Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/C6E582FAFAF411EE9A7EC618C4F9AE02.roa
File: C6E582FAFAF411EE9A7EC618C4F9AE02.roa (raw, json)
Hash identifier: hOauPYUTWVX3U5rEyeKJr1SbvtkNrYMB7wSkWEKhPU8=
Subject key identifier: 5B:AD:DE:FD:AC:8B:8A:24:57:F2:52:90:04:C2:12:74:64:62:68:69
Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Certificate serial: 21
Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/C6E582FAFAF411EE9A7EC618C4F9AE02.roa
Signing time: Mon 15 Apr 2024 06:52:51 +0000
ROA not before: Mon 15 Apr 2024 06:52:51 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 6453
IP address blocks: 210.79.128.0/23 maxlen: 23
2401:5420::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 12 May 2024 09:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Validity
Not Before: Apr 15 06:52:51 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=661ccec3-510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:fc:02:3d:7a:b4:e7:51:2a:6a:a9:38:ac:
ca:fa:9f:89:21:ae:66:e2:9a:48:e1:1f:72:f2:d9:
d2:cc:c7:d9:a1:d3:a5:20:59:29:42:01:3e:c1:72:
45:a9:40:be:42:21:d8:65:bc:b1:8c:2c:f9:fb:26:
8d:8a:2f:d2:84:aa:28:7a:50:76:42:24:66:f7:9c:
a4:8c:32:5f:60:b9:c6:98:99:2c:3d:58:37:95:fa:
80:33:52:71:89:6d:e7:d9:42:04:50:09:59:d6:62:
9a:65:f7:6d:29:69:ea:cf:ed:38:1f:82:ca:ce:3e:
a6:5f:e0:b6:69:a6:9d:4e:7d:0c:b7:31:8c:6f:ff:
df:2a:e7:d1:b9:cf:d8:30:4f:63:39:6e:57:00:52:
03:ef:42:5b:94:17:92:37:3e:c6:78:a1:a9:ee:00:
9e:9e:34:7b:a6:9f:3f:16:c8:18:20:25:c2:f1:2d:
87:ef:17:bc:df:c0:51:fb:bc:f4:0c:f5:a6:07:32:
a2:95:11:53:e5:53:55:e9:4b:3a:57:6a:59:ac:69:
25:f0:a2:3c:e6:34:a7:96:e5:26:62:ec:4d:80:81:
ac:39:a5:43:3e:8b:bc:c1:d2:ce:f3:fb:bd:c1:b0:
95:fd:42:56:06:d5:6c:27:43:b5:55:e0:32:be:66:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:DE:FD:AC:8B:8A:24:57:F2:52:90:04:C2:12:74:64:62:68:69
X509v3 Authority Key Identifier:
keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/C6E582FAFAF411EE9A7EC618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.128.0/23
IPv6:
2401:5420::/32
Signature Algorithm: sha256WithRSAEncryption
c4:5d:40:28:cc:a3:8b:46:19:f7:44:81:ec:5d:2d:1d:ee:21:
41:41:e2:a3:d6:9c:ef:f2:08:35:08:bf:ca:98:9a:4c:b2:ac:
df:30:44:1e:70:93:32:8c:5e:71:e1:32:00:b7:f4:a8:cb:06:
1e:4e:a0:c9:15:84:a4:2f:a9:4c:70:f7:88:b6:0d:d6:30:72:
99:ff:ec:9e:15:c4:1e:2d:a0:9e:e8:93:05:f1:ad:b1:b1:34:
5d:e2:66:67:a3:38:d9:9f:53:3d:c6:4a:e8:19:55:3a:56:50:
e9:bb:d4:99:6d:06:0d:a3:a0:8c:68:b7:75:68:84:2b:a7:13:
03:67:e3:0d:ed:92:2b:6a:40:0e:84:ed:05:5b:b2:f3:04:22:
44:22:b4:a8:2b:eb:e6:6b:84:7b:99:b8:74:60:7f:bb:30:3c:
f9:be:14:74:de:0b:17:a2:41:9e:60:4c:dc:8d:2c:86:68:4c:
27:48:4d:74:f3:3d:77:0c:34:7d:f9:49:6e:61:04:ef:79:b8:
c5:fd:d3:09:05:22:27:79:14:9f:38:0c:1b:b4:70:98:4e:df:
4e:59:08:9b:86:21:44:49:4c:b6:bc:ac:dd:5f:52:71:f6:0e:
d7:1c:a1:1b:26:b0:1e:a7:9c:ef:3b:f6:c8:9e:65:83:9d:45:
8b:0e:74:65
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzQxNTExMC8GA1UEBRMoQTgyRTYzMzFFQkY0NEY1OEZDNjU5OTg2REIwNTQ0QzY2
MTVGMjZGMTAeFw0yNDA0MTUwNjUyNTFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MWNjZWMzLTUxMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYMvwCPXq051Eqaqk4rMr6n4khrmbimkjhH3Ly2dLMx9mh06UgWSlCAT7BckWp
QL5CIdhlvLGMLPn7Jo2KL9KEqih6UHZCJGb3nKSMMl9gucaYmSw9WDeV+oAzUnGJ
befZQgRQCVnWYppl920paerP7TgfgsrOPqZf4LZppp1OfQy3MYxv/98q59G5z9gw
T2M5blcAUgPvQluUF5I3PsZ4oanuAJ6eNHumnz8WyBggJcLxLYfvF7zfwFH7vPQM
9aYHMqKVEVPlU1XpSzpXalmsaSXwojzmNKeW5SZi7E2Agaw5pUM+i7zB0s7z+73B
sJX9QlYG1WwnQ7VV4DK+ZpMjAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUW63e/ayL
iiRX8lKQBMISdGRiaGkwHwYDVR0jBBgwFoAUqC5jMev0T1j8ZZmG2wVExmFfJvEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNDE1L0JEMUM5MzVDRDcz
MjExRUVBMTgzRjUwQUM0RjlBRTAyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcUM1ak1ldjBUMWo4WlptRzJ3VkV4bUZmSnZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9DNkU1ODJGQUZB
RjQxMUVFOUE3RUM2MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAdJPgDANBAIAAjAHAwUAJAFUIDANBgkqhkiG9w0BAQsFAAOC
AQEAxF1AKMyji0YZ90SB7F0tHe4hQUHio9ac7/IINQi/ypiaTLKs3zBEHnCTMoxe
ceEyALf0qMsGHk6gyRWEpC+pTHD3iLYN1jBymf/snhXEHi2gnuiTBfGtsbE0XeJm
Z6M42Z9TPcZK6BlVOlZQ6bvUmW0GDaOgjGi3dWiEK6cTA2fjDe2SK2pADoTtBVuy
8wQiRCK0qCvr5muEe5m4dGB/uzA8+b4UdN4LF6JBnmBM3I0shmhMJ0hNdPM9dww0
fflJbmEE73m4xf3TCQUiJ3kUnzgMG7RwmE7fTlkIm4YhRElMtrys3V9ScfYO1xyh
GyawHqec7zv2yJ5lg51Fiw50ZQ==
-----END CERTIFICATE-----
Generated at Sun May 12 10:20:56 2024 by rpki-client on console-fra.rpki-client.org