Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/EA077BF660CD11EEB151723AC4F9AE02.roa
File: EA077BF660CD11EEB151723AC4F9AE02.roa (raw, json)
Hash identifier: LevTl0ZMSXtbYdtnP6/oDzGHpzVPGQGtnZzvnLO5TQo=
Subject key identifier: 6B:78:C8:DC:02:D3:32:59:8C:69:48:AC:A0:D5:6E:23:26:9D:FE:EF
Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial: 244D
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/EA077BF660CD11EEB151723AC4F9AE02.roa
Signing time: Sat 02 Dec 2023 14:40:13 +0000
ROA not before: Sat 02 Dec 2023 14:40:13 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 139591
IP address blocks: 209.15.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 30 May 2024 11:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9293 (0x244d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Validity
Not Before: Dec 2 14:40:13 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656b41cc-f57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:51:3f:9c:c8:e5:7e:ef:29:94:71:da:76:
a7:f3:0f:de:a4:cd:ca:b7:4e:bb:e7:66:be:c2:0e:
cd:39:6e:15:5b:ab:5b:20:f6:76:a6:51:08:e9:1a:
ef:7a:f6:32:7e:58:43:1e:ac:31:6b:77:99:4c:66:
67:14:6a:09:5a:7f:e8:be:c7:bd:e5:f0:cc:0b:ab:
86:ae:f6:72:88:cc:d4:bc:9c:1f:fd:d6:6f:3f:37:
44:51:22:12:b6:a5:6c:68:29:44:72:12:eb:31:66:
34:42:ad:76:f3:77:8e:db:3c:31:2f:90:e2:c6:37:
86:51:ba:91:41:3d:c2:0b:ec:f2:d5:64:45:63:92:
d3:21:b8:5f:55:8b:f9:44:9f:f9:65:a1:a6:f7:28:
72:f0:04:3e:7d:80:ca:2b:8e:3f:f4:b0:83:54:92:
ca:8a:c9:db:ea:80:bf:b9:09:6f:dc:86:b8:de:f4:
55:63:e4:71:9d:16:df:46:35:f9:52:46:b3:87:49:
2d:c5:3d:fc:39:cd:30:26:ea:f4:9e:9a:ec:51:6c:
bb:d8:32:d7:44:cb:d0:b4:e2:3e:78:8f:29:e1:11:
4b:9b:9f:1d:d8:f5:34:77:48:d8:0d:cb:98:e6:5a:
22:a3:a9:8c:9c:2e:03:f6:ed:c6:e9:f2:ae:35:e9:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:78:C8:DC:02:D3:32:59:8C:69:48:AC:A0:D5:6E:23:26:9D:FE:EF
X509v3 Authority Key Identifier:
keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/EA077BF660CD11EEB151723AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.15.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:6d:05:b3:45:6a:4a:22:d1:73:42:52:ce:e7:f4:e2:fa:95:
d7:01:86:8c:37:64:f5:73:f7:48:f6:f8:89:2e:45:bd:27:1c:
9d:db:13:72:be:8c:71:19:ff:5a:31:a4:71:41:5b:b9:26:be:
ea:c2:18:83:ee:f0:6e:61:b0:84:ef:67:5d:19:a6:8c:43:f0:
b3:91:6c:d9:89:b7:2c:91:b6:84:de:e3:dd:8a:4e:c7:b2:c7:
84:b6:4f:0b:a8:b9:e2:06:30:65:01:6b:de:2d:30:29:98:34:
23:20:b4:e3:ee:13:63:b9:a1:5a:9a:48:1b:be:aa:29:7d:d1:
81:7e:14:01:4f:13:86:5a:0d:4c:7f:f3:df:28:e6:fd:04:d2:
b8:44:5e:90:60:44:e6:27:13:5a:73:a9:85:0d:b6:55:03:87:
25:19:fe:d2:26:c3:7d:3c:a3:c3:9d:6d:9b:43:dc:c9:70:10:
b6:51:26:e0:85:3f:d0:4d:63:8b:5d:3b:3d:52:95:c6:f7:18:
e3:28:a0:05:13:59:29:9b:66:97:b8:4b:dc:4e:0c:48:21:11:
33:90:0b:d1:b5:b1:b0:86:f4:a5:21:b7:e1:cd:82:02:4a:5c:
00:ba:7c:aa:73:6f:cd:c7:ea:07:fa:5e:a7:8c:39:35:00:bc:
92:3f:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org