Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D08CFD00692211EFA79F0810C4F9AE02.roa
File: D08CFD00692211EFA79F0810C4F9AE02.roa (raw, json)
Hash identifier: i5fdGEjz/cn88j0OfeZahES+MQxmUH3nZoZJlJY6r0A=
Subject key identifier: F2:18:8E:73:F7:AE:16:63:E4:B0:E0:9E:F8:D8:58:27:A7:BF:DE:C3
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C77
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D08CFD00692211EFA79F0810C4F9AE02.roa
Signing time: Mon 07 Oct 2024 16:16:36 +0000
ROA not before: Mon 07 Oct 2024 16:16:36 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 43260
IP address blocks: 115.42.71.0/24 maxlen: 24
118.103.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 13:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7287 (0x1c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Oct 7 16:16:36 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67040964-c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:69:88:44:8d:0c:a0:f6:3f:16:b5:51:a3:
21:75:39:4c:c6:11:4e:b7:f0:e4:63:f9:21:c9:37:
f6:64:b3:63:1f:7d:39:24:8a:11:e0:1b:a7:1a:51:
3c:df:2d:9f:ae:01:ff:40:1f:24:39:e2:7f:f1:19:
4e:94:a5:c0:a1:20:ea:5b:eb:1f:4a:8b:7c:68:15:
1a:83:56:45:f4:50:88:db:1a:32:f6:95:09:40:87:
53:23:29:c0:4b:f3:b7:d5:f4:ab:ac:f4:43:9b:11:
5b:d1:57:dc:9a:00:4d:64:74:38:bf:08:ec:a4:8b:
2e:75:42:91:49:ae:e4:7d:58:de:60:c1:9f:7b:83:
95:31:16:ab:44:98:4d:26:4a:3e:96:76:65:63:cb:
39:f5:b8:89:63:2b:f6:f6:96:e6:16:0c:d1:74:58:
51:56:e9:81:8a:e0:e2:f8:3a:72:bb:ca:0f:88:96:
65:e3:a0:f9:6b:5e:38:36:e2:6f:f2:9b:6c:8b:5c:
1b:3f:b5:bd:4b:cd:a8:99:af:d7:85:84:ca:16:79:
99:b4:54:7a:fc:59:1e:83:7a:cb:9e:2e:27:39:13:
a2:fd:f4:41:08:31:6c:cb:ef:8d:6d:ee:2e:b4:29:
64:e9:c6:11:c0:48:ae:74:23:d9:f6:1f:29:2e:eb:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:18:8E:73:F7:AE:16:63:E4:B0:E0:9E:F8:D8:58:27:A7:BF:DE:C3
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/D08CFD00692211EFA79F0810C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.71.0/24
118.103.227.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b7:1c:e5:2d:41:31:b3:13:81:94:2c:37:a7:67:87:4c:71:
2d:f5:ee:26:02:37:44:59:09:f5:e5:63:c5:ce:af:e5:c2:aa:
50:36:0d:98:d9:7b:4b:a3:ab:11:f0:7c:16:07:26:f1:98:f0:
72:ac:3e:b7:73:29:21:ad:17:2b:23:1f:bd:23:5b:fb:4c:26:
8e:b2:1e:2c:bc:8b:8d:fa:ae:70:19:8a:4e:a0:6a:59:da:c6:
d0:65:ab:49:f0:dc:58:f6:a8:3d:26:c1:bc:07:b6:0a:70:bd:
f7:6d:46:c4:1e:39:00:99:22:3b:90:6c:ff:5d:e0:fc:86:95:
74:26:ff:92:cd:57:ec:9c:c3:30:c3:64:da:8d:d1:6d:eb:59:
d1:1c:28:3d:8a:7b:5a:46:e1:60:70:9d:ff:a7:6c:d2:d5:76:
83:29:d5:e7:17:6e:fa:ba:34:ef:f4:6a:60:36:df:d4:bd:d4:
2e:8c:bc:af:6b:63:80:b6:0a:ad:50:d9:67:a9:ca:da:7f:9f:
f0:96:2e:73:28:08:ce:24:5f:cb:91:67:d2:3d:be:73:9a:d7:
3a:1f:61:c7:ac:ca:e3:65:66:ff:6f:4c:28:23:39:f9:ab:3f:
cd:b8:8e:5b:1a:8e:2c:e1:57:a4:9b:7b:5b:7c:79:a9:d6:54:
d5:60:9c:20
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICHHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB
ODEzOTYwM0EwHhcNMjQxMDA3MTYxNjM2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA0MDk2NC1jNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ldpiESNDKD2Pxa1UaMhdTlMxhFOt/DkY/khyTf2ZLNjH305JIoR4BunGlE8
3y2frgH/QB8kOeJ/8RlOlKXAoSDqW+sfSot8aBUag1ZF9FCI2xoy9pUJQIdTIynA
S/O31fSrrPRDmxFb0VfcmgBNZHQ4vwjspIsudUKRSa7kfVjeYMGfe4OVMRarRJhN
Jko+lnZlY8s59biJYyv29pbmFgzRdFhRVumBiuDi+Dpyu8oPiJZl46D5a144NuJv
8ptsi1wbP7W9S82oma/XhYTKFnmZtFR6/Fkeg3rLni4nOROi/fRBCDFsy++Nbe4u
tClk6cYRwEiudCPZ9h8pLuv2kQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPIYjnP3
rhZj5LDgnvjYWCenv97DMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx
RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvRDA4Q0ZEMDA2
OTIyMTFFRkE3OUYwODEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABzKkcDBAB2Z+MwDQYJKoZIhvcNAQELBQADggEBALy3HOUt
QTGzE4GULDenZ4dMcS317iYCN0RZCfXlY8XOr+XCqlA2DZjZe0ujqxHwfBYHJvGY
8HKsPrdzKSGtFysjH70jW/tMJo6yHiy8i436rnAZik6galnaxtBlq0nw3Fj2qD0m
wbwHtgpwvfdtRsQeOQCZIjuQbP9d4PyGlXQm/5LNV+ycwzDDZNqN0W3rWdEcKD2K
e1pG4WBwnf+nbNLVdoMp1ecXbvq6NO/0amA239S91C6MvK9rY4C2Cq1Q2Wepytp/
n/CWLnMoCM4kX8uRZ9I9vnOa1zofYcesyuNlZv9vTCgjOfmrP824jlsajizhV6Sb
e1t8eanWVNVgnCA=
-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org