Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ACA5633A9B1111EE855AC94DC4F9AE02.roa
File: ACA5633A9B1111EE855AC94DC4F9AE02.roa (raw, json)
Hash identifier: Tf3LdUYnoDLWFdMrUPsN13XBK5aMpdD9azLzgX+HAOY=
Subject key identifier: 88:36:73:23:A6:8B:8F:F1:63:E6:B2:85:8B:4B:41:FC:20:05:61:CC
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2492
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ACA5633A9B1111EE855AC94DC4F9AE02.roa
Signing time: Tue 30 Jul 2024 17:39:22 +0000
ROA not before: Tue 30 Jul 2024 17:39:22 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 45458
IP address blocks: 147.50.33.0/24 maxlen: 24
147.50.63.0/24 maxlen: 24
147.50.79.0/24 maxlen: 24
147.50.80.0/24 maxlen: 24
147.50.96.0/20 maxlen: 24
147.50.112.0/21 maxlen: 21
147.50.119.0/24 maxlen: 24
147.50.120.0/22 maxlen: 24
147.50.125.0/24 maxlen: 24
147.50.126.0/23 maxlen: 24
147.50.192.0/19 maxlen: 19
147.50.192.0/24 maxlen: 24
147.50.195.0/24 maxlen: 24
184.82.128.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 03:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9362 (0x2492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54
Validity
Not Before: Jul 30 17:39:22 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66a9254a-ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:6b:fa:a5:a9:e4:d9:59:40:2b:de:fb:3d:
ef:30:54:5d:86:09:75:20:6f:24:37:59:09:50:2a:
af:d8:ce:9d:6f:7d:97:50:39:11:40:cf:1e:4b:34:
5c:83:59:87:a0:1c:4c:25:98:2a:70:61:81:d1:5e:
cf:8e:86:5d:ee:1b:01:f7:cb:d7:b6:6f:2e:91:36:
7e:93:05:8e:a9:43:49:16:9f:da:bf:cb:6d:7b:22:
54:04:88:27:ab:e9:40:31:60:5f:ec:e3:9d:af:03:
03:51:c6:91:a4:b3:f5:f3:f7:dc:d2:f7:b7:66:75:
f8:aa:aa:fc:23:f6:83:d4:20:f5:7f:91:f8:a1:21:
a2:1c:4d:6c:cf:f2:fb:7f:77:79:4a:24:ec:00:b6:
08:77:81:ab:c9:5b:fb:73:e4:10:0a:35:3b:89:8d:
43:b4:a5:d8:4f:ea:e8:2c:4c:bd:f9:1e:e3:6f:6d:
95:4a:3a:8e:7a:04:98:7b:2f:51:85:8e:0c:7b:36:
bf:b0:d2:61:34:be:be:cd:d0:58:7d:7e:7d:38:cd:
b5:f6:bb:10:0e:8c:36:02:51:8b:ab:2e:ed:69:6d:
82:10:89:00:03:20:79:1d:63:d7:48:72:bb:fc:37:
e2:62:96:c6:8b:76:de:70:1d:0b:1e:5c:2f:4f:0b:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:73:23:A6:8B:8F:F1:63:E6:B2:85:8B:4B:41:FC:20:05:61:CC
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/ACA5633A9B1111EE855AC94DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.33.0/24
147.50.63.0/24
147.50.79.0-147.50.80.255
147.50.96.0-147.50.123.255
147.50.125.0-147.50.127.255
147.50.192.0/19
184.82.128.0/21
Signature Algorithm: sha256WithRSAEncryption
21:26:0e:35:af:43:73:c7:e6:3f:85:70:dd:df:db:e2:18:aa:
1e:32:fd:ff:f0:f2:6d:71:7d:cb:3b:9d:22:e5:c6:78:6b:09:
96:bb:69:26:9c:17:aa:f5:a6:fa:d9:27:30:db:e4:a2:98:77:
a6:c4:b2:4a:ea:5c:7c:81:6d:a9:4a:b4:ec:06:4d:d9:ab:ea:
ad:a8:df:f1:dc:35:57:7c:03:91:74:4b:10:25:59:8a:09:86:
bf:a1:fe:38:e9:93:91:23:d2:be:16:51:41:13:d6:42:b9:73:
d3:91:7d:f1:e5:b5:b5:5a:0a:a5:dc:b6:2f:46:c2:3b:d1:33:
d9:57:d3:c4:9c:02:5a:12:f7:87:a9:e9:34:96:1c:a6:95:eb:
f6:4a:b8:58:b8:42:d8:ee:c8:ac:f2:d4:fb:76:fc:8f:eb:05:
d6:61:ed:47:d8:cd:4d:44:28:33:26:34:cb:34:1c:e4:07:68:
1b:11:ad:91:73:7b:23:9f:38:2e:f2:9b:c4:07:d5:7d:65:2a:
86:81:92:19:cf:dd:55:02:47:e3:bf:d2:ca:8d:1a:bc:68:6f:
70:0d:e0:50:ec:dd:55:45:31:71:d1:61:79:f5:d9:f9:33:e6:
ad:37:14:c3:56:90:cf:c1:31:03:bc:a9:2c:e3:00:6e:23:1e:
21:d9:4c:09
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgICJJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjQwNzMwMTczOTIyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5MjU0YS1lYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2vtr+qWp5NlZQCve+z3vMFRdhgl1IG8kN1kJUCqv2M6db32XUDkRQM8eSzRc
g1mHoBxMJZgqcGGB0V7PjoZd7hsB98vXtm8ukTZ+kwWOqUNJFp/av8tteyJUBIgn
q+lAMWBf7OOdrwMDUcaRpLP18/fc0ve3ZnX4qqr8I/aD1CD1f5H4oSGiHE1sz/L7
f3d5SiTsALYId4GryVv7c+QQCjU7iY1DtKXYT+roLEy9+R7jb22VSjqOegSYey9R
hY4Meza/sNJhNL6+zdBYfX59OM219rsQDow2AlGLqy7taW2CEIkAAyB5HWPXSHK7
/DfiYpbGi3becB0LHlwvTwuVZQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFIg2cyOm
i4/xY+ayhYtLQfwgBWHMMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvQUNBNTYzM0E5
QjExMTFFRTg1NUFDOTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E
TDBKMEgEAgABMEIDBACTMiEDBACTMj8wDAMEAJMyTwMEAJMyUDAMAwQFkzJgAwQC
kzJ4MAwDBACTMn0DBAeTMgADBAWTMsADBAO4UoAwDQYJKoZIhvcNAQELBQADggEB
ACEmDjWvQ3PH5j+FcN3f2+IYqh4y/f/w8m1xfcs7nSLlxnhrCZa7aSacF6r1pvrZ
JzDb5KKYd6bEskrqXHyBbalKtOwGTdmr6q2o3/HcNVd8A5F0SxAlWYoJhr+h/jjp
k5Ej0r4WUUET1kK5c9ORffHltbVaCqXcti9GwjvRM9lX08ScAloS94ep6TSWHKaV
6/ZKuFi4QtjuyKzy1Pt2/I/rBdZh7UfYzU1EKDMmNMs0HOQHaBsRrZFzeyOfOC7y
m8QH1X1lKoaBkhnP3VUCR+O/0sqNGrxob3AN4FDs3VVFMXHRYXn12fkz5q03FMNW
kM/BMQO8qSzjAG4jHiHZTAk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:47 2025 by rpki-client