Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E92B4D90179B11EF9611576FC4F9AE02.roa
File: E92B4D90179B11EF9611576FC4F9AE02.roa (raw, json)
Hash identifier: 7+5Emdo1PCWNSreAlm7z+TM14H696pGqk3ABgvIWgWw=
Subject key identifier: 33:76:4C:4D:5D:36:60:34:DB:D4:A0:DE:EB:4F:7A:D0:A7:AE:6F:F7
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2151
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E92B4D90179B11EF9611576FC4F9AE02.roa
Signing time: Wed 26 Jun 2024 16:24:19 +0000
ROA not before: Wed 26 Jun 2024 16:24:19 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 399646
IP address blocks: 180.210.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 10:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8529 (0x2151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jun 26 16:24:19 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=667c40b2-4d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:d4:4f:65:df:64:01:e1:05:04:07:3d:27:
00:b3:5a:bc:28:ec:d0:7f:0c:be:de:07:39:d4:31:
d8:de:58:a7:f7:4e:18:85:8e:df:99:0f:e1:a0:dc:
18:fa:b1:61:16:59:58:98:31:8f:e9:7b:5c:a0:23:
bc:2b:ae:8b:c0:58:77:0a:ad:7c:0d:78:1f:78:85:
6c:57:1a:05:f2:d5:93:74:d5:be:1e:73:83:23:43:
e6:51:b2:02:c5:31:82:f6:f7:b1:8f:ee:4f:20:27:
6d:63:ff:56:27:c8:2f:7c:ca:8f:2a:9a:9d:e8:d4:
bf:9a:04:ba:c7:45:32:58:51:10:b6:b7:eb:4e:30:
9a:ce:6b:41:1b:77:ea:34:29:88:46:4c:0b:2f:c4:
3f:38:e2:35:99:95:9e:d8:fa:b0:37:da:1a:f8:da:
e8:d5:2a:f7:0f:00:60:f8:f9:7a:88:b5:70:5c:e5:
8b:9a:a0:02:71:cc:86:09:2e:be:75:85:f9:28:e8:
3b:d1:bf:32:3f:62:d9:77:2d:65:b1:06:0f:91:63:
ad:31:c1:c1:e2:90:96:f1:9d:4e:ed:2b:c8:9d:17:
43:b7:4a:30:6d:e3:8a:c0:ed:75:66:85:c7:e4:86:
c9:88:85:93:4f:6c:52:08:be:18:9e:06:51:cb:0d:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:4C:4D:5D:36:60:34:DB:D4:A0:DE:EB:4F:7A:D0:A7:AE:6F:F7
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E92B4D90179B11EF9611576FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f9:c4:c1:72:ab:59:1d:e5:00:a9:a2:a0:52:4e:d3:1d:e6:
bc:70:4c:b7:1b:7a:c9:58:08:fe:42:fd:e8:af:d9:89:22:2b:
d4:b0:6b:21:0e:7b:99:b5:c2:3d:b4:08:24:a4:54:c4:07:ae:
8c:88:af:cb:e4:74:95:e4:30:3d:4d:eb:b1:34:e7:d0:d4:f5:
14:83:48:1b:06:2f:d6:c9:0c:d8:ff:a4:3e:c5:44:6a:98:7f:
40:a2:e8:a3:4b:5e:5b:16:24:5b:63:f3:9c:a5:f9:96:8d:c6:
1e:18:7f:7a:3f:81:f6:be:6f:0e:b7:7d:cf:5e:f4:b6:f8:1d:
26:e5:ef:03:40:b2:f9:1b:ff:d2:c7:4f:df:38:d8:bd:79:cd:
24:3e:93:75:fe:59:83:eb:18:b3:e5:ac:da:16:2e:3d:bb:3a:
11:32:c4:f8:72:81:f2:0d:06:3a:03:c0:57:72:ba:a1:b3:5c:
51:14:44:cc:2d:0c:ad:d4:c2:e9:f5:cf:eb:14:30:53:fe:21:
2a:27:c9:fc:42:41:6b:d5:28:b2:81:c7:f9:6c:d9:da:67:2f:
37:0a:59:9d:23:f3:9d:32:3e:e1:e0:c3:c9:09:e5:bc:c1:4a:
0a:a4:91:73:c1:20:f3:a7:ae:03:dc:ef:52:93:3c:60:79:80:
3a:43:ba:e5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjQwNjI2MTYyNDE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdjNDBiMi00ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0tDUT2XfZAHhBQQHPScAs1q8KOzQfwy+3gc51DHY3lin904YhY7fmQ/hoNwY
+rFhFllYmDGP6XtcoCO8K66LwFh3Cq18DXgfeIVsVxoF8tWTdNW+HnODI0PmUbIC
xTGC9vexj+5PICdtY/9WJ8gvfMqPKpqd6NS/mgS6x0UyWFEQtrfrTjCazmtBG3fq
NCmIRkwLL8Q/OOI1mZWe2PqwN9oa+Nro1Sr3DwBg+Pl6iLVwXOWLmqACccyGCS6+
dYX5KOg70b8yP2LZdy1lsQYPkWOtMcHB4pCW8Z1O7SvInRdDt0owbeOKwO11ZoXH
5IbJiIWTT2xSCL4YngZRyw2cJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDN2TE1d
NmA029Sg3utPetCnrm/3MB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvRTkyQjREOTAx
NzlCMTFFRjk2MTE1NzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC00t8wDQYJKoZIhvcNAQELBQADggEBAKT5xMFyq1kd5QCp
oqBSTtMd5rxwTLcbeslYCP5C/eiv2YkiK9SwayEOe5m1wj20CCSkVMQHroyIr8vk
dJXkMD1N67E059DU9RSDSBsGL9bJDNj/pD7FRGqYf0Ci6KNLXlsWJFtj85yl+ZaN
xh4Yf3o/gfa+bw63fc9e9Lb4HSbl7wNAsvkb/9LHT9842L15zSQ+k3X+WYPrGLPl
rNoWLj27OhEyxPhygfINBjoDwFdyuqGzXFEURMwtDK3Uwun1z+sUMFP+ISonyfxC
QWvVKLKBx/ls2dpnLzcKWZ0j850yPuHgw8kJ5bzBSgqkkXPBIPOnrgPc71KTPGB5
gDpDuuU=
-----END CERTIFICATE-----
Generated at Mon Nov 18 12:16:04 2024 by rpki-client on console-fra.rpki-client.org