Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/7FAC662E10D411EFB72D712AC4F9AE02.roa
File: 7FAC662E10D411EFB72D712AC4F9AE02.roa (raw, json)
Hash identifier: 3mVG4TR6ZbM1ADI2on54xZV6fPVz6LvxIINQBRYTcwE=
Subject key identifier: 3C:D5:24:60:F5:F4:B0:0D:2D:C9:69:B3:6B:15:8C:24:CB:5E:B4:15
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 0366
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/7FAC662E10D411EFB72D712AC4F9AE02.roa
Signing time: Mon 13 May 2024 02:57:13 +0000
ROA not before: Mon 13 May 2024 02:57:13 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45458
IP address blocks: 147.50.33.0/24 maxlen: 24
147.50.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 11:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: May 13 02:57:13 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=66418189-b3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:47:4b:8f:31:3c:fa:ce:8f:9e:fc:97:0e:
00:bd:9b:d3:94:6a:e6:b3:dd:f6:c9:c4:fb:91:97:
d0:64:ad:74:7f:0a:c3:31:13:4c:03:58:c3:fe:08:
58:8a:85:4c:77:e3:2e:e8:5d:dd:fd:e2:52:ad:3c:
53:f4:e3:f2:fd:bb:e2:c5:41:0c:7f:1e:97:cb:6b:
27:e9:11:03:e3:ad:0e:21:c3:02:20:b6:b9:27:6a:
66:24:ba:ce:3d:5d:7e:d7:2b:21:49:f7:14:a7:23:
51:4d:81:49:dd:57:0f:65:64:9a:d9:be:ec:2b:0b:
40:a6:d8:34:c4:5c:32:3b:5d:20:2f:ad:e5:bc:66:
8f:7e:b7:b0:97:02:00:a0:90:4a:1f:2f:c2:b0:2d:
62:4e:a8:8d:3d:e7:68:84:a3:90:47:b9:7b:80:28:
9b:c4:bd:c0:1b:9d:61:6d:16:4c:20:6e:e2:4e:33:
46:4d:e7:c0:f0:d0:dc:97:88:07:7f:3b:ab:9b:3a:
d5:9d:b1:31:c7:19:d2:0a:17:b0:5d:89:a1:67:c9:
c1:6e:a0:d5:d8:61:cd:c4:55:16:04:f6:7e:47:57:
88:2c:13:43:1d:cc:45:c2:6d:87:01:84:02:a3:6d:
ee:9b:4e:31:be:7b:d1:66:87:a3:c4:d6:14:7b:cd:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D5:24:60:F5:F4:B0:0D:2D:C9:69:B3:6B:15:8C:24:CB:5E:B4:15
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/7FAC662E10D411EFB72D712AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.33.0/24
147.50.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f1:cd:7a:27:19:41:db:26:1d:b2:0b:b2:d1:84:f6:a8:15:
5d:d7:61:17:0d:f9:c0:e5:86:ea:e9:07:2d:ff:66:33:d5:36:
dd:f0:24:d2:f6:78:34:9e:c5:79:f1:ea:93:cd:5f:7f:63:41:
dc:84:c5:61:53:0f:7b:47:b9:47:cf:d3:ac:c5:20:5b:f0:ac:
b9:51:64:ba:bf:0a:be:50:d3:34:53:ac:c8:89:0f:03:28:b4:
72:04:6b:24:c4:51:ff:17:06:3d:98:78:48:83:33:7c:3e:27:
65:f0:39:09:73:0b:25:8d:26:db:ef:e0:31:10:7b:9b:1e:68:
43:b5:16:d5:7a:67:9f:cd:d6:41:8c:f6:8b:e6:83:e4:4f:dc:
1d:80:08:c8:11:19:21:ac:74:4b:9d:9a:21:d9:47:41:86:47:
ef:4d:3a:67:6c:2b:49:b3:3d:e3:fd:d6:3c:e1:03:98:9e:8e:
e4:9c:3d:15:b0:a7:1f:bd:b8:85:ae:31:50:40:d8:31:71:dd:
0b:13:63:34:71:66:45:8c:21:0b:ee:e2:c6:6d:e6:7b:01:c0:
e7:4a:31:f8:bb:55:36:9e:3d:4e:65:5b:72:13:8f:39:a1:25:
82:fa:e4:2f:b0:a1:da:66:39:f4:f7:e1:e6:bd:0f:57:f7:f0:
2a:b9:00:f2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjQwNTEzMDI1NzEzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQxODE4OS1iM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IxHS48xPPrOj578lw4AvZvTlGrms932ycT7kZfQZK10fwrDMRNMA1jD/ghY
ioVMd+Mu6F3d/eJSrTxT9OPy/bvixUEMfx6Xy2sn6RED460OIcMCILa5J2pmJLrO
PV1+1yshSfcUpyNRTYFJ3VcPZWSa2b7sKwtAptg0xFwyO10gL63lvGaPfrewlwIA
oJBKHy/CsC1iTqiNPedohKOQR7l7gCibxL3AG51hbRZMIG7iTjNGTefA8NDcl4gH
fzurmzrVnbExxxnSChewXYmhZ8nBbqDV2GHNxFUWBPZ+R1eILBNDHcxFwm2HAYQC
o23um04xvnvRZoejxNYUe83OfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDzVJGD1
9LANLclps2sVjCTLXrQVMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvN0ZBQzY2MkUx
MEQ0MTFFRkI3MkQ3MTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBACTMiEDBACTMj8wDQYJKoZIhvcNAQELBQADggEBACrxzXon
GUHbJh2yC7LRhPaoFV3XYRcN+cDlhurpBy3/ZjPVNt3wJNL2eDSexXnx6pPNX39j
QdyExWFTD3tHuUfP06zFIFvwrLlRZLq/Cr5Q0zRTrMiJDwMotHIEayTEUf8XBj2Y
eEiDM3w+J2XwOQlzCyWNJtvv4DEQe5seaEO1FtV6Z5/N1kGM9ovmg+RP3B2ACMgR
GSGsdEudmiHZR0GGR+9NOmdsK0mzPeP91jzhA5iejuScPRWwpx+9uIWuMVBA2DFx
3QsTYzRxZkWMIQvu4sZt5nsBwOdKMfi7VTaePU5lW3ITjzmhJYL65C+wodpmOfT3
4ea9D1f38Cq5API=
-----END CERTIFICATE-----
Generated at Mon Jul 29 14:18:38 2024 by rpki-client on console-ams.rpki-client.org