Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/12F5A8F4903411EE948E9653C4F9AE02.roa
File: 12F5A8F4903411EE948E9653C4F9AE02.roa (raw, json)
Hash identifier: 1Dzdy7XN1nOSYs3ByTTjU2kRGFF71ZfsM9xvwUTpcq4=
Subject key identifier: 8D:7E:77:DE:CC:87:E1:5C:0E:7A:55:C1:E6:1F:D9:86:1F:26:F0:FC
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 02E6
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/12F5A8F4903411EE948E9653C4F9AE02.roa
Signing time: Fri 01 Dec 2023 10:26:22 +0000
ROA not before: Fri 01 Dec 2023 10:26:22 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 400536
IP address blocks: 203.32.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 20:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Dec 1 10:26:22 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6569b4ce-b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:46:f8:7d:fd:b5:b4:a5:6a:82:37:40:f2:
6c:44:be:00:42:52:16:13:37:b0:e1:84:5f:91:a7:
fa:e2:27:6a:03:37:e1:b9:da:d6:36:e2:b8:6c:fb:
1b:fe:03:ba:74:ed:a0:d8:98:b6:f9:a5:f8:e5:a0:
0c:c9:29:a3:2a:f2:f5:f9:ba:f8:bb:d9:aa:71:66:
e2:28:e6:94:5b:fe:f9:b2:5b:2a:75:e8:43:88:90:
be:27:f1:7c:15:b1:0f:ec:a9:a3:79:73:0a:38:5d:
09:a1:a6:79:27:c4:f5:9f:c2:6e:e3:41:c3:22:af:
58:72:cb:b1:97:9c:9f:22:bf:4a:a0:a8:b1:fe:f5:
a1:6b:52:9b:bf:6b:d0:9b:f7:fb:5b:a6:30:8e:92:
8c:0e:83:97:ff:71:8a:cc:03:f9:49:70:fe:32:06:
ad:f5:18:f3:be:64:03:78:72:6a:21:74:4d:a6:6d:
a0:27:0f:02:1a:a0:1e:1b:06:50:8f:b5:a7:93:ed:
93:19:b7:b7:16:f0:db:dd:46:5d:3c:3d:16:e4:8e:
dd:55:e2:bf:f5:51:e9:89:ec:7c:f8:9d:79:64:51:
3f:93:03:7e:4b:7c:fa:20:26:c4:73:08:fb:13:61:
de:90:71:c7:2f:d8:12:8e:47:25:70:93:66:db:25:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:77:DE:CC:87:E1:5C:0E:7A:55:C1:E6:1F:D9:86:1F:26:F0:FC
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/12F5A8F4903411EE948E9653C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.26.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5c:b1:86:78:b7:05:f4:4f:13:c4:c5:8f:27:4a:38:76:b8:
4a:91:b3:25:1c:9b:bf:8e:3f:7d:fa:d7:e7:b3:7f:ea:f4:ca:
b4:10:5e:4c:bc:c4:1d:bb:4f:62:aa:4e:09:23:f7:ef:92:0e:
d9:cf:d9:24:ad:c8:25:bf:57:c7:a4:ce:01:2e:e9:cf:ce:e1:
c0:28:f4:33:e4:a6:4a:53:b6:c9:97:cc:f2:f7:ae:9d:f3:a8:
9a:f6:2b:36:21:ae:2e:87:c0:ba:75:49:dc:79:5b:34:f5:0d:
0a:de:10:b2:8b:d1:0d:aa:d5:3a:96:91:1f:6a:93:26:94:04:
53:eb:a9:2f:06:d7:ff:4c:ef:2e:d7:09:be:21:b5:93:83:37:
8c:7b:4f:18:31:76:1e:94:47:2f:4c:2d:82:d4:c8:1b:3d:25:
c6:fb:b2:7e:a1:8a:eb:b6:54:60:80:46:ab:2d:13:77:64:c9:
d0:11:8d:68:da:1f:a5:f1:f0:36:f5:34:35:49:10:8c:56:b8:
af:7c:02:81:dc:54:43:aa:8d:c1:9a:75:c1:f4:7f:bc:3e:2a:
4c:8f:6d:0c:f1:49:1a:56:28:cd:96:70:0d:e2:df:66:0b:b6:
59:17:1b:d2:c9:76:a2:36:72:fb:44:33:0b:64:ec:77:80:b1:
49:33:d8:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjMxMjAxMTAyNjIyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY5YjRjZS1iNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsStG+H39tbSlaoI3QPJsRL4AQlIWEzew4YRfkaf64idqAzfhudrWNuK4bPsb
/gO6dO2g2Ji2+aX45aAMySmjKvL1+br4u9mqcWbiKOaUW/75slsqdehDiJC+J/F8
FbEP7KmjeXMKOF0JoaZ5J8T1n8Ju40HDIq9Ycsuxl5yfIr9KoKix/vWha1Kbv2vQ
m/f7W6YwjpKMDoOX/3GKzAP5SXD+Mgat9RjzvmQDeHJqIXRNpm2gJw8CGqAeGwZQ
j7Wnk+2TGbe3FvDb3UZdPD0W5I7dVeK/9VHpiex8+J15ZFE/kwN+S3z6ICbEcwj7
E2HekHHHL9gSjkclcJNm2yV2LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI1+d97M
h+FcDnpVweYf2YYfJvD8MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvMTJGNUE4RjQ5
MDM0MTFFRTk0OEU5NjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLIBowDQYJKoZIhvcNAQELBQADggEBAHNcsYZ4twX0TxPE
xY8nSjh2uEqRsyUcm7+OP3361+ezf+r0yrQQXky8xB27T2KqTgkj9++SDtnP2SSt
yCW/V8ekzgEu6c/O4cAo9DPkpkpTtsmXzPL3rp3zqJr2KzYhri6HwLp1Sdx5WzT1
DQreELKL0Q2q1TqWkR9qkyaUBFPrqS8G1/9M7y7XCb4htZODN4x7Txgxdh6URy9M
LYLUyBs9Jcb7sn6hiuu2VGCARqstE3dkydARjWjaH6Xx8Db1NDVJEIxWuK98AoHc
VEOqjcGadcH0f7w+KkyPbQzxSRpWKM2WcA3i32YLtlkXG9LJdqI2cvtEMwtk7HeA
sUkz2Bs=
-----END CERTIFICATE-----
Generated at Mon Mar 11 23:22:40 2024 by rpki-client on console-ams.rpki-client.org