Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/F6802D08EF0611ED87629E26C4F9AE02.roa
File: F6802D08EF0611ED87629E26C4F9AE02.roa (raw, json)
Hash identifier: cDe9Yh7uib4KTUmZea/JQC2UG8bCv5LYIM1IRBNyZDg=
Subject key identifier: 26:C6:C6:B5:06:74:30:29:2E:E5:BE:5D:4E:FD:A6:68:65:7E:42:97
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: BA
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/F6802D08EF0611ED87629E26C4F9AE02.roa
Signing time: Tue 09 Apr 2024 06:39:44 +0000
ROA not before: Tue 09 Apr 2024 06:39:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 155.60.128.0/24 maxlen: 24
155.60.129.0/24 maxlen: 24
155.60.136.0/24 maxlen: 24
155.60.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 9 06:39:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6614e2b0-52c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:a4:da:ab:50:ac:a2:1e:b1:a0:a7:ff:bd:
6f:58:ba:34:b3:de:00:1c:3d:75:55:11:a6:43:7d:
8b:b1:9b:2c:8f:98:ba:4a:46:9e:ac:83:87:80:c9:
66:f2:51:0d:f1:37:6a:7a:53:2f:ee:8d:e6:04:4a:
66:48:ff:aa:42:3d:09:da:9e:ff:81:4e:7b:65:a1:
9d:44:d4:b5:9d:99:b3:c3:58:9c:f3:dc:d6:bb:6e:
12:86:80:a4:cd:76:28:ff:ee:84:4b:20:5a:56:a6:
30:9b:9a:52:da:f1:91:b4:62:41:4b:76:3b:c4:25:
a5:cd:55:05:ee:ab:c9:7c:df:ce:a0:fb:b2:dd:cc:
39:d3:5d:6a:3b:35:71:9f:73:32:8a:6e:c4:dc:49:
6f:99:37:c9:3d:0e:a9:18:4b:ef:bb:61:7e:c0:54:
64:63:6c:1a:c3:3c:d6:a1:95:a8:96:2d:c5:dc:66:
0b:8f:d4:cc:b0:63:7a:8b:da:99:f8:7e:92:7d:e7:
7d:d1:36:09:1f:ff:0b:e0:6a:82:40:7d:39:60:e3:
13:09:68:56:d1:bc:7f:1d:fe:32:c9:66:25:c7:8f:
b4:a6:b4:c1:f6:8a:d7:fd:3c:60:5b:5f:29:73:65:
dd:eb:ec:1e:97:d7:16:e0:00:47:76:90:d9:eb:4e:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:C6:B5:06:74:30:29:2E:E5:BE:5D:4E:FD:A6:68:65:7E:42:97
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/F6802D08EF0611ED87629E26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.60.128.0/23
155.60.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:84:8a:fc:d2:da:26:ee:22:47:aa:52:16:88:ec:6d:76:c3:
83:35:46:47:ec:b5:f5:c3:ea:8a:81:78:db:cb:72:b0:f8:f4:
75:be:61:f8:d9:f7:44:c0:5c:01:a5:48:fe:3c:fc:56:a2:09:
93:8d:0e:48:2e:17:86:aa:3f:38:69:d5:55:9b:44:80:c1:0a:
6a:e6:f0:ed:28:20:21:b5:33:0b:c7:64:47:e6:a7:e9:99:f9:
67:ea:dc:00:06:28:be:58:39:f0:98:99:3c:ed:d7:ff:38:f9:
bb:51:96:6d:a0:ea:aa:c6:c9:33:43:87:3c:e6:6e:2b:7a:6f:
2d:14:96:2b:58:8c:3a:b2:e2:48:8c:bc:80:a1:40:86:f3:c6:
0a:fc:7a:76:a4:58:84:7b:40:eb:e9:3f:2e:87:d3:1f:59:ef:
1f:75:20:b7:f3:cf:89:9f:9b:0b:9e:73:fa:80:90:01:fc:e6:
ba:74:f2:08:1c:8b:c4:6a:4a:0c:e7:42:fb:a1:9d:27:78:c9:
1b:f9:3b:11:ea:53:30:7e:d5:c0:61:e3:2c:36:b8:b5:b5:7c:
6b:f9:c0:19:f3:4a:b7:cb:01:63:d7:f7:54:e6:f1:d1:b0:18:
3b:36:70:98:b0:a2:97:23:64:d7:95:30:35:4d:a7:fb:8f:3b:
9f:86:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org