Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/90CC4066350D11EF9CA2412DC4F9AE02.roa
File: 90CC4066350D11EF9CA2412DC4F9AE02.roa (raw, json)
Hash identifier: uH7HhThXPh1sIeHc1HAF44eiwffkue1MQvoA/vraJq8=
Subject key identifier: 49:02:6D:FE:6B:41:D1:65:F2:C1:0C:40:E9:89:0B:1D:DD:B8:ED:47
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2155
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/90CC4066350D11EF9CA2412DC4F9AE02.roa
Signing time: Fri 28 Jun 2024 05:16:25 +0000
ROA not before: Fri 28 Jun 2024 05:16:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 180.210.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 11:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8533 (0x2155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jun 28 05:16:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=667e4729-43c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:17:f0:8c:31:df:62:6a:ea:2e:96:0c:1b:
34:f9:01:56:44:3c:58:c7:1b:18:43:4f:ce:e5:29:
aa:54:18:8e:82:46:50:e2:6d:dd:06:72:09:01:d5:
b5:44:d2:6b:bf:e6:7f:4a:12:f8:af:41:b4:35:5d:
6e:4f:65:e0:dc:58:3c:9f:6d:b0:ea:ad:71:d2:bd:
0b:7c:60:3b:cb:42:74:5b:5a:2b:b7:a7:1c:10:a6:
70:90:ea:50:42:61:d9:27:0f:be:82:f5:74:08:c2:
99:98:8d:4d:b1:89:74:3c:b1:5b:9b:15:d8:4d:1b:
82:f0:b8:77:9b:12:86:49:33:3b:08:c3:64:e6:5e:
72:5e:96:6c:19:58:91:3a:ad:03:34:54:b3:9a:58:
38:b8:92:6c:c9:c9:09:27:52:60:35:d0:ab:14:77:
a1:12:87:89:aa:9a:b8:f5:3a:53:b4:e6:be:53:c0:
b3:ad:0d:3e:e9:01:67:fb:14:df:1d:6c:5b:dd:ae:
45:6a:d1:eb:49:f4:59:1f:d1:63:c0:03:08:76:31:
02:92:01:1b:0b:0b:7e:09:9a:0f:be:f9:46:21:63:
37:d4:22:a0:0f:d8:dc:d9:fa:8d:61:28:32:41:d6:
c3:22:83:2d:4d:d6:e6:cf:7a:b5:15:13:a3:98:53:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:6D:FE:6B:41:D1:65:F2:C1:0C:40:E9:89:0B:1D:DD:B8:ED:47
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/90CC4066350D11EF9CA2412DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.221.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6e:f7:29:e7:ae:2c:ad:8e:36:04:b2:0b:e8:03:e0:fe:26:
2b:10:c0:dc:a9:a1:13:7d:92:95:97:36:70:4c:98:fb:fe:d9:
51:c9:6b:e8:af:76:47:d1:35:b6:09:8d:58:30:f1:ad:da:75:
96:f3:d9:fe:14:01:73:62:4b:34:d1:8b:14:d2:57:62:f1:e0:
b3:19:a9:0b:94:bd:d2:5f:ab:de:fb:2e:d7:b3:67:7f:4c:39:
27:43:66:67:37:42:b4:73:28:2f:03:e4:d9:30:98:5f:87:88:
e1:f3:99:42:41:28:ac:fe:fb:ab:9c:fe:c5:f2:2e:7c:eb:2b:
35:03:c1:3e:fe:c5:65:90:de:ea:59:1b:01:91:a2:63:8f:31:
db:fd:b2:58:21:e2:52:c5:fc:dd:78:97:5a:d9:ea:15:91:d9:
6f:12:d1:16:cf:a7:9c:67:5f:af:81:6f:47:00:f6:ce:c5:1c:
ab:2e:e7:16:6d:e6:3b:aa:8a:a9:3e:0e:54:86:34:7c:43:ac:
ac:ef:f6:0d:7e:bc:50:07:2d:84:f4:5d:77:7b:28:b3:3e:31:
2b:1b:7c:b8:be:27:c6:c8:4d:17:4c:63:5d:aa:1f:d5:01:e2:
b5:8f:d0:19:fd:c4:81:ce:4b:21:fd:24:82:30:23:0f:1b:a1:
1b:f3:d0:f8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjQwNjI4MDUxNjI1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdlNDcyOS00M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1sX8Iwx32Jq6i6WDBs0+QFWRDxYxxsYQ0/O5SmqVBiOgkZQ4m3dBnIJAdW1
RNJrv+Z/ShL4r0G0NV1uT2Xg3Fg8n22w6q1x0r0LfGA7y0J0W1ort6ccEKZwkOpQ
QmHZJw++gvV0CMKZmI1NsYl0PLFbmxXYTRuC8Lh3mxKGSTM7CMNk5l5yXpZsGViR
Oq0DNFSzmlg4uJJsyckJJ1JgNdCrFHehEoeJqpq49TpTtOa+U8CzrQ0+6QFn+xTf
HWxb3a5FatHrSfRZH9FjwAMIdjECkgEbCwt+CZoPvvlGIWM31CKgD9jc2fqNYSgy
QdbDIoMtTdbmz3q1FROjmFMN2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEkCbf5r
QdFl8sEMQOmJCx3duO1HMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvOTBDQzQwNjYz
NTBEMTFFRjlDQTI0MTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC00t0wDQYJKoZIhvcNAQELBQADggEBAGhu9ynnriytjjYE
sgvoA+D+JisQwNypoRN9kpWXNnBMmPv+2VHJa+ivdkfRNbYJjVgw8a3adZbz2f4U
AXNiSzTRixTSV2Lx4LMZqQuUvdJfq977LtezZ39MOSdDZmc3QrRzKC8D5NkwmF+H
iOHzmUJBKKz++6uc/sXyLnzrKzUDwT7+xWWQ3upZGwGRomOPMdv9slgh4lLF/N14
l1rZ6hWR2W8S0RbPp5xnX6+Bb0cA9s7FHKsu5xZt5juqiqk+DlSGNHxDrKzv9g1+
vFAHLYT0XXd7KLM+MSsbfLi+J8bITRdMY12qH9UB4rWP0Bn9xIHOSyH9JIIwIw8b
oRvz0Pg=
-----END CERTIFICATE-----
Generated at Thu Aug 29 14:27:37 2024 by rpki-client on console-ams.rpki-client.org