Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/192865A2169611EF89C1B118C4F9AE02.roa
File: 192865A2169611EF89C1B118C4F9AE02.roa (raw, json)
Hash identifier: rPcn+HyZMcDVGyQkbtaOG5/NUO2p1q1APg9rf82uyds=
Subject key identifier: AE:7C:F5:EB:77:03:8E:B1:7F:AF:A5:BD:E1:32:E7:71:8B:8B:5B:F0
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2150
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/192865A2169611EF89C1B118C4F9AE02.roa
Signing time: Wed 26 Jun 2024 16:24:17 +0000
ROA not before: Wed 26 Jun 2024 16:24:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 203363
IP address blocks: 180.210.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 05:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8528 (0x2150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jun 26 16:24:17 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=667c40b1-4ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:ee:57:e2:f4:a4:c5:a8:0f:f9:fa:6a:6d:
2c:62:6b:6c:fa:fd:4a:8b:a2:15:fc:f3:9c:ba:51:
7e:7e:63:d3:5e:07:63:93:04:3d:eb:49:fb:59:56:
12:ce:c1:89:70:46:71:27:d1:eb:36:cb:7e:aa:ab:
08:a0:da:e2:8c:ab:01:48:20:8f:af:de:56:b5:5b:
aa:09:c9:49:12:10:82:ea:70:86:83:12:5d:6d:cc:
88:07:5a:47:5f:94:1a:70:3e:61:07:0a:6e:f2:dd:
67:07:2c:89:b5:23:54:bf:fc:92:4b:8a:7a:24:d8:
44:bc:74:e3:f0:93:06:2f:c0:1d:ab:e4:8d:d6:35:
03:13:f0:46:5a:35:54:5f:23:be:c6:6b:e7:fc:e3:
2b:87:56:4a:07:19:c5:90:73:6c:1f:e2:4e:60:bc:
59:27:c2:ba:37:46:d4:c8:e9:b6:f7:66:16:16:67:
6c:db:de:47:b4:f2:dc:33:ae:9c:d4:ad:ad:0c:c7:
91:83:68:82:7c:99:ae:4f:fc:b6:d4:c0:f7:68:01:
9b:50:3d:08:63:48:18:e3:0e:30:83:81:f1:8b:16:
98:42:66:56:bb:e8:22:4b:b2:8d:2a:29:d6:0f:29:
c5:cc:22:06:c2:2e:b2:0f:a6:29:4b:a4:b2:3b:9c:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:F5:EB:77:03:8E:B1:7F:AF:A5:BD:E1:32:E7:71:8B:8B:5B:F0
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/192865A2169611EF89C1B118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f7:16:b4:32:e0:2d:e4:6f:e3:68:68:33:77:44:e8:f4:51:
4e:bf:69:86:19:92:71:2b:53:e4:d1:28:7b:73:60:67:7a:81:
58:16:0c:c1:47:86:4a:f0:8c:94:67:c5:1e:ff:a4:8c:a5:ba:
74:ca:af:e7:0f:aa:6c:f1:d9:62:f2:a5:60:7e:a7:3b:ba:09:
0c:48:db:91:80:93:90:ea:5a:44:97:a7:77:3b:08:56:5b:51:
82:b9:34:d4:b5:9f:92:52:85:23:29:82:3c:75:04:ba:39:2b:
40:9d:46:45:0d:1c:f9:c5:9a:a5:15:af:4e:d0:0a:c2:8f:e2:
9c:97:b2:d0:32:d0:32:bd:9d:2b:2e:f2:b3:c9:58:0c:fc:f4:
33:a1:56:c9:8d:82:f2:98:6a:dd:b7:d6:b9:e0:7d:0e:a4:38:
e3:80:5b:2e:da:fb:09:70:96:c2:af:10:3b:ee:35:5f:c1:41:
47:9b:07:ec:7b:3c:5e:55:73:76:47:28:d0:a3:0a:87:d6:2a:
99:1a:2b:6b:d4:51:91:cc:70:bd:fa:8c:ef:03:bc:1f:9d:79:
af:db:31:2d:b5:bc:4e:ea:03:23:83:b7:b0:36:d2:ea:c7:0d:
40:4e:f1:90:6f:a9:08:4e:15:db:cd:c6:16:89:e8:10:a3:50:
14:45:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:44:26 2024 by rpki-client on console-ams.rpki-client.org