Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AEDAFB9EFF6011ED90C62C26C4F9AE02.roa
File: AEDAFB9EFF6011ED90C62C26C4F9AE02.roa (raw, json)
Hash identifier: v/WWCkD1ele/YQlExGl7sKquTqG2XjHeLSWUO+AuW9g=
Subject key identifier: 47:05:F2:E1:81:C8:8E:54:37:EA:DA:04:CF:15:40:B2:09:72:5C:23
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3403
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AEDAFB9EFF6011ED90C62C26C4F9AE02.roa
Signing time: Thu 30 May 2024 14:50:30 +0000
ROA not before: Thu 30 May 2024 14:50:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10232
IP address blocks: 202.4.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 21 Aug 2024 10:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13315 (0x3403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: May 30 14:50:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66589236-9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:58:a9:3e:d9:94:8d:28:53:c8:50:73:5a:
4c:d8:44:1a:dc:0d:e4:db:ce:44:77:ac:79:b5:da:
ca:b7:70:34:b4:93:2a:29:b1:9d:a2:41:e4:87:82:
8b:ce:aa:76:0a:3f:3e:2d:e3:56:ef:3e:cd:18:db:
01:f8:a4:36:01:1f:8e:b7:a2:88:a9:dc:9a:67:96:
f2:03:ef:08:fc:ca:7e:1f:6c:af:5a:ac:f8:cf:37:
3b:d6:db:7a:f2:4d:36:90:aa:d9:47:e0:45:9f:77:
82:db:04:83:7e:ca:ea:8a:ca:ec:9d:1e:c5:24:30:
18:42:c2:56:2f:2f:e5:6b:5e:ec:4e:49:a9:ee:56:
cf:c8:f4:4f:eb:bf:6e:45:05:ef:ae:c3:d4:09:95:
2a:76:bd:d6:f0:88:20:5d:e2:3d:07:99:b0:cd:80:
c8:8f:45:40:73:47:eb:39:3d:74:e0:b6:83:d4:74:
70:82:98:4c:99:8d:df:d1:ea:87:36:64:12:bf:3d:
18:50:42:1a:3e:7c:0a:71:36:91:c2:f7:86:ec:e5:
b9:58:1a:88:39:fb:ed:72:5f:cf:6b:db:35:ea:ab:
4d:9b:47:d8:5f:e6:18:d9:19:41:dc:09:55:72:6f:
e1:88:fa:75:fb:2c:f4:f7:a3:fe:bd:94:9c:01:1c:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:F2:E1:81:C8:8E:54:37:EA:DA:04:CF:15:40:B2:09:72:5C:23
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AEDAFB9EFF6011ED90C62C26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.4.26.0/23
Signature Algorithm: sha256WithRSAEncryption
54:7b:4e:7c:53:74:90:21:9f:92:cd:0b:cc:65:f6:d8:60:25:
7e:b5:48:3b:9a:85:a6:e2:3c:07:f9:b0:05:f8:7e:a6:c4:a2:
f4:f1:87:b3:7a:c3:99:b1:2d:74:15:67:2d:dd:98:70:d3:d7:
5f:6e:26:0c:1c:f2:30:bf:2f:7b:aa:ff:b1:6a:7b:54:77:9a:
25:1e:32:1b:db:c9:0a:17:97:11:b1:bd:07:50:55:b7:c0:7f:
af:7f:86:27:f2:8f:d2:c6:b6:76:77:f3:59:af:89:af:ce:e6:
9d:d9:f6:98:28:3b:75:56:2d:3b:8a:dd:b5:91:7c:f2:cc:de:
2b:a8:a1:e6:82:ad:80:45:40:38:30:93:97:36:35:26:f4:c7:
50:7c:21:6a:64:94:60:3b:a1:28:40:e9:7f:9c:c8:aa:c2:0d:
b6:11:16:66:d1:49:73:7e:67:92:02:d1:5d:99:0c:60:c0:81:
47:29:ee:8d:08:97:fe:69:b8:fb:f1:87:46:c7:34:aa:92:3e:
45:a3:9e:d5:de:10:c6:61:0f:83:df:dd:af:69:29:ee:75:ec:
19:64:a6:b3:59:f3:ad:3f:ab:0e:31:67:c2:a4:3a:62:df:89:
c3:07:3e:50:e2:c2:aa:0b:4d:e1:1a:e1:a7:92:9e:3d:82:e7:
e6:b4:59:87
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw
QzJDRTQ5QjQwHhcNMjQwNTMwMTQ1MDMwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4OTIzNi05Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWhYqT7ZlI0oU8hQc1pM2EQa3A3k285Ed6x5tdrKt3A0tJMqKbGdokHkh4KL
zqp2Cj8+LeNW7z7NGNsB+KQ2AR+Ot6KIqdyaZ5byA+8I/Mp+H2yvWqz4zzc71tt6
8k02kKrZR+BFn3eC2wSDfsrqisrsnR7FJDAYQsJWLy/la17sTkmp7lbPyPRP679u
RQXvrsPUCZUqdr3W8IggXeI9B5mwzYDIj0VAc0frOT104LaD1HRwgphMmY3f0eqH
NmQSvz0YUEIaPnwKcTaRwveG7OW5WBqIOfvtcl/Pa9s16qtNm0fYX+YY2RlB3AlV
cm/hiPp1+yz096P+vZScARwc4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEcF8uGB
yI5UN+raBM8VQLIJclwjMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE
ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBCOTkvRDNGOTA1MUMxRDgzMTFFMkI0RUQ1Q0Q5MDhCMDJDRDIvQUVEQUZCOUVG
RjYwMTFFRDkwQzYyQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKBBowDQYJKoZIhvcNAQELBQADggEBAFR7TnxTdJAhn5LN
C8xl9thgJX61SDuahabiPAf5sAX4fqbEovTxh7N6w5mxLXQVZy3dmHDT119uJgwc
8jC/L3uq/7Fqe1R3miUeMhvbyQoXlxGxvQdQVbfAf69/hifyj9LGtnZ381mvia/O
5p3Z9pgoO3VWLTuK3bWRfPLM3iuooeaCrYBFQDgwk5c2NSb0x1B8IWpklGA7oShA
6X+cyKrCDbYRFmbRSXN+Z5IC0V2ZDGDAgUcp7o0Il/5puPvxh0bHNKqSPkWjntXe
EMZhD4Pf3a9pKe517BlkprNZ860/qw4xZ8KkOmLficMHPlDiwqoLTeEa4aeSnj2C
5+a0WYc=
-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:19 2024 by rpki-client on console-fra.rpki-client.org