:7d:ea:fc:de:
29:c8:fb:8e:c3:6b:34:cd:96:da:fd:ae:d2:28:0d:82:9e:39:
67:02:9b:14:a1:ad:ba:94:45:35:b0:0c:76:d5:50:f8:55:5d:
db:6b:6d:37:b6:38:ce:1c:7d:5c:6e:69:6d:0a:82:ae:8e:16:
39:3f:a3:d5:14:19:a5:ab:40:05:18:86:62:0d:eb:02:c5:c4:
e9:93:54:5e:da:7a:66:91:9c:01:cc:13:dd:c0:50:a3:41:20:
ae:77:01:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG
NjExOUYzMEMwHhcNMjQwNDA3MDMwNTAyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjEyMGQ1ZS0zZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0itoIzmBjb5LTIWPdLHGoUXQ0SayFSIF1/upzdBixH89cptBH0/dF1oCE7V
rQgdS23EUEYFJ8YohDyBHzhrYdHXP7VvJH/H09qAtjOfbO9NpOFZU3O4YkG0X8jV
DeKTgwAwcvlKvxF6empdJTdMGYLFpeqG01JgjLbHtB01OlM3t1HYS9bW35e3fFRV
3vvN6ETkNlKySozG6aIuUYtW+BOSqCSCxjTUJl5cu8jcbgxKqMsr76yQRVP3JAnx
qPTb1T/H22by4jtugep+1jYuiw2B5p78ku1kRl2Ro8pBnSchyeXxJ24YeEFLmipD
408Pi8pAgftQMhEo+k99DvvZWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL4mMj04
/JunZAojiby8jRZl4xrhMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0
MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvMDI1MkIyNzZE
MTA3MTFFRTgwRERGQTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAF0zPAwDgQCAAIwCAMGBCQA5kAQMA0GCSqGSIb3DQEBCwUA
A4IBAQBKktzzQZwt/l4B9WjLWzvrYUPkoBEjVlGK5NKzFL2QLqZjq09L02hoUA91
MMALZUlKCSak46Y1Nobgr3E0eOhBGaZn+tL9fkb6QkqGwsU9sfNzXS72IDR1/PWL
pKpKtOtDrdRKtSboVIakiZRjYJwSjTDVrW9/EjbD9SkGuiQUeSvQ0x8+NeNg1n9Y
5m2YN8zKBiekK6m4e+tGHnzlAH3q/N4pyPuOw2s0zZba/a7SKA2CnjlnApsUoa26
lEU1sAx21VD4VV3ba203tjjOHH1cbmltCoKujhY5P6PVFBmlq0AFGIZiDesCxcTp
k1Re2npmkZwBzBPdwFCjQSCudwHe
-----END CERTIFICATE-----
Generated at Sun Jul 7 12:16:51 2024 by rpki-client on console-ams.rpki-client.org