Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/139864767A2711EFAAC40D56C4F9AE02.roa
File: 139864767A2711EFAAC40D56C4F9AE02.roa (raw, json)
Hash identifier: 8Hq8U4VD7r37N4wsNQhesfBbOQqMo/+btdiF8ZvArFI=
Subject key identifier: 26:22:AF:6E:C9:D4:3B:D8:B5:23:08:EC:E6:DA:B7:23:30:7C:49:C6
Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial: 02
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/139864767A2711EFAAC40D56C4F9AE02.roa
Signing time: Tue 24 Sep 2024 03:42:53 +0000
ROA not before: Tue 24 Sep 2024 03:42:53 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139052
IP address blocks: 160.187.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 07:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Validity
Not Before: Sep 24 03:42:53 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66f2353c-5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:e5:ee:29:72:f8:eb:b4:15:de:2d:53:0b:
4b:7b:a1:2e:1e:78:ea:4c:d3:fb:3a:bb:89:b6:87:
18:d6:0d:bf:04:e3:ed:ad:b5:b6:03:d8:01:3c:88:
bb:17:1e:ee:86:56:10:4c:56:81:3c:3d:79:24:c4:
db:31:97:82:c6:de:98:43:a3:cc:7e:e6:ad:6d:24:
c7:a1:85:11:14:26:f9:13:dd:6d:13:29:0d:b1:74:
ba:da:b6:2c:35:cf:ea:2f:c7:49:af:16:f1:fc:c1:
27:8a:35:55:8b:86:ac:86:70:b3:82:92:c3:95:24:
de:82:c4:44:e3:eb:98:1e:39:c8:eb:70:3c:ee:55:
20:47:17:5f:c2:7b:1d:b8:a2:d3:89:2d:1a:d3:fc:
3b:b7:e0:15:36:72:be:0e:fb:c0:a5:c7:2a:26:b9:
11:2c:dc:0d:0f:54:cf:75:ac:3a:38:4b:fc:3e:e7:
56:82:82:16:aa:99:70:d1:54:0f:61:f6:b1:98:a2:
69:a0:4b:e6:29:15:d8:d1:c0:b3:7c:61:d8:e6:f5:
a2:e9:28:c9:ae:f8:a9:0c:b4:d8:a6:ab:cd:e8:1d:
b2:e2:14:46:fb:2b:3e:26:d7:65:76:74:6a:b0:7a:
94:18:4f:3f:25:45:32:6c:f2:48:54:a4:d1:fd:eb:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:AF:6E:C9:D4:3B:D8:B5:23:08:EC:E6:DA:B7:23:30:7C:49:C6
X509v3 Authority Key Identifier:
keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/139864767A2711EFAAC40D56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:21:92:a4:f3:42:d8:76:fe:69:f0:b3:63:53:67:dd:58:ae:
60:54:f0:f7:e7:79:80:cf:4e:fa:00:63:9d:40:6d:34:f2:a4:
e9:d3:a3:21:30:1e:f9:01:5e:f4:a8:8b:22:eb:53:d0:e2:c5:
a5:43:40:2f:48:07:db:18:ab:0a:57:fa:6b:c4:34:b3:07:8c:
8a:0e:35:e0:dc:00:50:e8:17:9d:a2:b7:9d:84:b4:22:86:27:
14:d0:7f:0d:00:5c:56:7d:27:67:cf:3d:9d:2f:59:bc:5d:b6:
ec:96:58:74:39:4b:4e:a9:84:59:15:61:43:8c:c1:1a:4d:cf:
4a:53:2f:e2:58:3e:fd:12:11:81:d8:21:66:21:5c:e5:14:c8:
a4:e6:5b:ae:ea:3d:cb:4d:f6:a2:ad:01:98:a5:ae:3f:27:2e:
7f:53:e5:a4:48:6c:94:d0:42:cc:4f:13:a8:a9:8b:7a:91:bc:
d8:5e:ab:5f:b6:8a:8d:a4:03:ca:85:e9:c7:c9:ab:3a:7f:f6:
8f:c2:3e:3b:ff:9d:57:2a:67:71:93:54:29:dd:d3:47:cc:31:
5b:00:d0:2b:9f:5e:31:f9:8e:33:21:67:28:29:43:df:f9:bc:
57:f8:e7:bf:aa:6e:7f:9e:e6:93:61:cc:25:c5:fc:f6:a1:a9:
a0:1c:3d:6c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RDZDMTExMC8GA1UEBRMoMjZEODY0NUVFOEVFM0E1RDFFQjFEMkRGOTc5Qjg1NDlC
ODc2MUUyQTAeFw0yNDA5MjQwMzQyNTNaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZjIzNTNjLTU2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJJeXuKXL467QV3i1TC0t7oS4eeOpM0/s6u4m2hxjWDb8E4+2ttbYD2AE8iLsX
Hu6GVhBMVoE8PXkkxNsxl4LG3phDo8x+5q1tJMehhREUJvkT3W0TKQ2xdLratiw1
z+ovx0mvFvH8wSeKNVWLhqyGcLOCksOVJN6CxETj65geOcjrcDzuVSBHF1/Cex24
otOJLRrT/Du34BU2cr4O+8ClxyomuREs3A0PVM91rDo4S/w+51aCghaqmXDRVA9h
9rGYommgS+YpFdjRwLN8Ydjm9aLpKMmu+KkMtNimq83oHbLiFEb7Kz4m12V2dGqw
epQYTz8lRTJs8khUpNH969TRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJiKvbsnU
O9i1Iwjs5tq3IzB8ScYwHwYDVR0jBBgwFoAUJthkXujuOl0esdLfl5uFSbh2Hiow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZENkMxL0RCNzA0NEUyN0Ey
NjExRUZBRjA3QjY1NUM0RjlBRTAyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhp
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSnRoa1h1anVPbDBlc2RMZmw1dUZTYmgySGlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi8xMzk4NjQ3NjdB
MjcxMUVGQUFDNDBENTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaC7ZjANBgkqhkiG9w0BAQsFAAOCAQEAniGSpPNC2Hb+afCz
Y1Nn3ViuYFTw9+d5gM9O+gBjnUBtNPKk6dOjITAe+QFe9KiLIutT0OLFpUNAL0gH
2xirClf6a8Q0sweMig414NwAUOgXnaK3nYS0IoYnFNB/DQBcVn0nZ889nS9ZvF22
7JZYdDlLTqmEWRVhQ4zBGk3PSlMv4lg+/RIRgdghZiFc5RTIpOZbruo9y032oq0B
mKWuPycuf1PlpEhslNBCzE8TqKmLepG82F6rX7aKjaQDyoXpx8mrOn/2j8I+O/+d
VypncZNUKd3TR8wxWwDQK59eMfmOMyFnKClD3/m8V/jnv6puf57mk2HMJcX89qGp
oBw9bA==
-----END CERTIFICATE-----
Generated at Tue Sep 24 09:10:19 2024 by rpki-client on console-fra.rpki-client.org