Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/18499EC8EE5311E98269BD82C4F9AE02.roa
File: 18499EC8EE5311E98269BD82C4F9AE02.roa (raw, json)
Hash identifier: 2TeUyNRA4Y5qpYhqiAwGfDGkWENYqrgdAerx3JlSHO8=
Subject key identifier: 78:95:17:AE:62:37:8F:0E:F0:E3:D5:DB:E9:85:5C:AB:94:08:5A:FB
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 3407
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/18499EC8EE5311E98269BD82C4F9AE02.roa
Signing time: Thu 08 Jun 2023 15:21:00 +0000
ROA not before: Thu 08 Jun 2023 15:21:00 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 65505
IP address blocks: 114.130.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13319 (0x3407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Jun 8 15:21:00 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6481f1dc-d45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:4a:49:6b:2b:dd:40:d0:d2:9a:19:36:dd:
37:67:9b:58:cc:c9:b2:15:c7:82:e1:f2:ba:89:6e:
51:16:e9:66:10:17:9a:fd:45:27:df:a9:45:57:6a:
06:e5:7c:93:d8:e1:f2:15:d2:54:92:6b:38:f8:0a:
bc:7a:f5:e9:52:28:83:15:83:e5:f6:7a:da:d3:3f:
c6:7c:35:aa:44:89:d6:5f:8a:87:29:f3:3d:fc:67:
53:d5:bb:11:37:84:2b:61:29:96:de:0a:4e:ab:0c:
f1:64:ae:3e:0c:f7:e4:30:1e:e3:e3:1a:1e:73:51:
0c:22:95:fd:bc:78:cc:0c:4b:ec:43:e2:9c:aa:e8:
b0:48:f1:a9:ab:93:05:65:37:79:a4:3c:56:20:cc:
1d:05:6c:0e:11:aa:6e:41:db:cb:1a:7a:2f:50:53:
6b:85:09:ba:cb:cd:49:c4:cb:76:02:e5:06:8c:a7:
74:c0:f8:48:ad:44:76:0d:73:86:5a:90:8d:5a:f6:
9b:80:c9:d8:c5:f3:43:f2:fc:6f:6e:8b:69:ec:a6:
d9:2a:08:e9:bf:a1:76:9f:c1:6d:38:d9:b1:7b:ed:
6f:ef:e0:a8:c1:8d:82:08:17:a0:93:b5:6a:39:28:
bb:c3:6f:7f:f4:3c:cc:fc:eb:cc:e1:9b:7c:9f:73:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:17:AE:62:37:8F:0E:F0:E3:D5:DB:E9:85:5C:AB:94:08:5A:FB
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/18499EC8EE5311E98269BD82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.130.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f6:fe:20:c5:ba:57:3d:1f:9b:6c:c2:77:ac:24:e5:65:92:
52:56:57:77:f6:5e:8f:19:8a:07:f6:ab:72:36:c9:77:ac:d1:
d4:c3:c1:05:8e:1f:2a:80:b3:c1:dd:fd:a5:4e:03:0c:73:70:
5b:f2:6e:74:b2:cb:82:34:db:a3:90:e4:b2:18:1d:56:46:61:
b6:92:97:12:81:dc:09:ba:12:f3:f8:5b:69:91:0e:f4:08:97:
9e:5a:d5:35:a4:48:af:48:2f:55:30:25:ee:42:f5:82:e8:46:
bb:66:9f:2f:94:f6:b6:ba:a3:84:64:22:a3:e8:4f:09:f8:e0:
75:28:5b:86:3d:b9:a9:a7:fe:67:70:fa:60:b5:9f:51:58:a7:
ce:d8:52:c9:46:6a:3b:d7:ab:3b:a1:42:e5:5b:23:60:6a:f5:
3d:24:12:f1:7c:c5:f4:03:b6:c1:2b:fa:a3:88:34:3a:c3:fc:
38:9b:c2:8a:6c:93:26:aa:19:30:eb:d6:94:03:bb:74:ba:02:
02:41:83:55:8d:5b:70:f9:03:08:c8:6f:97:ec:d0:45:de:4c:
26:ab:36:c6:15:ad:63:63:d5:62:3e:35:2b:14:27:64:bc:e6:
a4:0b:2f:51:c3:ad:46:d0:6e:bf:f3:de:07:d1:e3:9a:4f:0b:
3e:81:d2:91
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjMwNjA4MTUyMTAwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDgxZjFkYy1kNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6pKSWsr3UDQ0poZNt03Z5tYzMmyFceC4fK6iW5RFulmEBea/UUn36lFV2oG
5XyT2OHyFdJUkms4+Aq8evXpUiiDFYPl9nra0z/GfDWqRInWX4qHKfM9/GdT1bsR
N4QrYSmW3gpOqwzxZK4+DPfkMB7j4xoec1EMIpX9vHjMDEvsQ+KcquiwSPGpq5MF
ZTd5pDxWIMwdBWwOEapuQdvLGnovUFNrhQm6y81JxMt2AuUGjKd0wPhIrUR2DXOG
WpCNWvabgMnYxfND8vxvbotp7KbZKgjpv6F2n8FtONmxe+1v7+CowY2CCBegk7Vq
OSi7w29/9DzM/OvM4Zt8n3PihQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHiVF65i
N48O8OPV2+mFXKuUCFr7MB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMTg0OTlFQzhF
RTUzMTFFOTgyNjlCRDgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABygkswDQYJKoZIhvcNAQELBQADggEBAH72/iDFulc9H5ts
wnesJOVlklJWV3f2Xo8Zigf2q3I2yXes0dTDwQWOHyqAs8Hd/aVOAwxzcFvybnSy
y4I026OQ5LIYHVZGYbaSlxKB3Am6EvP4W2mRDvQIl55a1TWkSK9IL1UwJe5C9YLo
Rrtmny+U9ra6o4RkIqPoTwn44HUoW4Y9uamn/mdw+mC1n1FYp87YUslGajvXqzuh
QuVbI2Bq9T0kEvF8xfQDtsEr+qOINDrD/DibwopskyaqGTDr1pQDu3S6AgJBg1WN
W3D5AwjIb5fs0EXeTCarNsYVrWNj1WI+NSsUJ2S85qQLL1HDrUbQbr/z3gfR45pP
Cz6B0pE=
-----END CERTIFICATE-----
Generated at Fri Dec 1 11:34:57 2023 by rpki-client on console-fra.rpki-client.org