Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/129B5A6AF89011EEA51EC22AC4F9AE02.roa
File: 129B5A6AF89011EEA51EC22AC4F9AE02.roa (raw, json)
Hash identifier: AZvR3UZqSZZKHYzMvAif4mSVbXDW53v0jo9QkOVyM0c=
Subject key identifier: 05:35:C0:0B:D9:17:EC:8A:12:88:B1:CB:EA:EA:DA:52:60:B9:A4:D2
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: D7
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/129B5A6AF89011EEA51EC22AC4F9AE02.roa
Signing time: Fri 12 Apr 2024 05:51:56 +0000
ROA not before: Fri 12 Apr 2024 05:51:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 155.60.128.0/19 maxlen: 19
155.60.128.0/20 maxlen: 20
155.60.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 15 Apr 2024 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 12 05:51:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6618cbfc-a4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:10:20:92:ec:d5:d4:83:dd:64:37:99:c2:
16:8e:43:51:24:cf:38:7d:1b:61:c7:bb:f0:6a:a8:
33:e9:c6:d8:39:72:98:e0:ee:ff:96:e1:a7:ed:1f:
e9:8c:4e:7d:39:ee:17:aa:71:74:af:a2:57:da:94:
d8:bf:19:67:7a:75:16:6d:e9:4c:17:64:fb:7b:47:
61:35:57:9d:19:a6:6d:cb:99:ac:a6:e6:ba:b3:26:
17:ac:b7:d7:9c:12:cc:9a:eb:f6:5b:1d:71:76:ca:
34:8b:7a:0a:ed:47:0a:ed:1c:d0:2b:d7:cb:2a:ba:
30:32:36:ec:ba:ed:9e:77:5b:bc:c2:48:52:37:72:
78:e8:3b:86:e2:62:1b:a0:bc:b3:35:cc:9f:23:05:
8a:cb:d8:10:a0:6e:33:03:a1:28:e7:40:79:5d:ce:
02:af:e5:9a:2c:f6:72:7a:0c:77:20:fa:41:31:d3:
65:32:bb:db:87:d3:df:8d:61:39:d6:9c:68:9d:c0:
6b:c3:87:ca:a3:a0:d0:0d:c5:29:f4:45:b4:9d:da:
db:87:86:a6:fa:3a:0a:be:e5:8a:70:16:c2:4d:dd:
e8:ea:15:b1:bd:10:c2:57:1c:f8:06:11:08:f7:94:
49:2b:ce:3d:da:b4:67:bd:72:ca:46:77:03:82:7f:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:C0:0B:D9:17:EC:8A:12:88:B1:CB:EA:EA:DA:52:60:B9:A4:D2
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/129B5A6AF89011EEA51EC22AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.60.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:ea:9e:b2:1c:c7:2d:5c:65:8a:2d:1a:7e:6a:a7:77:e3:8f:
f0:79:0b:e6:c1:d7:f5:2d:6d:33:27:11:42:28:c3:1a:22:3c:
66:3b:10:57:24:bd:c5:3e:89:be:12:55:c6:c8:51:ee:53:21:
42:48:64:f9:00:9d:73:b3:a1:d6:28:bd:fd:18:46:8c:64:76:
4d:c7:49:5c:2f:d6:c1:79:dc:29:27:b0:dc:b3:60:68:41:8b:
da:ba:9e:f1:22:19:b4:05:3d:d4:cb:da:8c:a7:fb:ef:7d:2f:
b6:b1:a3:fd:ae:97:ed:de:18:3d:fe:9b:6b:81:1b:65:3a:10:
4d:6b:f3:77:e1:88:9e:a0:49:bc:da:da:a0:fa:e2:35:4a:a5:
ba:13:96:38:9c:51:a3:e7:fe:74:f3:7d:d8:54:92:4c:86:1d:
2b:1f:e9:a7:3c:d3:20:c1:5a:30:07:51:92:9d:7c:b7:1e:88:
8d:c2:c2:52:1f:a5:99:70:a3:d7:86:49:44:c1:ea:9b:9c:9e:
b7:25:08:72:fd:2a:48:67:b8:96:b1:64:cd:c8:76:6b:84:c2:
6a:79:56:d4:52:2a:c9:64:0f:1a:d9:86:d2:1a:3c:58:71:4a:
3d:b9:50:10:06:86:b0:73:6c:8e:7e:94:eb:63:4a:9f:e5:6e:
63:1d:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 06:39:34 2024 by rpki-client on console-ams.rpki-client.org