Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/FF9137145AEB11EF8B92C770C4F9AE02.roa
File: FF9137145AEB11EF8B92C770C4F9AE02.roa (raw, json)
Hash identifier: zGK3UlCebAatHq2sWy51TVNSvTvWhnyWqHjDCDVqJh8=
Subject key identifier: 4E:0F:99:85:51:E2:7C:A4:43:CF:36:16:51:1C:24:A9:CB:DA:5A:2A
Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial: 09
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/FF9137145AEB11EF8B92C770C4F9AE02.roa
Signing time: Thu 15 Aug 2024 09:51:52 +0000
ROA not before: Thu 15 Aug 2024 09:51:52 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 40934
IP address blocks: 210.7.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 11:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Validity
Not Before: Aug 15 09:51:52 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66bdcfb8-f997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:c5:53:22:0b:2a:e6:aa:d9:53:74:91:21:
ac:3a:b0:1b:5d:84:65:d0:0d:6e:bf:fe:62:e6:99:
bd:5d:08:3e:f5:03:0b:28:e8:da:6d:5d:06:a2:f2:
ef:5f:d3:f4:31:1c:6a:a6:d2:34:64:b4:99:6a:8d:
63:82:7d:dc:11:3e:ec:38:8e:70:43:7d:f3:86:39:
66:bc:3b:63:df:1c:f6:73:87:73:60:de:08:bc:c1:
2c:bd:90:75:07:2e:f9:04:a1:7a:d2:16:c6:0e:cb:
cc:6b:19:7a:8e:87:a9:46:ab:b2:7a:90:ab:fc:81:
3d:8e:88:dc:4c:e3:6c:73:eb:11:a4:64:26:3b:fd:
09:0b:49:5f:55:31:76:c8:e3:5f:c0:fe:b0:5b:16:
67:29:06:89:7b:98:fe:d5:6e:df:d5:72:f1:7e:e5:
2a:9a:e4:5b:1d:4a:8c:f7:a8:88:6b:5a:c1:c3:0a:
93:41:08:4b:b3:3c:f7:28:5b:05:52:65:8d:27:ec:
32:18:ae:09:97:f6:07:36:53:1f:5d:c5:55:43:e2:
2b:bd:bb:54:ae:c2:cf:29:05:6e:a1:f5:df:89:67:
93:ea:1e:e1:99:08:24:db:a2:7c:10:d2:25:2f:1b:
ca:aa:58:cf:03:d1:c3:2a:7e:da:9c:01:e7:e1:85:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:99:85:51:E2:7C:A4:43:CF:36:16:51:1C:24:A9:CB:DA:5A:2A
X509v3 Authority Key Identifier:
keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/FF9137145AEB11EF8B92C770C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.7.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3b:76:87:9c:aa:41:a6:57:44:e9:23:9d:f8:c4:89:5a:f8:
fb:c1:da:2b:81:d2:5a:eb:96:27:4d:2b:6d:58:fa:43:61:16:
40:e4:d6:16:b5:4b:47:94:c9:45:84:0b:63:84:43:cb:45:af:
a6:c7:9a:22:1f:b5:58:31:3a:ed:4e:a4:4a:2c:ea:ff:ff:f6:
2e:b6:32:2a:b2:86:10:80:01:e8:79:cb:29:a4:4d:fc:fd:d7:
bb:8f:6a:53:26:89:3a:7d:a9:92:10:8f:7c:78:61:8a:7c:b3:
03:5c:1b:cc:f2:ab:b0:3b:11:db:b3:6e:e7:c5:d0:4a:2f:ab:
9c:df:02:48:ed:fb:e7:2a:fd:c9:9b:e4:1d:e7:0a:b8:b6:6d:
5a:a6:a4:c5:82:81:86:82:e6:dd:86:8d:60:b1:03:a2:6e:5c:
e6:79:58:4b:5a:b9:e0:00:4b:08:45:d8:28:d3:77:2f:95:a4:
13:44:73:c0:81:93:b6:69:93:ec:65:53:ee:25:8a:ae:b0:ba:
22:96:82:ed:7c:40:12:ee:08:e6:d6:c5:19:b7:14:01:b2:87:
c0:14:1e:28:dc:43:cc:f8:df:dc:7e:8e:cf:64:79:d7:ea:29:
93:26:4a:27:98:86:8c:ea:79:0d:54:aa:d3:4a:d3:ed:d3:9b:
72:97:da:b0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzM2QTExMC8GA1UEBRMoMjFEM0VEMjFGN0NERUJDN0QwMEYxQkI3QTA5NTExQjk1
Q0RFRkUyMzAeFw0yNDA4MTUwOTUxNTJaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YmRjZmI4LWY5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBq8VTIgsq5qrZU3SRIaw6sBtdhGXQDW6//mLmmb1dCD71Awso6NptXQai8u9f
0/QxHGqm0jRktJlqjWOCfdwRPuw4jnBDffOGOWa8O2PfHPZzh3Ng3gi8wSy9kHUH
LvkEoXrSFsYOy8xrGXqOh6lGq7J6kKv8gT2OiNxM42xz6xGkZCY7/QkLSV9VMXbI
41/A/rBbFmcpBol7mP7Vbt/VcvF+5Sqa5FsdSoz3qIhrWsHDCpNBCEuzPPcoWwVS
ZY0n7DIYrgmX9gc2Ux9dxVVD4iu9u1Suws8pBW6h9d+JZ5PqHuGZCCTbonwQ0iUv
G8qqWM8D0cMqftqcAefhhX/fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTg+ZhVHi
fKRDzzYWURwkqcvaWiowHwYDVR0jBBgwFoAUIdPtIffN68fQDxu3oJURuVze/iMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMzZBLzhGNUE5MzU2NUFF
QTExRUY5NEU5M0Q2RUM0RjlBRTAyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9p
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSWRQdElmZk42OGZRRHh1M29KVVJ1VnplX2lNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9GRjkxMzcxNDVB
RUIxMUVGOEI5MkM3NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANIHYDANBgkqhkiG9w0BAQsFAAOCAQEAtTt2h5yqQaZXROkj
nfjEiVr4+8HaK4HSWuuWJ00rbVj6Q2EWQOTWFrVLR5TJRYQLY4RDy0WvpseaIh+1
WDE67U6kSizq///2LrYyKrKGEIAB6HnLKaRN/P3Xu49qUyaJOn2pkhCPfHhhinyz
A1wbzPKrsDsR27Nu58XQSi+rnN8CSO375yr9yZvkHecKuLZtWqakxYKBhoLm3YaN
YLEDom5c5nlYS1q54ABLCEXYKNN3L5WkE0RzwIGTtmmT7GVT7iWKrrC6IpaC7XxA
Eu4I5tbFGbcUAbKHwBQeKNxDzPjf3H6Oz2R51+opkyZKJ5iGjOp5DVSq00rT7dOb
cpfasA==
-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org