Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/68595AB65CCE11EC8C1BD170C4F9AE02.roa
File: 68595AB65CCE11EC8C1BD170C4F9AE02.roa (raw, json)
Hash identifier: KREYJBPxDmccznrrWfuofND6+h16NMERDYCsEuAJL94=
Subject key identifier: 51:20:AA:3C:8E:48:36:47:D1:74:7C:03:A4:86:E5:C2:42:D8:CF:C6
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 36D9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/68595AB65CCE11EC8C1BD170C4F9AE02.roa
Signing time: Sat 08 Jul 2023 14:31:36 +0000
ROA not before: Sat 08 Jul 2023 14:31:36 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 58924
IP address blocks: 110.170.141.0/24 maxlen: 24
110.170.145.0/24 maxlen: 24
171.102.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14041 (0x36d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 8 14:31:36 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a97348-9b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:9f:b2:cf:45:bc:a4:43:ab:49:34:22:88:
91:be:2f:eb:f9:0f:eb:70:bd:7e:05:9c:e0:44:93:
48:78:ef:41:8a:80:d7:d9:66:b8:1f:04:d7:94:55:
4b:b8:93:9b:72:d0:04:42:2b:7b:81:76:3b:84:b7:
b5:68:de:2d:56:d4:ec:09:c9:b2:ec:f5:9c:ae:9e:
09:75:11:76:47:58:0b:cf:d0:35:52:32:b9:e8:98:
0b:dc:0c:f1:78:2e:7c:2b:23:f8:db:5e:0b:54:72:
42:e2:3b:60:ba:b0:71:77:5f:f1:30:9f:52:0e:52:
b7:39:a1:02:61:0a:1c:58:22:96:3c:70:a3:05:a4:
fc:05:80:60:2a:b9:47:cc:2f:a7:60:25:b2:bd:92:
a4:4f:7f:e9:7a:b6:c9:c9:f3:72:78:07:41:a8:71:
04:3e:07:29:66:05:df:2c:dc:75:22:3b:ba:4c:f2:
85:f9:92:40:10:ca:ae:4b:ca:10:e1:68:12:03:45:
c1:99:5c:08:f0:f5:1e:5d:11:b1:cc:8a:db:37:ad:
de:57:1c:45:37:6b:be:9e:63:4d:e3:5b:32:c6:81:
a9:ee:24:4f:76:58:52:7d:af:77:16:c9:8d:c5:ae:
ba:65:91:c9:06:31:d3:48:00:8d:91:07:ba:33:8d:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:20:AA:3C:8E:48:36:47:D1:74:7C:03:A4:86:E5:C2:42:D8:CF:C6
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/68595AB65CCE11EC8C1BD170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.170.141.0/24
110.170.145.0/24
171.102.203.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a5:7c:95:bf:db:f3:79:b0:12:73:7f:6a:e5:f7:b3:96:fe:
ba:19:da:54:d3:c2:e3:04:9f:c1:15:34:0e:f4:78:5b:99:3f:
45:ed:83:dc:04:b7:da:99:e4:30:57:2b:94:c7:ad:43:9c:25:
07:2c:44:f1:af:d1:c4:5f:3e:03:8d:98:96:7a:00:4e:94:f3:
ea:c1:1a:bc:2d:f6:07:94:27:23:75:1d:89:1b:70:f9:ef:61:
bf:4c:ce:b2:99:59:9e:f8:a9:64:a8:43:ad:6e:27:00:27:e9:
85:c2:3c:59:d8:de:b0:21:2d:4d:c6:7f:76:1f:30:93:c1:da:
b2:2a:1c:61:67:a1:67:b7:5f:f0:00:29:49:88:21:48:e6:c8:
84:18:b2:32:38:37:ae:36:57:b9:b1:ab:9e:9c:cc:00:88:2d:
f6:9d:7b:73:40:38:2c:bf:24:89:8a:76:b9:e2:b6:41:82:e2:
77:83:81:4b:79:9a:b0:07:13:13:e7:2f:04:e3:39:d8:bc:21:
2c:4e:d2:7b:9a:7d:35:d3:46:6e:e7:8e:6a:a1:32:ac:26:b6:
cd:28:4b:a1:f5:5b:96:04:aa:d7:67:0a:1a:d8:00:c3:7a:3d:
23:6b:7d:e4:d8:cf:f5:8c:75:e3:d0:42:f6:9a:f8:73:c8:f4:
b9:36:7a:22
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICNtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzA4MTQzMTM2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5NzM0OC05YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUOfss9FvKRDq0k0IoiRvi/r+Q/rcL1+BZzgRJNIeO9BioDX2Wa4HwTXlFVL
uJObctAEQit7gXY7hLe1aN4tVtTsCcmy7PWcrp4JdRF2R1gLz9A1UjK56JgL3Azx
eC58KyP4214LVHJC4jtgurBxd1/xMJ9SDlK3OaECYQocWCKWPHCjBaT8BYBgKrlH
zC+nYCWyvZKkT3/perbJyfNyeAdBqHEEPgcpZgXfLNx1Iju6TPKF+ZJAEMquS8oQ
4WgSA0XBmVwI8PUeXRGxzIrbN63eVxxFN2u+nmNN41syxoGp7iRPdlhSfa93FsmN
xa66ZZHJBjHTSACNkQe6M41prQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFEgqjyO
SDZH0XR8A6SG5cJC2M/GMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNjg1OTVBQjY1
Q0NFMTFFQzhDMUJEMTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABuqo0DBABuqpEDBACrZsswDQYJKoZIhvcNAQELBQADggEB
AJOlfJW/2/N5sBJzf2rl97OW/roZ2lTTwuMEn8EVNA70eFuZP0Xtg9wEt9qZ5DBX
K5THrUOcJQcsRPGv0cRfPgONmJZ6AE6U8+rBGrwt9geUJyN1HYkbcPnvYb9MzrKZ
WZ74qWSoQ61uJwAn6YXCPFnY3rAhLU3Gf3YfMJPB2rIqHGFnoWe3X/AAKUmIIUjm
yIQYsjI4N642V7mxq56czACILfade3NAOCy/JImKdrnitkGC4neDgUt5mrAHExPn
LwTjOdi8ISxO0nuafTXTRm7njmqhMqwmts0oS6H1W5YEqtdnChrYAMN6PSNrfeTY
z/WMdePQQvaa+HPI9Lk2eiI=
-----END CERTIFICATE-----
Generated at Tue Feb 6 04:09:28 2024 by rpki-client on console-fra.rpki-client.org