Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/F5F9D2D0EF0611ED87629E26C4F9AE02.roa
File: F5F9D2D0EF0611ED87629E26C4F9AE02.roa (raw, json)
Hash identifier: WrZlNI7GTW5atSOBNUJeAGcxCCmyy9pfO3BHJ+M0qQw=
Subject key identifier: B5:B1:E8:53:6C:A9:08:71:0E:BC:F9:68:C8:6D:64:36:C6:6D:27:D0
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: B9
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/F5F9D2D0EF0611ED87629E26C4F9AE02.roa
Signing time: Tue 09 Apr 2024 06:39:43 +0000
ROA not before: Tue 09 Apr 2024 06:39:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 155.60.128.0/24 maxlen: 24
155.60.129.0/24 maxlen: 24
155.60.136.0/24 maxlen: 24
155.60.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 9 06:39:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6614e2af-5c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:07:13:e4:60:5e:1d:dd:4d:06:16:b2:d6:
24:d6:13:a7:fd:cc:9d:63:94:7c:6e:12:0e:76:89:
72:eb:49:af:ee:19:25:9c:8e:5e:e7:7c:b0:1a:71:
df:0f:b2:d7:f9:95:55:ce:9f:21:8a:60:92:65:73:
c0:a7:b2:89:0f:7b:37:0c:20:df:55:0d:42:82:b8:
ba:65:9c:92:b7:7f:04:92:92:99:ad:18:0c:f7:fe:
3a:94:c2:94:91:d2:b3:bc:4b:61:28:4a:56:a8:25:
b6:1d:44:5c:8c:83:59:83:bc:d2:21:b1:dc:b2:c3:
e0:6f:67:dc:f4:ac:27:25:73:8c:da:98:81:98:cb:
da:bc:e1:16:11:17:2a:9a:62:be:59:1a:f8:97:42:
db:f6:4d:dc:0d:36:f8:a0:13:c5:bd:96:7c:38:ea:
88:8e:91:07:56:6c:3f:7f:3d:13:0c:05:27:b0:40:
f4:dc:ca:1a:c2:b7:95:94:de:07:28:1d:d9:d5:1b:
c7:44:af:f9:5c:c9:10:9e:ba:7f:6d:30:39:7f:59:
6f:7f:03:97:33:36:52:75:80:6a:a6:83:b4:53:8f:
72:77:b2:32:18:55:9f:49:7a:fb:3f:46:c2:8d:c8:
84:33:58:1f:bf:aa:62:f4:82:2f:a1:d1:a0:c4:50:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:E8:53:6C:A9:08:71:0E:BC:F9:68:C8:6D:64:36:C6:6D:27:D0
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/F5F9D2D0EF0611ED87629E26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.60.128.0/23
155.60.136.0/23
Signature Algorithm: sha256WithRSAEncryption
14:78:bc:47:bf:1c:b9:3d:de:95:3b:5d:03:20:42:48:65:c4:
83:9e:d5:63:b9:c0:93:24:29:1b:bd:07:64:90:8a:e4:e1:48:
ad:59:af:8c:b9:f4:d9:82:01:21:45:99:2b:9f:76:a4:bd:bf:
48:2a:05:0a:34:3e:78:a5:66:3a:87:db:1a:fe:f0:cd:9d:25:
56:07:7e:7c:29:58:e9:a6:19:ce:07:68:c0:46:83:fb:2e:fa:
86:e7:40:d9:32:e6:ff:be:6c:74:33:8c:bd:86:11:46:98:7f:
f3:39:aa:f5:ca:f8:4f:b6:88:56:0c:ed:46:5b:48:4b:9e:4a:
4d:29:17:84:1d:02:a9:42:cd:29:2c:11:ea:bb:69:b9:69:88:
9c:93:50:fc:c9:25:6d:54:3f:43:b0:ce:6d:2b:0c:6c:b2:72:
ac:d3:d3:bd:f5:d2:f1:38:2c:a4:a0:7b:10:89:5d:9f:b1:6e:
70:cc:2d:fa:89:0c:95:d9:f9:97:b1:72:66:a1:04:d7:89:6e:
5a:ec:31:6e:a4:05:a4:ed:91:73:2d:45:96:0a:11:50:be:2b:
c4:6c:fb:62:19:7d:f9:1a:3e:c0:af:4b:62:1e:6a:c4:27:d4:
01:f6:6a:d9:ea:12:36:f6:1e:c9:43:45:3b:e9:d7:6a:c3:6e:
67:fa:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org