Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/57A4B0D884D411ED9A812F73C4F9AE02.roa
File: 57A4B0D884D411ED9A812F73C4F9AE02.roa (raw, json)
Hash identifier: W251XYbiOxz/5xGEy14QZcc9HbiolYHSpGFKJNeQVvk=
Subject key identifier: 38:12:67:B1:9C:05:7E:AC:F0:0A:8C:4D:CD:B3:D3:7A:06:3C:1A:3F
Certificate issuer: /CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
Certificate serial: 08C5
Authority key identifier: 54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/57A4B0D884D411ED9A812F73C4F9AE02.roa
Signing time: Sun 30 Jun 2024 21:44:20 +0000
ROA not before: Sun 30 Jun 2024 21:44:20 +0000
ROA not after: Wed 30 Oct 2024 00:00:00 +0000
asID: 17995
IP address blocks: 123.253.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 22:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
Validity
Not Before: Jun 30 21:44:20 2024 GMT
Not After : Oct 30 00:00:00 2024 GMT
Subject: CN=6681d1b4-d69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:4f:9d:a4:79:61:ab:dc:85:b1:5b:1b:a9:
9b:22:37:03:a1:e9:eb:45:8a:50:d3:9e:96:04:56:
13:d2:bf:b8:13:75:72:c5:1a:8c:18:bc:de:27:86:
04:cf:ff:71:04:d8:9e:c6:ce:98:3e:2d:33:ce:a0:
77:83:ec:be:73:c8:5a:35:47:ff:55:a5:da:5c:d3:
f8:b4:ca:2b:fc:9a:73:90:3d:0c:11:eb:90:36:37:
4e:c9:11:03:6c:c4:22:72:ac:c6:ea:89:7b:67:74:
c8:5b:24:06:41:22:44:7c:0f:26:fa:06:49:87:06:
53:a4:a8:4e:a5:b6:de:18:fd:5a:29:b3:7a:c3:5e:
28:1e:1b:6f:dc:2a:8e:41:40:92:c8:21:cb:ee:ff:
ce:19:62:b8:5d:30:23:f5:e1:4f:eb:40:32:3b:52:
b0:7a:54:ba:c7:80:51:8d:df:4a:8c:82:59:46:07:
37:68:f4:f5:2a:60:e1:81:9e:df:29:bf:7e:c6:2f:
fe:da:8c:3b:b1:3b:17:58:ab:76:57:3f:1d:52:38:
e3:dd:9d:2e:bf:db:2b:56:cb:d0:18:98:68:ed:46:
c8:80:e4:1d:3f:1d:10:53:13:5d:38:2a:f4:46:3c:
c1:85:8b:bb:e2:b1:35:ef:07:2d:e9:df:06:27:8e:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:67:B1:9C:05:7E:AC:F0:0A:8C:4D:CD:B3:D3:7A:06:3C:1A:3F
X509v3 Authority Key Identifier:
keyid:54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/57A4B0D884D411ED9A812F73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.253.4.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ff:72:a4:bd:7d:44:90:45:84:63:a1:d9:d3:ab:7b:4a:72:
af:9d:0a:31:b3:1c:6b:42:02:9b:2a:2e:5f:4a:25:9f:51:91:
f4:c6:85:fc:5a:c8:0f:13:42:4a:ca:a9:14:34:a2:45:fc:a7:
bf:2d:19:d0:7c:f5:a1:d6:82:e5:cc:e0:07:5f:50:ae:fe:1f:
4f:54:30:9d:1f:2c:ec:cb:21:f4:72:fb:1d:c2:e1:20:08:9d:
04:e7:d5:b0:44:3c:7f:35:05:d8:8f:9c:3c:5f:5c:10:87:d8:
33:d9:05:9c:24:24:ae:0c:e2:57:86:4f:97:3a:b0:18:d2:43:
7e:7a:69:ae:d9:26:e8:ff:f1:f3:9a:91:85:cb:65:49:ee:e3:
6d:34:33:d3:1b:36:b1:47:b3:d8:86:49:7b:c2:04:a9:25:61:
c9:e5:d2:f9:84:1b:78:bd:0d:4c:ba:b4:ad:c7:f5:72:78:3b:
e0:b2:0e:c9:95:36:be:05:d0:eb:25:d2:e9:3f:1f:cd:7b:ee:
a4:03:b0:a3:3c:da:46:a8:18:19:5f:ad:96:63:cd:cf:9d:96:
3a:e5:c3:54:a1:83:7b:ba:1c:96:30:c5:0d:51:48:f9:b3:38:
62:db:39:32:05:36:01:a7:e5:87:1b:40:a3:13:c0:27:04:8d:
cb:2c:df:1f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBRTYxMTAvBgNVBAUTKDU0QTNFMEMyM0QzQTBDQ0VDNjdBQzJFQTg3ODNFNTQ0
NDhCMTlFMDUwHhcNMjQwNjMwMjE0NDIwWhcNMjQxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjgxZDFiNC1kNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLFPnaR5YavchbFbG6mbIjcDoenrRYpQ056WBFYT0r+4E3VyxRqMGLzeJ4YE
z/9xBNiexs6YPi0zzqB3g+y+c8haNUf/VaXaXNP4tMor/JpzkD0MEeuQNjdOyRED
bMQicqzG6ol7Z3TIWyQGQSJEfA8m+gZJhwZTpKhOpbbeGP1aKbN6w14oHhtv3CqO
QUCSyCHL7v/OGWK4XTAj9eFP60AyO1KwelS6x4BRjd9KjIJZRgc3aPT1KmDhgZ7f
Kb9+xi/+2ow7sTsXWKt2Vz8dUjjj3Z0uv9srVsvQGJho7UbIgOQdPx0QUxNdOCr0
RjzBhYu74rE17wct6d8GJ47QvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDgSZ7Gc
BX6s8AqMTc2z03oGPBo/MB8GA1UdIwQYMBaAFFSj4MI9OgzOxnrC6oeD5URIsZ4F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FFNi82NUQwNDRDNDk0
MTgxMUVBOTQwRkI1MzBDNEY5QUUwMi9WS1Bnd2owNkRNN0dlc0xxaDRQbFJFaXhu
Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZLUGd3ajA2RE03R2VzTHFoNFBsUkVpeG5nVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkNBRTYvNjVEMDQ0QzQ5NDE4MTFFQTk0MEZCNTMwQzRGOUFFMDIvNTdBNEIwRDg4
NEQ0MTFFRDlBODEyRjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ7/QQwDQYJKoZIhvcNAQELBQADggEBAEX/cqS9fUSQRYRj
odnTq3tKcq+dCjGzHGtCApsqLl9KJZ9RkfTGhfxayA8TQkrKqRQ0okX8p78tGdB8
9aHWguXM4AdfUK7+H09UMJ0fLOzLIfRy+x3C4SAInQTn1bBEPH81BdiPnDxfXBCH
2DPZBZwkJK4M4leGT5c6sBjSQ356aa7ZJuj/8fOakYXLZUnu4200M9MbNrFHs9iG
SXvCBKklYcnl0vmEG3i9DUy6tK3H9XJ4O+CyDsmVNr4F0Osl0uk/H8177qQDsKM8
2kaoGBlfrZZjzc+dljrlw1Shg3u6HJYwxQ1RSPmzOGLbOTIFNgGn5YcbQKMTwCcE
jcss3x8=
-----END CERTIFICATE-----
Generated at Wed Jul 24 01:25:08 2024 by rpki-client on console-ams.rpki-client.org