Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F13B6A1C726C11EEA867FB5FC4F9AE02.roa
File: F13B6A1C726C11EEA867FB5FC4F9AE02.roa (raw, json)
Hash identifier: MBEN6OfKNek3yegoJ7MvSUWFMVab6jFvza2sOH++za8=
Subject key identifier: 0F:C3:4B:B6:1E:2A:B4:EE:91:76:77:6E:CC:8A:0A:C1:D6:2A:B1:A1
Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial: 02
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F13B6A1C726C11EEA867FB5FC4F9AE02.roa
Signing time: Tue 24 Oct 2023 12:57:52 +0000
ROA not before: Tue 24 Oct 2023 12:57:52 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58605
IP address blocks: 117.18.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Validity
Not Before: Oct 24 12:57:52 2023 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6537bf50-11e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:1a:8d:47:5f:9c:51:9d:f2:2d:89:6c:0e:
af:5a:ac:cd:a2:5b:4e:55:c6:cd:ee:ec:92:b0:83:
23:f9:3c:8c:81:96:b9:38:49:54:d1:46:45:84:20:
9e:1a:fb:b5:02:6b:03:03:91:64:c4:5d:7e:9a:9e:
76:0d:3c:09:88:57:72:af:5f:3c:6a:8e:e7:f0:53:
25:b8:08:3f:93:81:7b:ff:b5:6e:c3:38:d0:76:01:
8f:f0:85:bf:c8:18:cf:cd:71:3c:0f:7c:84:6f:b9:
ef:89:d4:4f:f3:e7:6b:ab:3d:0c:4a:ab:ab:52:b0:
57:ac:1f:65:da:ab:90:24:a3:f0:36:cf:23:c1:6f:
b5:11:16:a3:3e:56:86:a5:86:6a:22:64:ac:95:6c:
a4:f2:8c:d4:3d:59:4c:1d:66:e6:ae:ec:f5:49:9c:
fe:b5:38:d0:65:d8:f3:17:9a:f5:8d:37:3d:ac:7d:
9c:93:2e:7e:50:89:27:a9:fe:de:29:a9:f6:e6:0c:
30:71:6e:08:35:ab:3a:67:bb:a7:9d:ef:d2:ac:33:
38:07:e3:30:36:f2:7b:65:05:2a:6e:bd:de:cc:24:
f7:de:a8:d2:78:32:c1:28:14:02:3f:de:3c:af:04:
ff:54:ef:a1:1c:e3:e6:ca:65:b9:58:25:5a:79:fb:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C3:4B:B6:1E:2A:B4:EE:91:76:77:6E:CC:8A:0A:C1:D6:2A:B1:A1
X509v3 Authority Key Identifier:
keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F13B6A1C726C11EEA867FB5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:66:c1:1a:4a:8e:90:f7:82:49:90:b2:44:57:8c:65:4c:93:
9d:43:76:f2:b7:88:36:a7:ba:1d:ca:56:ae:17:18:2e:45:87:
d5:4b:d8:85:93:bd:3c:fb:25:fa:cb:73:57:f3:c2:bb:75:ee:
ac:61:b3:6f:33:7d:f0:b0:ed:5f:9e:54:9a:74:30:87:6b:20:
e6:aa:d9:90:46:21:a8:c8:1f:3b:1a:78:7c:a1:7c:46:02:aa:
c5:59:ab:f7:17:0c:2c:ff:6b:4b:f3:15:10:32:87:53:da:a1:
e7:34:34:91:5b:c9:ab:bb:c6:10:d1:96:b7:c8:09:16:ca:d9:
b3:3e:98:2b:eb:f9:6b:d4:17:98:7a:32:55:40:9f:29:6b:fa:
00:fb:24:d6:b4:06:f7:30:9a:25:0c:f1:8f:ab:7d:7e:5e:af:
ba:f5:31:a4:a5:76:24:36:8b:64:2a:28:93:ce:8d:29:09:9f:
db:3f:b0:24:2c:10:95:94:c0:a2:18:fd:5a:fb:d4:af:b0:c5:
ca:0b:5e:53:82:5b:7d:05:76:a4:64:11:f3:90:49:8c:67:e8:
c5:46:ea:62:61:86:d9:e2:b7:9b:64:86:ad:10:b9:c0:94:b4:
d8:63:e5:b2:3a:22:08:bc:bc:9d:7d:55:08:33:34:f1:77:47:
51:00:4b:49
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MERFQjExMC8GA1UEBRMoMTI5NkU3RUJCRTMwMTEzRkUxRDNGMjk3MzAzM0E0Q0Iz
MTE0NDgxRDAeFw0yMzEwMjQxMjU3NTJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MzdiZjUwLTExZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzThqNR1+cUZ3yLYlsDq9arM2iW05Vxs3u7JKwgyP5PIyBlrk4SVTRRkWEIJ4a
+7UCawMDkWTEXX6annYNPAmIV3KvXzxqjufwUyW4CD+TgXv/tW7DONB2AY/whb/I
GM/NcTwPfIRvue+J1E/z52urPQxKq6tSsFesH2Xaq5Ako/A2zyPBb7URFqM+Voal
hmoiZKyVbKTyjNQ9WUwdZuau7PVJnP61ONBl2PMXmvWNNz2sfZyTLn5QiSep/t4p
qfbmDDBxbgg1qzpnu6ed79KsMzgH4zA28ntlBSpuvd7MJPfeqNJ4MsEoFAI/3jyv
BP9U76Ec4+bKZblYJVp5+44bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD8NLth4q
tO6RdnduzIoKwdYqsaEwHwYDVR0jBBgwFoAUEpbn674wET/h0/KXMDOkyzEUSB0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwREVCL0EzMzFGNDc0NzI2
OTExRUVBM0Y4RTc1N0M0RjlBRTAyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNC
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRXBibjY3NHdFVF9oMF9LWE1ET2t5ekVVU0IwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9GMTNCNkExQzcy
NkMxMUVFQTg2N0ZCNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAHUSdTANBgkqhkiG9w0BAQsFAAOCAQEAu2bBGkqOkPeCSZCy
RFeMZUyTnUN28reINqe6HcpWrhcYLkWH1UvYhZO9PPsl+stzV/PCu3XurGGzbzN9
8LDtX55UmnQwh2sg5qrZkEYhqMgfOxp4fKF8RgKqxVmr9xcMLP9rS/MVEDKHU9qh
5zQ0kVvJq7vGENGWt8gJFsrZsz6YK+v5a9QXmHoyVUCfKWv6APsk1rQG9zCaJQzx
j6t9fl6vuvUxpKV2JDaLZCook86NKQmf2z+wJCwQlZTAohj9WvvUr7DFygteU4Jb
fQV2pGQR85BJjGfoxUbqYmGG2eK3m2SGrRC5wJS02GPlsjoiCLy8nX1VCDM08XdH
UQBLSQ==
-----END CERTIFICATE-----
Generated at Fri Oct 27 06:16:28 2023 by rpki-client on console-fra.rpki-client.org