Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E5AA7DDE374611EEBB324A13C4F9AE02.roa
File: E5AA7DDE374611EEBB324A13C4F9AE02.roa (raw, json)
Hash identifier: gupeFVOYuf6NwXxeIZeo6HMLNvF6YE40DtpNI0gH3M0=
Subject key identifier: 42:37:A4:50:06:BE:28:C5:77:D4:2A:DF:FF:68:59:D1:31:F5:19:CF
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 61
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E5AA7DDE374611EEBB324A13C4F9AE02.roa
Signing time: Thu 10 Aug 2023 06:26:54 +0000
ROA not before: Thu 10 Aug 2023 06:26:54 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.126.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Aug 10 06:26:54 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64d4832d-a2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:46:a7:9d:be:94:bf:b9:9d:3a:d6:ff:6d:
61:5c:60:dd:c6:f7:95:c2:14:8a:18:0a:b0:dc:df:
10:73:a8:a4:65:1e:6d:6e:77:d3:96:c0:b6:be:fc:
c4:01:5b:ef:c3:a4:d9:7f:c9:73:0b:6a:28:bb:52:
34:be:5d:68:fc:f7:ec:e4:47:ac:e2:8a:73:d3:ac:
34:ea:3a:83:94:93:aa:ee:c3:8f:28:68:a0:b4:e1:
23:f5:eb:f2:ca:5e:f2:ba:9e:b0:92:00:7a:fa:5b:
b6:9c:e3:6e:f3:9b:5a:01:44:4e:de:36:c6:4c:b0:
9f:7a:19:76:bb:01:04:63:5d:fb:22:5b:b5:8b:ba:
67:32:47:4e:73:c8:ed:fc:f6:49:41:e4:0a:71:af:
10:5c:a4:e8:9b:bd:ef:0a:76:e0:bd:a5:d8:4d:c4:
b9:be:72:e6:03:32:ae:a0:0a:92:c8:11:ae:03:3d:
d3:f3:9c:74:be:e6:35:13:db:58:5c:ed:da:70:2c:
5f:4c:33:f0:4d:35:1a:a1:ee:10:45:64:28:30:74:
46:3d:1d:3a:66:51:b8:d3:93:ed:19:bd:cc:e0:4f:
2c:13:7a:1e:9d:96:66:f7:50:88:70:47:44:f3:e1:
52:6c:bb:b2:a9:2b:19:a9:74:53:e9:b1:73:6c:f2:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:A4:50:06:BE:28:C5:77:D4:2A:DF:FF:68:59:D1:31:F5:19:CF
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E5AA7DDE374611EEBB324A13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5e:b4:e7:8b:71:98:ef:8c:6a:13:90:80:94:a5:be:b7:a1:
b8:b9:42:82:7a:aa:55:5e:29:2f:7d:9d:36:d9:ea:47:a3:ca:
2e:51:1a:3f:e1:2c:49:8b:9f:4e:66:3c:fb:ee:5b:33:b3:ad:
e2:dd:6c:fe:0e:34:19:a1:99:a6:04:c2:d8:81:15:c0:c5:91:
a7:4a:90:3a:6f:3c:1b:28:cc:13:11:62:34:c5:d7:91:b7:ad:
41:a5:0c:4c:a9:b6:07:c7:2d:35:86:50:fe:17:1d:a4:5e:91:
2d:5b:72:80:73:5f:32:ec:27:05:da:3c:24:5b:bd:51:c8:59:
52:62:5e:7d:6a:03:5c:e3:26:ef:d0:af:67:08:89:4e:23:91:
d3:52:d3:68:be:ec:77:26:64:99:e1:c9:7d:7f:62:62:f8:58:
54:0d:5b:78:39:39:68:cb:a5:cd:bf:0c:c3:e3:cc:59:6a:24:
39:aa:74:1f:3b:28:18:ce:c8:f0:f8:6b:9e:31:f0:a6:f5:cd:
c9:80:58:80:57:86:2c:72:7e:24:34:08:52:ff:f6:36:fa:b0:
e0:2f:d6:6c:0e:59:c0:9f:91:6a:a5:1e:8f:95:ca:76:60:3a:
ae:26:1f:43:97:d7:28:4c:8a:6d:d6:0d:f0:7f:b7:10:1f:5a:
2e:fd:1a:75
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjU1MDExMC8GA1UEBRMoNDU2RUVBMDY5MkM2QTRGMjZGNTNEMkQyMzdEMUNCNERD
RDc4MzMwNTAeFw0yMzA4MTAwNjI2NTRaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZDQ4MzJkLWEyZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOBEannb6Uv7mdOtb/bWFcYN3G95XCFIoYCrDc3xBzqKRlHm1ud9OWwLa+/MQB
W+/DpNl/yXMLaii7UjS+XWj89+zkR6ziinPTrDTqOoOUk6ruw48oaKC04SP16/LK
XvK6nrCSAHr6W7ac427zm1oBRE7eNsZMsJ96GXa7AQRjXfsiW7WLumcyR05zyO38
9klB5ApxrxBcpOibve8KduC9pdhNxLm+cuYDMq6gCpLIEa4DPdPznHS+5jUT21hc
7dpwLF9MM/BNNRqh7hBFZCgwdEY9HTpmUbjTk+0ZvczgTywTeh6dlmb3UIhwR0Tz
4VJsu7KpKxmpdFPpsXNs8pHdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQjekUAa+
KMV31Crf/2hZ0TH1Gc8wHwYDVR0jBBgwFoAURW7qBpLGpPJvU9LSN9HLTc14MwUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTUwLzg0MDA5NTRBQ0VD
NDExRUQ4QTgzRkIxMUM0RjlBRTAyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUlc3cUJwTEdwUEp2VTlMU045SExUYzE0TXdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU1MC84NDAwOTU0QUNFQzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9FNUFBN0RERTM3
NDYxMUVFQkIzMjRBMTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMp+YTANBgkqhkiG9w0BAQsFAAOCAQEAjV6054txmO+MahOQ
gJSlvrehuLlCgnqqVV4pL32dNtnqR6PKLlEaP+EsSYufTmY8++5bM7Ot4t1s/g40
GaGZpgTC2IEVwMWRp0qQOm88GyjMExFiNMXXkbetQaUMTKm2B8ctNYZQ/hcdpF6R
LVtygHNfMuwnBdo8JFu9UchZUmJefWoDXOMm79CvZwiJTiOR01LTaL7sdyZkmeHJ
fX9iYvhYVA1beDk5aMulzb8Mw+PMWWokOap0HzsoGM7I8PhrnjHwpvXNyYBYgFeG
LHJ+JDQIUv/2Nvqw4C/WbA5ZwJ+RaqUej5XKdmA6riYfQ5fXKEyKbdYN8H+3EB9a
Lv0adQ==
-----END CERTIFICATE-----
Generated at Wed Aug 16 23:55:07 2023 by rpki-client on console-ams.rpki-client.org