Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/AC891298E69D11EEAB68C141C4F9AE02.roa
File: AC891298E69D11EEAB68C141C4F9AE02.roa (raw, json)
Hash identifier: ZilPDz3giXHSRAi59+Ix3PRGcHv85O/xfMn/qwRi3bE=
Subject key identifier: 90:6B:5E:00:34:36:D6:5D:8C:54:E4:3D:57:9D:05:0C:12:DB:C7:67
Certificate issuer: /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial: 0126
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/AC891298E69D11EEAB68C141C4F9AE02.roa
Signing time: Wed 20 Mar 2024 09:38:58 +0000
ROA not before: Wed 20 Mar 2024 09:38:58 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 55933
IP address blocks: 45.127.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 26 Mar 2024 06:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Validity
Not Before: Mar 20 09:38:58 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65faaeb1-fb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:6e:8f:af:5f:8e:49:34:31:98:a3:99:b9:
34:e0:03:85:b2:3c:2b:11:3c:3d:32:f3:49:78:9f:
2a:ff:fe:ea:06:03:ba:bf:e2:6c:0e:db:86:7a:a6:
b3:41:a0:03:a7:41:4c:bc:11:aa:84:1b:c9:d7:a7:
04:70:05:e5:fc:24:33:5e:99:8d:7b:51:6f:c1:44:
69:a7:46:31:74:ac:ea:20:73:8d:16:86:d6:79:ac:
ec:d5:a2:89:28:96:87:86:ea:67:5f:00:22:79:ec:
4f:9c:06:04:c8:39:a6:49:b3:18:bc:a1:eb:37:36:
cf:08:0d:df:37:58:cf:c3:9a:57:92:88:64:2d:1e:
27:d4:b6:31:40:4e:80:10:4b:4f:7f:66:d4:18:9b:
2c:49:4f:fc:82:1c:96:61:f9:78:66:ed:c4:40:5f:
6f:fa:69:1f:55:c9:5a:7d:a6:9a:fb:ca:bc:3a:bd:
b9:55:7f:20:50:dc:ee:ea:9a:91:fe:93:be:85:b9:
0d:96:92:c1:78:38:7a:b6:48:ad:cd:e5:b5:6c:80:
30:4b:b9:fc:cf:6d:4c:be:70:07:80:b7:7a:26:3f:
b5:e5:64:6f:dd:3c:2b:71:bf:b4:32:21:64:08:1e:
93:e8:0e:fd:7b:f8:52:dd:2f:e7:94:64:a1:7f:01:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6B:5E:00:34:36:D6:5D:8C:54:E4:3D:57:9D:05:0C:12:DB:C7:67
X509v3 Authority Key Identifier:
keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/AC891298E69D11EEAB68C141C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.194.0/23
Signature Algorithm: sha256WithRSAEncryption
89:29:db:0f:0a:0f:38:90:6f:71:78:42:b2:c4:c9:ca:58:e0:
cb:7e:8c:f2:08:28:ae:ca:b6:7f:2f:3d:0c:fd:76:2f:01:f4:
43:71:7e:0c:a7:06:81:da:a2:c9:3f:f9:53:55:ea:ee:97:bf:
c3:84:84:bb:ea:90:f2:7d:1c:43:1e:54:59:4e:7b:71:84:fa:
56:87:23:d6:e1:b1:5e:99:3d:d4:3f:0c:63:ca:d9:42:e0:22:
63:ad:bf:60:21:7a:9a:20:06:46:e3:b0:e8:f3:8a:b4:07:40:
5b:d2:d5:55:da:2e:83:9b:91:81:f0:6c:b8:26:fc:ad:90:8c:
dc:b6:13:0c:d7:6b:d7:d9:0c:2d:1f:8a:f5:7e:d4:7c:83:ff:
ce:a3:c9:da:02:fb:78:97:2a:67:2e:18:93:10:66:93:bb:5e:
52:78:68:ec:32:d7:16:7e:a9:3f:8a:c7:19:50:f2:b7:70:b4:
45:da:1c:64:19:cf:bf:b8:8d:a7:d8:66:3b:24:0d:89:6d:32:
ce:a7:97:d7:9f:8b:40:7e:50:3f:18:53:1d:1d:26:51:3d:1b:
ed:37:b8:77:48:9a:65:90:64:b5:d2:26:95:cb:21:d0:0a:38:
91:64:ad:23:df:80:cc:85:c1:27:bb:d5:81:fe:1f:97:1e:15:
21:2a:21:01
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVDMDgxMTAvBgNVBAUTKEQxQjhFNjcxOTczNTU5MDIwRjg3MDNEMTdEQ0Q4OTI2
OTJFNjQwQTIwHhcNMjQwMzIwMDkzODU4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWZhYWViMS1mYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqEZuj69fjkk0MZijmbk04AOFsjwrETw9MvNJeJ8q//7qBgO6v+JsDtuGeqaz
QaADp0FMvBGqhBvJ16cEcAXl/CQzXpmNe1FvwURpp0YxdKzqIHONFobWeazs1aKJ
KJaHhupnXwAieexPnAYEyDmmSbMYvKHrNzbPCA3fN1jPw5pXkohkLR4n1LYxQE6A
EEtPf2bUGJssSU/8ghyWYfl4Zu3EQF9v+mkfVclafaaa+8q8Or25VX8gUNzu6pqR
/pO+hbkNlpLBeDh6tkitzeW1bIAwS7n8z21MvnAHgLd6Jj+15WRv3Twrcb+0MiFk
CB6T6A79e/hS3S/nlGShfwGV/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJBrXgA0
NtZdjFTkPVedBQwS28dnMB8GA1UdIwQYMBaAFNG45nGXNVkCD4cD0X3NiSaS5kCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUMwOC84MTJBMkM1ODdE
M0IxMUVEOThCRjlFNDhDNEY5QUUwMi8wYmptY1pjMVdRSVBod1BSZmMySkpwTG1R
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBiam1jWmMxV1FJUGh3UFJmYzJKSnBMbVFLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVDMDgvODEyQTJDNTg3RDNCMTFFRDk4QkY5RTQ4QzRGOUFFMDIvQUM4OTEyOThF
NjlEMTFFRUFCNjhDMTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEtf8IwDQYJKoZIhvcNAQELBQADggEBAIkp2w8KDziQb3F4
QrLEycpY4Mt+jPIIKK7Ktn8vPQz9di8B9ENxfgynBoHaosk/+VNV6u6Xv8OEhLvq
kPJ9HEMeVFlOe3GE+laHI9bhsV6ZPdQ/DGPK2ULgImOtv2AhepogBkbjsOjzirQH
QFvS1VXaLoObkYHwbLgm/K2QjNy2EwzXa9fZDC0fivV+1HyD/86jydoC+3iXKmcu
GJMQZpO7XlJ4aOwy1xZ+qT+KxxlQ8rdwtEXaHGQZz7+4jafYZjskDYltMs6nl9ef
i0B+UD8YUx0dJlE9G+03uHdImmWQZLXSJpXLIdAKOJFkrSPfgMyFwSe71YH+H5ce
FSEqIQE=
-----END CERTIFICATE-----
Generated at Tue Mar 26 09:32:32 2024 by rpki-client on console-fra.rpki-client.org