Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/5BC5148279D611EC98B60F5DC4F9AE02.roa
File: 5BC5148279D611EC98B60F5DC4F9AE02.roa (raw, json)
Hash identifier: lwFTPNywy0jDYwUmUVSkzmZDyzVyhrXuDcMCOefGsGA=
Subject key identifier: 1D:FE:63:3B:38:A0:2F:A4:44:E8:1B:83:78:D2:7E:A7:BF:2D:F5:5F
Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial: 288C
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/5BC5148279D611EC98B60F5DC4F9AE02.roa
Signing time: Sat 08 Jul 2023 14:30:10 +0000
ROA not before: Sat 08 Jul 2023 14:30:10 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 7470
IP address blocks: 134.196.0.0/16 maxlen: 17
Validation: Failed, certificate revoked on Thu 27 Jul 2023 05:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10380 (0x288c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Validity
Not Before: Jul 8 14:30:10 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a972f2-46de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:81:4d:32:05:96:2f:5f:76:3c:74:f6:fe:
15:47:5f:f1:75:07:78:68:7b:d5:3c:4d:93:23:cf:
dc:63:42:f0:ed:ac:2d:d6:3d:9c:c7:a0:fb:89:85:
6d:1f:5e:d7:f4:7d:41:ad:2a:76:cf:e3:8d:01:04:
c4:91:fc:e3:4e:3c:29:d6:82:88:3c:9c:2b:17:64:
1d:b1:b6:9a:f6:1d:8f:22:e7:34:1e:8f:cb:ac:41:
e1:90:95:2f:14:91:a7:9a:0d:fc:bf:c6:63:39:38:
55:da:67:e1:56:c5:0c:e0:e0:e3:85:2a:70:13:45:
5f:ea:79:28:1e:88:f4:86:a0:ac:26:b3:b4:db:3a:
60:d9:9c:45:07:91:9a:32:07:e9:ad:23:0d:2d:ec:
6d:d6:f1:e9:73:6e:f5:2a:c1:54:7d:52:ea:6e:bf:
62:4e:81:7b:3a:2f:0c:bc:17:86:4a:2f:a7:7c:9e:
23:48:4e:d4:d1:8f:16:07:54:94:d8:b7:de:62:c4:
c0:2d:33:33:37:15:90:2a:37:e8:29:a3:c4:c3:34:
38:03:16:b6:e9:1e:ce:05:46:2c:68:e0:a2:e6:f7:
88:61:c8:2e:db:5b:a0:e8:b5:03:f8:5a:3a:1f:30:
3c:72:8c:5d:b5:58:5f:66:33:b2:ca:c9:f2:29:44:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FE:63:3B:38:A0:2F:A4:44:E8:1B:83:78:D2:7E:A7:BF:2D:F5:5F
X509v3 Authority Key Identifier:
keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/5BC5148279D611EC98B60F5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:fb:70:30:37:4d:5a:60:e8:41:d0:f2:4c:27:2a:80:cd:9a:
e9:fe:2c:5b:36:8d:f2:9c:c7:6e:78:80:94:f8:f2:4a:c7:45:
51:6a:f9:b2:2d:84:68:9e:99:b0:94:a7:30:b9:e1:b0:01:a1:
c3:4c:ae:72:97:4e:8d:18:f0:2b:ab:b6:8b:38:62:c3:e5:59:
5f:c0:91:a2:af:7d:92:4d:f7:0d:be:4e:d3:f0:6c:2b:a5:96:
1d:b8:2c:2a:72:61:25:a1:ca:ac:c9:fb:f0:f2:c9:27:54:44:
7d:2a:f5:9c:53:da:37:54:4f:29:2a:15:e8:1a:6f:64:ea:c1:
43:ed:1f:7e:e9:37:3f:18:83:09:50:e4:ed:02:6f:36:26:e5:
26:79:47:73:73:1a:55:db:cf:34:42:75:b7:a7:36:2c:b8:de:
9f:b1:2c:c3:ac:be:fe:be:1c:47:bc:92:4d:f5:12:87:f0:60:
5c:84:07:16:ce:ef:e0:9f:8c:19:41:26:06:d7:7a:c9:5a:ec:
4e:38:c0:2a:24:9e:0b:2e:4e:47:99:d8:fb:79:bc:b6:ef:bf:
55:5b:3b:92:8e:d4:04:cb:1d:e3:5c:88:1c:4f:89:10:d7:ff:
5d:18:95:96:d1:07:be:8c:55:5a:8c:72:40:4c:72:e4:54:21:
e0:ff:46:cb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICKIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD
OUM4NzJCMzQwHhcNMjMwNzA4MTQzMDEwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzJmMi00NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAWBTTIFli9fdjx09v4VR1/xdQd4aHvVPE2TI8/cY0Lw7awt1j2cx6D7iYVt
H17X9H1BrSp2z+ONAQTEkfzjTjwp1oKIPJwrF2Qdsbaa9h2PIuc0Ho/LrEHhkJUv
FJGnmg38v8ZjOThV2mfhVsUM4ODjhSpwE0Vf6nkoHoj0hqCsJrO02zpg2ZxFB5Ga
MgfprSMNLext1vHpc271KsFUfVLqbr9iToF7Oi8MvBeGSi+nfJ4jSE7U0Y8WB1SU
2LfeYsTALTMzNxWQKjfoKaPEwzQ4Axa26R7OBUYsaOCi5veIYcgu21ug6LUD+Fo6
HzA8coxdtVhfZjOyysnyKUSZnQIDAQABo4IClDCCApAwHQYDVR0OBBYEFB3+Yzs4
oC+kROgbg3jSfqe/LfVfMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2
RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNkI4QjlEMEUzNkZGMTFFNDk5MDRBQzY2QzRGOUFFMDIvNUJDNTE0ODI3
OUQ2MTFFQzk4QjYwRjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCGxDANBgkqhkiG9w0BAQsFAAOCAQEAyPtwMDdNWmDoQdDy
TCcqgM2a6f4sWzaN8pzHbniAlPjySsdFUWr5si2EaJ6ZsJSnMLnhsAGhw0yucpdO
jRjwK6u2izhiw+VZX8CRoq99kk33Db5O0/BsK6WWHbgsKnJhJaHKrMn78PLJJ1RE
fSr1nFPaN1RPKSoV6BpvZOrBQ+0ffuk3PxiDCVDk7QJvNiblJnlHc3MaVdvPNEJ1
t6c2LLjen7Esw6y+/r4cR7ySTfUSh/BgXIQHFs7v4J+MGUEmBtd6yVrsTjjAKiSe
Cy5OR5nY+3m8tu+/VVs7ko7UBMsd41yIHE+JENf/XRiVltEHvoxVWoxyQExy5FQh
4P9Gyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org