Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/CDCC582A6BDB11EF99975A4BC4F9AE02.roa
File: CDCC582A6BDB11EF99975A4BC4F9AE02.roa (raw, json)
Hash identifier: peT/ls89riAHQ8z+SFu7CpQejzJG2lwEJh2OSSioYAo=
Subject key identifier: AA:CC:7B:F2:61:04:9C:98:51:9D:B6:2F:8D:22:56:F3:4E:E8:6D:E3
Certificate issuer: /CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Certificate serial: 55
Authority key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/CDCC582A6BDB11EF99975A4BC4F9AE02.roa
Signing time: Thu 05 Sep 2024 23:08:47 +0000
ROA not before: Thu 05 Sep 2024 23:08:47 +0000
ROA not after: Sat 01 May 2038 00:00:00 +0000
asID: 1197574
IP address blocks: 203.176.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 03:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Validity
Not Before: Sep 5 23:08:47 2024 GMT
Not After : May 1 00:00:00 2038 GMT
Subject: CN=66da39fe-af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:42:d2:b4:81:e0:e0:e3:b2:10:55:c2:89:
50:59:be:11:98:b2:ac:99:4c:49:01:72:84:29:5b:
f7:0c:fc:71:18:ad:13:6e:84:9c:62:25:b7:a2:12:
28:ba:85:75:6f:46:59:ca:be:eb:b9:92:2f:ea:0f:
1c:58:da:d0:79:89:1f:ae:43:2f:aa:0f:92:e3:ff:
3c:52:29:7e:34:1f:bf:9c:11:59:1f:ea:c2:ac:d4:
99:1a:78:6b:5e:e8:36:27:ac:ac:fc:88:28:d7:6a:
1c:d3:46:5d:62:48:8e:a0:45:d4:42:7b:d0:29:41:
36:a6:11:28:37:94:06:82:45:68:38:38:f1:d4:27:
68:36:86:4e:a4:ce:ef:6e:64:0e:5d:a1:0a:56:ad:
b6:06:72:1f:22:37:dc:eb:1a:3d:e3:88:24:16:dc:
bd:30:66:8f:80:52:e9:26:93:a0:ab:6c:c8:5c:f3:
a0:91:72:7b:38:0f:19:11:c9:26:8f:fd:fa:82:93:
28:90:9f:11:a8:17:8b:55:d2:e5:ee:df:b0:03:41:
e7:6b:74:c7:13:46:a8:cc:3c:9e:04:a0:2c:35:a0:
d5:71:2e:fc:61:8f:44:32:19:26:2f:80:a5:9b:c9:
d1:3d:11:ed:3c:f5:1c:c9:d9:42:37:de:99:bd:a0:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:7B:F2:61:04:9C:98:51:9D:B6:2F:8D:22:56:F3:4E:E8:6D:E3
X509v3 Authority Key Identifier:
keyid:42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/CDCC582A6BDB11EF99975A4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4d:8b:ed:03:fd:9e:84:ce:aa:ea:0a:4b:1c:92:10:8b:9f:
54:21:10:90:1c:9d:e7:01:b9:cd:fc:07:98:1a:8b:4c:86:2a:
a1:82:89:91:bc:9a:82:c4:22:e8:66:70:c3:da:7f:b0:7a:bc:
1f:1d:7d:a2:8a:e3:00:66:62:d2:3f:a7:80:4f:1e:95:b3:91:
6d:8e:45:d2:51:e2:bf:b6:5e:20:a5:de:8c:3b:a9:1a:3b:9d:
39:4f:10:1e:c1:5d:11:03:31:60:52:79:77:cf:eb:81:e4:d0:
8e:4a:59:b4:82:f9:83:a7:0b:04:e7:76:6a:1d:3c:95:f7:04:
6d:de:68:d2:9b:a1:c4:a2:77:bf:76:c4:f6:eb:87:03:69:e8:
94:5a:30:0d:89:87:88:ef:1a:90:b0:fc:af:18:38:9c:70:63:
0d:a7:91:a5:33:6f:cd:2b:a6:2a:89:7d:f8:85:b7:f3:3e:2e:
1b:6f:0d:64:4d:e7:26:3d:b9:86:cf:9a:18:b6:1a:2e:38:67:
d0:d1:5a:74:d8:d0:3b:08:bc:8f:e6:a6:20:7a:77:66:82:bc:
59:ed:6f:67:05:01:9d:f7:9b:b6:90:bb:28:cb:62:0f:ed:28:
2f:26:b6:09:47:33:5e:2e:61:be:4c:d8:bc:64:61:f8:15:4f:
1f:55:65:09
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QzI4NzExMC8GA1UEBRMoNDIzOTExN0EyNTU4MkQwMDY3REU0RDBDRURBNUFCQTVD
QzdFMzU2OTAeFw0yNDA5MDUyMzA4NDdaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZGEzOWZlLWFmMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC79ELStIHg4OOyEFXCiVBZvhGYsqyZTEkBcoQpW/cM/HEYrRNuhJxiJbeiEii6
hXVvRlnKvuu5ki/qDxxY2tB5iR+uQy+qD5Lj/zxSKX40H7+cEVkf6sKs1JkaeGte
6DYnrKz8iCjXahzTRl1iSI6gRdRCe9ApQTamESg3lAaCRWg4OPHUJ2g2hk6kzu9u
ZA5doQpWrbYGch8iN9zrGj3jiCQW3L0wZo+AUukmk6CrbMhc86CRcns4DxkRySaP
/fqCkyiQnxGoF4tV0uXu37ADQedrdMcTRqjMPJ4EoCw1oNVxLvxhj0QyGSYvgKWb
ydE9Ee089RzJ2UI33pm9oFZ1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqsx78mEE
nJhRnbYvjSJW807obeMwHwYDVR0jBBgwFoAUQjkReiVYLQBn3k0M7aWrpcx+NWkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzY4RDg4MTg0MjQ4
NTExRUY5NDIzNjU3MkM0RjlBRTAyL1Fqa1JlaVZZTFFCbjNrME03YVdycGN4LU5X
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUWprUmVpVllMUUJuM2swTTdhV3JwY3gtTldrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzI4Ny82OEQ4ODE4NDI0ODUxMUVGOTQyMzY1NzJDNEY5QUUwMi9DRENDNTgyQTZC
REIxMUVGOTk5NzVBNEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMuwvTANBgkqhkiG9w0BAQsFAAOCAQEAHk2L7QP9noTOquoK
SxySEIufVCEQkByd5wG5zfwHmBqLTIYqoYKJkbyagsQi6GZww9p/sHq8Hx19oorj
AGZi0j+ngE8elbORbY5F0lHiv7ZeIKXejDupGjudOU8QHsFdEQMxYFJ5d8/rgeTQ
jkpZtIL5g6cLBOd2ah08lfcEbd5o0puhxKJ3v3bE9uuHA2nolFowDYmHiO8akLD8
rxg4nHBjDaeRpTNvzSumKol9+IW38z4uG28NZE3nJj25hs+aGLYaLjhn0NFadNjQ
Owi8j+amIHp3ZoK8We1vZwUBnfebtpC7KMtiD+0oLya2CUczXi5hvkzYvGRh+BVP
H1VlCQ==
-----END CERTIFICATE-----
Generated at Fri Sep 6 05:25:58 2024 by rpki-client on console-fra.rpki-client.org