Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/D8178FEEF7DB11EE89DE2739C4F9AE02.roa
File: D8178FEEF7DB11EE89DE2739C4F9AE02.roa (raw, json)
Hash identifier: yZ5k3x15vRgGF6HdWUOTNfDk6tab6/RS8t5tHi/AhXI=
Subject key identifier: 93:60:8C:47:80:F4:14:93:9F:F8:BF:BC:A4:F4:FE:F0:A9:33:0D:23
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: C6
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/D8178FEEF7DB11EE89DE2739C4F9AE02.roa
Signing time: Thu 11 Apr 2024 08:16:49 +0000
ROA not before: Thu 11 Apr 2024 08:16:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 155.60.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Fri 12 Apr 2024 05:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 11 08:16:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66179c71-5a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:4a:2a:5e:4f:45:dd:79:90:ba:87:7d:ec:
20:dd:e0:0d:03:b3:41:f8:cd:63:d4:44:70:c9:63:
99:00:e4:df:e2:3f:28:22:48:93:f2:57:99:1d:02:
a9:07:12:53:96:5e:2d:3c:57:2f:93:e2:df:6f:39:
1b:f5:61:5d:04:00:f0:51:55:db:b5:10:fd:eb:30:
61:c1:65:42:45:35:14:ae:1d:f7:ef:7e:cc:21:b9:
2f:ea:41:62:ce:43:64:6b:67:a4:54:1e:a8:89:d3:
af:a6:ff:b5:5d:84:9a:18:1a:47:5e:f9:71:31:43:
1e:98:ed:e7:ad:36:a4:df:b3:1b:26:57:d2:3e:94:
46:af:12:40:77:cb:d4:29:4a:32:9b:9e:1d:7b:01:
c1:41:5a:ab:47:b0:20:03:0b:2a:10:d1:b8:04:58:
54:bb:ca:df:7c:21:c2:e9:ea:82:74:44:4b:c8:08:
c6:42:7f:33:cb:3e:fa:4e:99:ea:fa:15:b4:a4:49:
ca:d8:e2:de:f7:f6:0e:49:1f:ec:c4:2a:50:d1:70:
da:09:88:ad:52:70:6c:17:5f:f5:d7:7b:85:b6:f0:
eb:3f:71:74:3e:82:03:61:ab:75:dc:1c:ae:11:65:
99:a2:76:d2:ae:1f:ac:4e:72:fd:f4:b3:53:d3:3f:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:8C:47:80:F4:14:93:9F:F8:BF:BC:A4:F4:FE:F0:A9:33:0D:23
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/D8178FEEF7DB11EE89DE2739C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.60.128.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:b2:54:8f:af:11:79:1b:48:4c:6a:85:c1:01:fb:7e:7c:82:
07:e2:5b:35:bc:d4:16:15:4e:de:59:b3:f8:78:cb:e1:b6:52:
87:bc:51:87:51:01:91:1f:06:a0:66:b0:68:89:45:82:6f:4b:
f9:24:5d:1a:80:5c:a3:18:c3:54:ac:68:e9:09:98:f8:bb:1d:
8f:e8:24:d5:2e:4b:40:55:08:40:74:0b:60:12:63:c1:e4:c1:
68:b7:e8:97:1a:31:24:da:5b:0b:55:a9:6b:f0:aa:8d:4c:ee:
d2:02:e2:fa:4c:fc:af:64:52:44:07:b4:e6:d9:1f:97:a6:90:
6e:28:a9:d9:41:27:25:d0:4b:55:e8:45:84:f8:af:53:42:c5:
0b:5a:da:25:55:8a:f3:eb:06:5d:ce:3d:6c:36:5b:96:df:94:
60:20:bd:54:de:a5:c5:34:36:2f:fe:47:cc:0e:c5:c5:91:3a:
59:cb:f5:88:22:d5:6f:32:78:d7:4f:f8:74:94:f8:b7:69:73:
8f:2e:4a:51:59:f9:24:e9:b5:50:7e:5b:dd:a8:ed:ca:3a:c9:
a2:29:9b:c6:48:c4:6d:fc:86:20:b0:ac:40:8c:dc:75:91:18:
ed:69:29:65:2e:a4:c6:a0:ea:61:5e:a0:89:8d:80:62:02:34:
cb:c5:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org