Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/3C542576384111EF860DDD43C4F9AE02.roa
File: 3C542576384111EF860DDD43C4F9AE02.roa (raw, json)
Hash identifier: Xlwa4qPPD81pPSpHQPhXYk3Xahv4wpWsyWNbEiqzaGw=
Subject key identifier: DB:B4:59:BC:74:36:74:CC:96:12:1F:77:C7:B9:E1:F6:9B:1C:7F:E8
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 094C
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/3C542576384111EF860DDD43C4F9AE02.roa
Signing time: Tue 02 Jul 2024 07:04:38 +0000
ROA not before: Tue 02 Jul 2024 07:04:38 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 152475
IP address blocks: 203.168.240.0/24 maxlen: 24
203.168.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Jul 2 07:04:38 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6683a686-598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:28:45:24:b5:05:2d:f4:3f:79:a7:5b:3f:
55:64:c4:74:9d:6a:2b:10:aa:42:82:b4:ef:95:d0:
ba:53:9b:a5:9d:a0:48:75:db:bc:0d:42:14:a8:70:
a2:91:80:01:d1:b6:96:e8:56:b6:d3:8f:6d:86:a0:
e4:45:d6:bb:67:c0:f4:d2:05:19:ca:fa:11:88:b9:
7a:d6:aa:52:00:d0:cd:ef:55:87:2a:9b:3a:7d:27:
a2:76:76:fb:69:52:3a:d2:45:db:5c:69:a9:4d:9b:
9b:d5:c9:65:34:0b:00:09:db:fc:b9:3f:68:73:0d:
65:4e:1e:2e:b6:8e:0d:98:bc:59:00:c4:73:99:91:
3b:d7:f3:28:51:15:61:9c:f9:fc:30:e3:ff:28:c1:
86:01:6e:d1:6a:81:a7:07:cf:20:b1:ca:2e:b8:d0:
61:5f:37:ce:11:99:03:6e:dc:d0:85:ea:2e:13:fe:
2a:cd:ed:4c:37:5f:61:b7:3f:54:8c:05:40:b5:7a:
3b:4e:18:3d:5d:c8:a0:d1:a4:05:2f:93:46:d9:b2:
a8:75:4b:65:b0:aa:39:8f:7f:64:c9:d2:73:03:f1:
92:11:3a:fc:3e:d6:46:36:99:07:ec:20:42:eb:1b:
dc:09:bb:ef:35:07:88:1a:3b:d3:13:11:3b:78:42:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:59:BC:74:36:74:CC:96:12:1F:77:C7:B9:E1:F6:9B:1C:7F:E8
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/3C542576384111EF860DDD43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.168.240.0/24
203.168.253.0/24
Signature Algorithm: sha256WithRSAEncryption
49:52:38:41:1b:b8:8e:e9:b8:66:83:0b:5c:d8:b7:79:94:db:
7c:11:5d:6c:03:f1:30:db:bd:b7:77:a5:52:7e:6c:b9:a8:57:
51:bb:18:61:6f:92:02:0d:cf:59:02:da:0b:88:27:d7:f0:f9:
e3:09:8e:4b:98:93:d6:81:f8:21:02:98:e2:87:cd:f8:77:77:
58:40:31:48:0b:6a:86:d7:2a:67:3f:aa:28:59:fe:81:07:e7:
2a:39:2b:b0:36:c1:94:74:fd:b7:f7:8f:93:b1:81:fc:bc:f9:
ce:6c:b0:e3:ca:4a:09:20:05:3a:d2:90:41:87:1d:56:98:bd:
ce:73:3c:b1:ed:67:24:ad:2f:ee:f2:12:f8:bf:3e:d6:1f:09:
a8:7a:d0:2e:35:a1:3b:70:e5:ee:53:5e:37:7a:8f:fe:44:32:
e4:b9:fd:64:16:e4:ca:1b:0c:2a:e2:85:96:3a:c2:72:c1:5d:
bd:44:7a:ff:a5:54:a7:2e:f1:5d:15:77:4d:5c:cd:b4:f4:94:
4d:d7:5c:f5:e2:13:4d:29:ae:63:d9:6b:a6:6d:14:60:00:98:
10:1d:b1:dd:51:37:88:4e:e3:19:f3:04:db:b8:80:25:ce:de:
3b:de:c2:47:4d:17:ab:17:fb:54:bb:8a:71:3d:1a:14:e4:91:
97:78:a4:e0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjQwNzAyMDcwNDM4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjgzYTY4Ni01OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xcoRSS1BS30P3mnWz9VZMR0nWorEKpCgrTvldC6U5ulnaBIddu8DUIUqHCi
kYAB0baW6Fa2049thqDkRda7Z8D00gUZyvoRiLl61qpSANDN71WHKps6fSeidnb7
aVI60kXbXGmpTZub1cllNAsACdv8uT9ocw1lTh4uto4NmLxZAMRzmZE71/MoURVh
nPn8MOP/KMGGAW7RaoGnB88gscouuNBhXzfOEZkDbtzQheouE/4qze1MN19htz9U
jAVAtXo7Thg9Xcig0aQFL5NG2bKodUtlsKo5j39kydJzA/GSETr8PtZGNpkH7CBC
6xvcCbvvNQeIGjvTExE7eELNzwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNu0Wbx0
NnTMlhIfd8e54fabHH/oMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvM0M1NDI1NzYz
ODQxMTFFRjg2MERERDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLqPADBADLqP0wDQYJKoZIhvcNAQELBQADggEBAElSOEEb
uI7puGaDC1zYt3mU23wRXWwD8TDbvbd3pVJ+bLmoV1G7GGFvkgINz1kC2guIJ9fw
+eMJjkuYk9aB+CECmOKHzfh3d1hAMUgLaobXKmc/qihZ/oEH5yo5K7A2wZR0/bf3
j5Oxgfy8+c5ssOPKSgkgBTrSkEGHHVaYvc5zPLHtZyStL+7yEvi/PtYfCah60C41
oTtw5e5TXjd6j/5EMuS5/WQW5MobDCrihZY6wnLBXb1Eev+lVKcu8V0Vd01czbT0
lE3XXPXiE00prmPZa6ZtFGAAmBAdsd1RN4hO4xnzBNu4gCXO3jvewkdNF6sX+1S7
inE9GhTkkZd4pOA=
-----END CERTIFICATE-----
Generated at Wed Aug 7 10:40:55 2024 by rpki-client on console-ams.rpki-client.org