Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/2F5ECAAE889D11EFB1987C0DC4F9AE02.roa
File: 2F5ECAAE889D11EFB1987C0DC4F9AE02.roa (raw, json)
Hash identifier: m6sj2kgXxmTIU25dF0ucC5kaDLcx+yvS1i8JxUg37oQ=
Subject key identifier: F1:72:66:AD:BA:E6:BE:A7:30:11:65:FD:FF:11:7B:02:6E:E3:DA:A2
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C85
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/2F5ECAAE889D11EFB1987C0DC4F9AE02.roa
Signing time: Mon 14 Oct 2024 12:06:32 +0000
ROA not before: Mon 14 Oct 2024 12:06:32 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 208485
IP address blocks: 115.42.70.0/24 maxlen: 24
115.42.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 10:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7301 (0x1c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Oct 14 12:06:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670d0948-49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:18:11:53:e1:6a:02:8e:ab:e0:e0:78:87:
83:ce:e9:9b:29:e5:c7:ff:0e:c2:7e:bc:20:0b:a3:
a5:3a:6a:5c:03:ec:a0:14:11:4d:a1:d6:7d:11:67:
60:74:44:98:6c:9d:32:82:6b:bb:ee:55:64:a6:ae:
48:9c:45:99:fc:56:14:74:9d:32:7b:3b:ae:8f:5f:
ae:30:d8:43:e6:87:f8:08:67:35:95:7a:a8:a9:31:
7a:03:ff:a1:e6:85:35:df:9c:87:18:1a:fd:31:ba:
e0:99:37:31:32:20:0d:7f:61:fc:48:5f:66:9d:fc:
4a:4f:58:a5:d7:08:61:48:ea:f0:65:39:a1:37:6c:
22:fe:d9:b5:a2:bc:5e:ba:45:6f:1b:33:16:e3:72:
d6:13:3b:d0:b2:35:7d:28:01:0c:9e:34:25:74:94:
b4:12:be:d4:dc:55:2e:cc:29:5f:f9:60:56:86:3b:
cf:36:e7:2b:ef:87:ae:8b:13:9c:a7:c9:23:d9:65:
a3:2c:d7:3c:61:75:c7:07:e1:bc:8b:2b:f9:da:5a:
35:02:b7:ef:e8:0f:42:98:dc:e6:d9:5a:f2:10:f6:
8c:52:fc:57:4f:b6:aa:2f:b1:6f:07:d2:84:d6:a1:
0a:8c:4c:44:79:6a:ef:f0:c9:60:06:3d:fd:99:b7:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:66:AD:BA:E6:BE:A7:30:11:65:FD:FF:11:7B:02:6E:E3:DA:A2
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/2F5ECAAE889D11EFB1987C0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.70.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:91:a8:25:f2:1e:d9:df:26:94:dc:ea:e3:1d:96:84:fb:33:
28:42:6a:9b:d1:3e:d1:c1:ba:6a:08:b3:d8:6f:35:87:66:d1:
ae:05:13:95:c2:ce:9b:cd:43:ec:74:64:94:6a:21:c7:45:09:
f6:3d:c6:7f:4a:48:80:6e:f8:f7:95:8c:8f:cd:45:65:62:37:
89:f5:fc:fe:fb:c6:f9:07:42:ec:6e:c0:ea:aa:35:15:48:a3:
5a:4a:a2:2c:41:d3:f1:7d:17:81:19:14:ba:29:eb:c9:54:c4:
63:60:11:d8:52:80:26:99:83:18:59:6d:93:08:53:71:cb:81:
2b:f5:11:55:a2:25:b8:e0:6f:79:2a:ee:99:04:30:98:85:77:
61:67:20:7e:45:b9:14:59:26:de:06:ba:2a:ba:e9:e6:41:c4:
a2:29:ac:72:46:53:25:49:f6:e9:a0:38:6f:a8:7d:cd:52:99:
84:38:8b:e4:33:03:0d:bb:a3:dd:3c:29:84:9a:a0:e8:83:fc:
72:ff:c0:89:c7:9d:85:e6:11:f8:4a:8f:d2:ac:a6:24:ea:f1:
bd:66:07:39:b9:bd:13:27:5e:54:ef:4f:8c:bd:af:0d:17:97:
a0:7e:8b:79:ea:6f:6d:18:56:a7:64:99:49:19:07:8d:08:13:
67:08:58:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB
ODEzOTYwM0EwHhcNMjQxMDE0MTIwNjMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzBkMDk0OC00OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusUYEVPhagKOq+DgeIeDzumbKeXH/w7CfrwgC6OlOmpcA+ygFBFNodZ9EWdg
dESYbJ0ygmu77lVkpq5InEWZ/FYUdJ0yezuuj1+uMNhD5of4CGc1lXqoqTF6A/+h
5oU135yHGBr9MbrgmTcxMiANf2H8SF9mnfxKT1il1whhSOrwZTmhN2wi/tm1orxe
ukVvGzMW43LWEzvQsjV9KAEMnjQldJS0Er7U3FUuzClf+WBWhjvPNucr74euixOc
p8kj2WWjLNc8YXXHB+G8iyv52lo1Arfv6A9CmNzm2VryEPaMUvxXT7aqL7FvB9KE
1qEKjExEeWrv8MlgBj39mbdEcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPFyZq26
5r6nMBFl/f8RewJu49qiMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx
RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvMkY1RUNBQUU4
ODlEMTFFRkIxOTg3QzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFzKkYwDQYJKoZIhvcNAQELBQADggEBAK2RqCXyHtnfJpTc
6uMdloT7MyhCapvRPtHBumoIs9hvNYdm0a4FE5XCzpvNQ+x0ZJRqIcdFCfY9xn9K
SIBu+PeVjI/NRWViN4n1/P77xvkHQuxuwOqqNRVIo1pKoixB0/F9F4EZFLop68lU
xGNgEdhSgCaZgxhZbZMIU3HLgSv1EVWiJbjgb3kq7pkEMJiFd2FnIH5FuRRZJt4G
uiq66eZBxKIprHJGUyVJ9umgOG+ofc1SmYQ4i+QzAw27o908KYSaoOiD/HL/wInH
nYXmEfhKj9KspiTq8b1mBzm5vRMnXlTvT4y9rw0Xl6B+i3nqb20YVqdkmUkZB40I
E2cIWLo=
-----END CERTIFICATE-----
Generated at Tue Oct 22 13:48:37 2024 by rpki-client on console-ams.rpki-client.org