Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/DF8FE6D0791F11EE941FB74FC4F9AE02.roa
File: DF8FE6D0791F11EE941FB74FC4F9AE02.roa (raw, json)
Hash identifier: YzgmmFQgSgeCdgaYMoxOWKdkw+b3Locrc7xDEmoxgQo=
Subject key identifier: 33:F7:03:EE:67:C5:56:D0:19:85:2D:B6:C4:26:78:FD:F0:CE:99:D8
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 056C
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/DF8FE6D0791F11EE941FB74FC4F9AE02.roa
Signing time: Thu 02 Nov 2023 01:33:50 +0000
ROA not before: Thu 02 Nov 2023 01:33:50 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 15083
IP address blocks: 115.126.25.0/24 maxlen: 24
118.99.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 15:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Nov 2 01:33:50 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6542fc7d-02f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:a6:cb:b1:f5:cc:d0:81:e7:32:7a:53:10:
d5:7c:8b:3c:16:d7:a0:1f:fc:20:2d:58:4b:40:95:
2e:65:1a:fb:56:bb:95:55:3e:87:8c:2a:3a:83:ee:
f1:fe:7d:bd:53:cd:18:42:37:e0:97:55:88:e9:93:
69:63:29:a2:55:23:a3:f4:d7:1a:de:e3:5d:df:54:
9e:37:d5:da:7b:45:25:e8:17:a6:86:c9:d7:c2:db:
af:a0:75:8c:e1:b3:8d:03:2a:ec:77:47:81:12:20:
b7:fe:35:0d:81:60:1a:df:ed:09:1f:d7:db:90:67:
fb:95:bf:39:9d:9b:40:25:77:80:7a:6a:d2:57:73:
5c:41:f3:90:b6:7f:9e:ee:96:f7:c6:ac:b2:5b:4e:
bd:4e:e1:42:c3:ae:d5:ac:4a:7f:ba:55:f3:10:a5:
36:ba:9a:79:2e:c4:80:a5:57:20:78:8a:1c:15:cc:
9a:27:ca:9a:ae:5b:e0:ee:0b:ce:82:53:74:c4:2e:
e5:59:8b:7f:d5:bc:3d:3a:ae:86:1e:4a:b0:fc:b8:
5d:57:78:24:42:4c:d0:45:03:5f:b3:b4:b6:9c:50:
2f:80:5f:62:66:d5:1b:3d:a4:20:f8:d0:2f:f7:c1:
ae:14:6b:9a:b5:e5:2d:94:82:a1:d9:f5:d2:ea:05:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F7:03:EE:67:C5:56:D0:19:85:2D:B6:C4:26:78:FD:F0:CE:99:D8
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/DF8FE6D0791F11EE941FB74FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.126.25.0/24
118.99.50.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d1:2a:11:55:50:4a:39:81:1c:2c:ee:77:f5:5b:7c:0c:ce:
f5:80:c3:61:8b:ab:d3:c1:4f:5e:a5:60:71:cc:31:a2:0c:db:
f4:be:0e:58:03:59:c5:84:35:37:ce:1a:ca:74:dc:df:d9:c0:
5a:4e:ca:a7:84:17:1a:3a:3c:bc:24:fd:ef:b2:11:bd:a1:3d:
e4:2b:5f:7c:c8:a6:6c:01:cd:24:43:b8:f6:7d:08:cb:20:b6:
1d:40:26:b0:79:4a:76:0f:d1:03:15:bc:14:a3:a8:9c:63:a9:
65:c0:e7:2b:3e:bf:3c:db:f3:df:05:ce:bc:48:fb:a4:42:ec:
e6:ff:c4:f7:ae:1c:46:ea:a2:ab:e3:83:02:15:ec:dd:99:e9:
cb:8c:2d:28:81:0c:52:70:f5:4e:87:93:06:f3:03:84:a8:4e:
69:1e:b3:8a:e6:df:b6:86:70:74:d0:53:a2:5d:f0:0b:6c:78:
38:5e:ff:8e:e7:34:e7:38:3a:f3:7d:71:98:c6:f1:6c:62:62:
73:d1:4c:73:19:f9:e1:8e:23:9f:0f:83:44:56:b4:6f:a9:e0:
74:5e:0d:3d:e7:7f:35:ac:e8:9d:66:7d:f2:bb:5f:18:9b:46:
c6:57:8d:a3:37:cf:a9:02:de:73:85:d8:6a:67:2f:f4:25:10:
e2:24:b2:aa
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2
OThDOTM5NzcwHhcNMjMxMTAyMDEzMzUwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQyZmM3ZC0wMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsm+my7H1zNCB5zJ6UxDVfIs8FtegH/wgLVhLQJUuZRr7VruVVT6HjCo6g+7x
/n29U80YQjfgl1WI6ZNpYymiVSOj9Nca3uNd31SeN9Xae0Ul6BemhsnXwtuvoHWM
4bONAyrsd0eBEiC3/jUNgWAa3+0JH9fbkGf7lb85nZtAJXeAemrSV3NcQfOQtn+e
7pb3xqyyW069TuFCw67VrEp/ulXzEKU2upp5LsSApVcgeIocFcyaJ8qarlvg7gvO
glN0xC7lWYt/1bw9Oq6GHkqw/LhdV3gkQkzQRQNfs7S2nFAvgF9iZtUbPaQg+NAv
98GuFGuateUtlIKh2fXS6gUK9wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDP3A+5n
xVbQGYUttsQmeP3wzpnYMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0
NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvREY4RkU2RDA3
OTFGMTFFRTk0MUZCNzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzfhkDBAB2YzIwDQYJKoZIhvcNAQELBQADggEBADfRKhFV
UEo5gRws7nf1W3wMzvWAw2GLq9PBT16lYHHMMaIM2/S+DlgDWcWENTfOGsp03N/Z
wFpOyqeEFxo6PLwk/e+yEb2hPeQrX3zIpmwBzSRDuPZ9CMsgth1AJrB5SnYP0QMV
vBSjqJxjqWXA5ys+vzzb898FzrxI+6RC7Ob/xPeuHEbqoqvjgwIV7N2Z6cuMLSiB
DFJw9U6HkwbzA4SoTmkes4rm37aGcHTQU6Jd8AtseDhe/47nNOc4OvN9cZjG8Wxi
YnPRTHMZ+eGOI58Pg0RWtG+p4HReDT3nfzWs6J1mffK7XxibRsZXjaM3z6kC3nOF
2GpnL/QlEOIksqo=
-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:37 2024 by rpki-client on console-ams.rpki-client.org