Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/897A81604D2311EE8457B12FC4F9AE02.roa
File: 897A81604D2311EE8457B12FC4F9AE02.roa (raw, json)
Hash identifier: 62IZtRncEAa5pvhFpRVYh5vfJErpOync17yL9mIydps=
Subject key identifier: 95:BF:7B:B6:89:99:16:90:8B:EA:1E:44:B5:94:56:0B:79:A4:2E:86
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 77
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/897A81604D2311EE8457B12FC4F9AE02.roa
Signing time: Thu 07 Sep 2023 02:09:12 +0000
ROA not before: Thu 07 Sep 2023 02:09:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 140641
IP address blocks: 202.134.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Sep 2023 06:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Sep 7 02:09:12 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64f930c8-aec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:83:b5:25:ec:e9:b8:16:b4:48:c0:b7:c8:
bc:25:13:16:59:e5:07:70:7f:c5:41:9c:87:af:a9:
63:3e:92:4b:fd:88:bb:45:b5:9e:a3:49:b5:ba:5d:
4e:c2:32:e1:bf:38:fa:4f:84:67:39:ce:d9:a6:38:
30:2a:32:fc:36:99:7c:4b:dc:23:20:a1:b0:4c:52:
bc:84:aa:f3:27:d2:07:07:e0:72:65:dd:71:25:66:
ed:7b:ee:db:b3:81:dc:2a:da:81:62:b6:13:2f:00:
34:71:40:ab:0a:7e:95:46:bd:8d:7d:66:cf:2b:6e:
7f:75:ec:52:1e:12:40:99:31:4b:0e:29:d7:bf:4a:
4c:fe:ac:d6:39:6a:78:fd:3e:66:f7:df:a8:54:54:
69:03:33:b5:bf:72:4b:09:2e:aa:0c:e3:56:1a:ed:
39:5f:f6:1e:9b:e4:65:62:35:31:28:12:d0:34:82:
6a:bb:05:10:83:95:2c:fc:3d:19:bd:b7:65:18:ff:
2f:88:6d:a7:ec:e5:db:1f:3d:8d:ca:02:c0:85:63:
39:23:ac:76:98:d2:91:dd:c6:2b:8f:6e:0f:68:10:
0f:f5:e2:7e:83:b3:dd:f9:e2:c1:ef:21:51:69:64:
7d:21:7f:7e:24:10:6f:78:2d:e5:b5:dd:80:2c:0b:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:7B:B6:89:99:16:90:8B:EA:1E:44:B5:94:56:0B:79:A4:2E:86
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/897A81604D2311EE8457B12FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d6:2a:52:cf:8c:be:6a:92:66:c5:74:f1:57:35:44:6c:b1:
15:08:71:91:d5:ef:50:31:42:fe:3f:e2:90:94:1d:57:d7:2f:
0a:b3:6c:15:93:00:3f:c7:f1:57:82:97:bb:86:aa:5f:f2:be:
32:dc:fe:7c:b7:30:67:26:ef:2f:73:0e:b2:6b:56:b0:df:6a:
ed:61:3c:8e:9f:e8:8e:7e:47:c5:c7:41:30:d8:67:09:74:d6:
bd:47:bc:f1:f9:ee:15:4e:ac:53:35:52:3b:6b:c1:7e:54:f2:
f5:c4:13:af:cd:2e:79:cf:e9:2a:d7:91:26:ab:a5:17:d1:f4:
50:76:ef:c5:0f:18:12:93:ef:2f:d9:c3:37:d9:a1:7f:4a:be:
bd:ee:74:99:97:bb:53:c5:ed:b7:15:1a:20:c3:bf:86:e8:29:
75:5e:f3:da:3f:5a:45:a8:f7:61:f5:ca:c7:a8:1b:4a:1b:d6:
29:4a:86:b5:87:53:d5:7e:58:02:0f:22:a0:39:31:0a:aa:b9:
db:d6:96:f0:ab:6f:d7:3f:ef:a6:61:a8:ff:bb:b6:3b:0d:17:
b6:3a:45:5a:8c:d9:e2:dc:5c:63:95:e7:23:17:71:1d:20:22:
1b:72:46:55:fe:85:b8:59:bf:81:1c:f5:f7:04:be:43:4f:d8:
f0:a4:dd:bb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjU1MDExMC8GA1UEBRMoNDU2RUVBMDY5MkM2QTRGMjZGNTNEMkQyMzdEMUNCNERD
RDc4MzMwNTAeFw0yMzA5MDcwMjA5MTJaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZjkzMGM4LWFlYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUxIO1JezpuBa0SMC3yLwlExZZ5Qdwf8VBnIevqWM+kkv9iLtFtZ6jSbW6XU7C
MuG/OPpPhGc5ztmmODAqMvw2mXxL3CMgobBMUryEqvMn0gcH4HJl3XElZu177tuz
gdwq2oFithMvADRxQKsKfpVGvY19Zs8rbn917FIeEkCZMUsOKde/Skz+rNY5anj9
Pmb336hUVGkDM7W/cksJLqoM41Ya7Tlf9h6b5GViNTEoEtA0gmq7BRCDlSz8PRm9
t2UY/y+Ibafs5dsfPY3KAsCFYzkjrHaY0pHdxiuPbg9oEA/14n6Ds9354sHvIVFp
ZH0hf34kEG94LeW13YAsC9WLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlb97tomZ
FpCL6h5EtZRWC3mkLoYwHwYDVR0jBBgwFoAURW7qBpLGpPJvU9LSN9HLTc14MwUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTUwLzg0MDA5NTRBQ0VD
NDExRUQ4QTgzRkIxMUM0RjlBRTAyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUlc3cUJwTEdwUEp2VTlMU045SExUYzE0TXdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU1MC84NDAwOTU0QUNFQzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi84OTdBODE2MDRE
MjMxMUVFODQ1N0IxMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMqG5TANBgkqhkiG9w0BAQsFAAOCAQEArdYqUs+MvmqSZsV0
8Vc1RGyxFQhxkdXvUDFC/j/ikJQdV9cvCrNsFZMAP8fxV4KXu4aqX/K+Mtz+fLcw
ZybvL3MOsmtWsN9q7WE8jp/ojn5HxcdBMNhnCXTWvUe88fnuFU6sUzVSO2vBflTy
9cQTr80uec/pKteRJqulF9H0UHbvxQ8YEpPvL9nDN9mhf0q+ve50mZe7U8XttxUa
IMO/hugpdV7z2j9aRaj3YfXKx6gbShvWKUqGtYdT1X5YAg8ioDkxCqq529aW8Ktv
1z/vpmGo/7u2Ow0XtjpFWozZ4txcY5XnIxdxHSAiG3JGVf6FuFm/gRz19wS+Q0/Y
8KTduw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org