Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/B0DF9618599B11ED99A5B776C4F9AE02.roa
File: B0DF9618599B11ED99A5B776C4F9AE02.roa (raw, json)
Hash identifier: pTEiu18qDzSVb2/rNCXmrUIkXiajyei95hW43UZ5kCc=
Subject key identifier: A1:6F:35:CB:17:0F:A7:73:AE:4E:90:7A:00:9D:44:82:AC:58:7F:50
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 0144
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/B0DF9618599B11ED99A5B776C4F9AE02.roa
Signing time: Thu 01 Feb 2024 04:55:29 +0000
ROA not before: Thu 01 Feb 2024 04:55:29 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 134428
IP address blocks: 115.42.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 09:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Feb 1 04:55:29 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65bb2441-d77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:a2:42:e7:0d:f8:d6:2f:3f:58:21:91:ad:
69:c8:95:56:27:de:de:64:9d:2e:7e:14:c6:7c:ba:
76:9f:88:3f:6f:98:43:df:21:5b:49:2f:9f:bc:33:
bb:e5:3a:1c:05:66:c4:38:95:19:93:dc:89:0a:9f:
7c:57:e5:3f:4e:85:88:19:13:01:80:c9:7c:25:fb:
9a:ba:6d:51:7f:5d:3b:7f:57:62:cc:1c:df:33:66:
a6:47:0b:34:83:04:7e:40:c7:dd:ee:9e:20:e9:22:
07:eb:0b:68:55:34:20:09:08:d0:b6:bb:86:38:e6:
18:13:34:02:38:cd:e0:41:30:54:3b:ce:00:3f:cc:
ef:6f:93:3d:51:26:1e:e7:5a:44:8b:ad:c8:35:5a:
cd:c2:58:e5:17:81:58:55:08:df:4f:1a:49:e1:7e:
52:ce:13:9a:62:f8:97:ed:af:2f:97:63:eb:20:ee:
3e:71:8e:5c:68:12:ce:79:5f:9d:3f:b8:09:fc:18:
0f:11:a8:e8:dd:e2:1b:68:9d:0b:21:45:d4:ec:26:
31:5d:46:be:4a:20:32:51:a6:31:55:53:2b:6e:56:
3a:c6:0d:cd:14:ab:bf:5e:b6:2e:b2:75:25:59:bd:
a5:fd:d2:1e:b0:c4:11:bf:1b:54:40:04:f4:e8:4a:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6F:35:CB:17:0F:A7:73:AE:4E:90:7A:00:9D:44:82:AC:58:7F:50
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/B0DF9618599B11ED99A5B776C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.63.0/24
Signature Algorithm: sha256WithRSAEncryption
23:81:34:2b:3d:d6:cb:bf:03:62:a7:97:39:b0:25:d6:f2:21:
86:65:82:f9:d3:7a:73:41:3c:8c:96:4b:db:ca:91:d9:f0:1a:
2d:dc:f4:40:0f:08:05:44:6c:4d:29:71:c4:3c:5f:b2:28:c1:
66:2c:50:0f:6f:82:e2:bd:3d:bf:a6:40:85:ad:ee:17:b3:0e:
b9:06:fc:74:58:46:0c:75:bf:0c:26:2c:66:65:44:24:2a:f8:
34:60:6d:fd:98:6d:e6:a6:a9:59:92:fd:6c:23:e0:44:f5:ea:
03:a2:ab:21:f5:77:f2:68:e7:d7:44:67:85:ac:71:16:3a:7e:
da:ca:73:d3:b8:f9:86:3e:de:35:ea:25:bf:e5:9a:5d:aa:ce:
43:c5:4d:b5:10:8c:c8:a8:92:c9:79:19:76:13:00:88:f4:ea:
1d:92:c8:63:89:aa:bf:b6:59:78:6c:41:14:0f:71:f3:ca:9e:
6d:df:55:d4:1e:e4:4e:f9:91:83:6b:ea:ff:55:8a:e5:1d:1e:
99:21:34:53:fe:11:55:6e:d9:4b:8f:c5:51:ad:34:1c:e3:65:
43:8c:d6:75:49:da:ce:4e:be:b3:53:05:2e:0f:30:f8:7c:6c:
67:e8:14:1f:8d:ec:62:26:98:c9:07:15:46:e8:2e:2b:82:ef:
be:02:da:34
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5
QTNFRDVERkUwHhcNMjQwMjAxMDQ1NTI5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJiMjQ0MS1kNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgqiQucN+NYvP1ghka1pyJVWJ97eZJ0ufhTGfLp2n4g/b5hD3yFbSS+fvDO7
5TocBWbEOJUZk9yJCp98V+U/ToWIGRMBgMl8Jfuaum1Rf107f1dizBzfM2amRws0
gwR+QMfd7p4g6SIH6wtoVTQgCQjQtruGOOYYEzQCOM3gQTBUO84AP8zvb5M9USYe
51pEi63INVrNwljlF4FYVQjfTxpJ4X5SzhOaYviX7a8vl2PrIO4+cY5caBLOeV+d
P7gJ/BgPEajo3eIbaJ0LIUXU7CYxXUa+SiAyUaYxVVMrblY6xg3NFKu/XrYusnUl
Wb2l/dIesMQRvxtUQAT06EqCbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKFvNcsX
D6dzrk6QegCdRIKsWH9QMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3
N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3REYvNkQ1NTJENzAyNzdBMTFFREE2QjFBODI2QzRGOUFFMDIvQjBERjk2MTg1
OTlCMTFFRDk5QTVCNzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABzKj8wDQYJKoZIhvcNAQELBQADggEBACOBNCs91su/A2Kn
lzmwJdbyIYZlgvnTenNBPIyWS9vKkdnwGi3c9EAPCAVEbE0pccQ8X7IowWYsUA9v
guK9Pb+mQIWt7hezDrkG/HRYRgx1vwwmLGZlRCQq+DRgbf2YbeamqVmS/Wwj4ET1
6gOiqyH1d/Jo59dEZ4WscRY6ftrKc9O4+YY+3jXqJb/lml2qzkPFTbUQjMioksl5
GXYTAIj06h2SyGOJqr+2WXhsQRQPcfPKnm3fVdQe5E75kYNr6v9ViuUdHpkhNFP+
EVVu2UuPxVGtNBzjZUOM1nVJ2s5OvrNTBS4PMPh8bGfoFB+N7GImmMkHFUboLiuC
774C2jQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:52 2024 by rpki-client on console-fra.rpki-client.org