Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FC22E8EA179B11EF918EC877C4F9AE02.roa
File: FC22E8EA179B11EF918EC877C4F9AE02.roa (raw, json)
Hash identifier: X8+lOqIhg7It9jkRjZIi9j9oXXPteoXhwmsX9o5X8gs=
Subject key identifier: BC:AC:DF:24:69:AD:95:B3:B3:CC:C5:76:35:7E:6B:F9:DD:45:D8:53
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2152
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FC22E8EA179B11EF918EC877C4F9AE02.roa
Signing time: Wed 26 Jun 2024 16:24:20 +0000
ROA not before: Wed 26 Jun 2024 16:24:20 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 180.210.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 05:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8530 (0x2152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jun 26 16:24:20 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=667c40b3-dac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:db:5b:9a:3f:74:59:3e:a2:d1:f8:14:8e:
51:85:12:57:4d:36:35:1e:68:bf:3e:62:33:1f:1c:
c9:03:24:79:81:ca:aa:ea:52:a8:fa:03:9a:47:15:
b5:80:b0:42:fd:86:6c:01:52:68:d9:2e:7c:d7:9e:
81:d6:a7:de:59:fc:8b:51:78:15:e3:60:20:2a:ab:
2e:4a:42:9a:d7:fe:8b:20:8c:ce:ea:86:80:a0:17:
5c:a5:a5:4d:b8:72:90:c0:82:b7:8e:3e:70:dc:6e:
34:65:14:77:a1:65:7e:3d:ca:8c:4d:c2:f2:f6:d0:
d2:f2:b1:62:b2:0d:ae:1d:32:b0:1a:ef:a7:7f:d5:
06:0d:47:4e:2e:93:d9:71:cb:c3:9f:a9:03:5c:0f:
e9:2c:37:fb:7f:5c:dd:62:60:98:57:88:89:c8:b2:
ac:ac:3e:7f:3c:b6:b3:56:80:b2:a6:75:81:90:96:
ad:fd:f1:46:13:f5:f5:95:3c:5b:fc:9d:77:97:9d:
34:4c:00:7c:5f:ec:24:07:ab:09:76:17:c3:b5:30:
6b:99:c2:ba:d8:bc:56:3c:25:ae:ee:45:3c:72:08:
f0:76:b3:e9:be:23:2a:78:05:83:92:d4:88:1d:f5:
e7:74:47:a1:10:a0:ff:07:48:69:62:64:43:dc:c7:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AC:DF:24:69:AD:95:B3:B3:CC:C5:76:35:7E:6B:F9:DD:45:D8:53
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FC22E8EA179B11EF918EC877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d4:e9:f5:0b:8f:98:07:ea:4d:a7:b9:96:12:fe:32:43:dc:
45:e4:7c:58:ce:2e:69:50:33:57:6d:3b:53:5a:dc:bb:30:f6:
73:08:83:3f:90:f9:fe:0b:e8:69:a1:02:26:80:81:d3:0f:c2:
ce:13:3c:e4:9c:31:47:43:e3:a6:d7:bc:09:1c:49:d4:21:7d:
06:26:ee:83:66:d0:fa:bc:80:5f:d0:c1:91:6f:67:05:43:f7:
e0:09:0e:bb:c9:90:d1:68:10:e0:19:c2:b3:6b:01:02:87:69:
fd:b1:5c:43:0d:36:de:6d:8e:f5:7b:6e:e9:21:a1:2b:21:af:
4c:c1:e9:c7:64:01:5b:44:2c:d9:ae:dc:9e:95:fa:62:3d:3f:
bf:b1:75:81:54:e3:69:55:2c:ca:61:59:c1:f4:a2:d0:d8:98:
25:59:6a:e5:ea:95:a8:c9:d5:1f:30:a3:df:ed:77:f1:79:7f:
fb:3c:a6:a2:a2:32:3c:db:01:d5:4f:9f:96:de:20:ab:68:28:
d1:57:47:e5:2e:42:46:68:19:12:46:57:6f:72:47:0e:46:2a:
bd:e6:bd:58:24:9f:37:e9:e5:3a:77:f3:7b:0c:e2:8b:87:84:
b7:02:1a:e5:e8:41:f6:08:00:9c:40:2a:08:1d:eb:b3:16:cc:
0a:4b:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:12:25 2024 by rpki-client on console-fra.rpki-client.org