Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/CBED76CEBFAB11EE83D1892CC4F9AE02.roa
File: CBED76CEBFAB11EE83D1892CC4F9AE02.roa (raw, json)
Hash identifier: yH482bqBu0Yy/9akj5heM3w4agNbhjpH1PLGVk9e2gE=
Subject key identifier: C9:55:DE:FC:9D:D0:C2:0F:67:53:BE:B4:8D:FB:83:55:4D:1B:0E:82
Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial: 06B0
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/CBED76CEBFAB11EE83D1892CC4F9AE02.roa
Signing time: Tue 30 Jan 2024 20:11:48 +0000
ROA not before: Tue 30 Jan 2024 20:11:48 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 20473
IP address blocks: 202.91.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 04:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1712 (0x6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Validity
Not Before: Jan 30 20:11:48 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65b95803-08ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:70:03:5a:f1:9f:12:71:3e:2d:eb:52:f5:
73:ed:7b:53:f4:a9:a3:73:98:cf:6c:7a:1d:f1:3e:
29:d5:69:43:2f:f2:a3:f5:e6:8d:ac:68:94:1d:30:
b8:14:68:d9:2d:b1:ae:8c:ee:4d:25:15:5c:33:3e:
82:63:b5:af:81:fe:30:f5:a4:39:4f:67:60:4d:d2:
20:aa:4d:0d:c5:40:eb:25:76:ee:48:99:03:7f:f8:
8e:26:bd:3f:79:ea:de:04:99:de:39:f7:c1:cb:2b:
58:ef:53:c9:78:cd:28:4d:05:08:2f:82:53:01:74:
ed:9d:55:ae:86:50:f2:f4:da:93:a9:72:b6:cb:b3:
64:8b:21:3b:5c:84:3f:96:9c:92:ab:8d:5c:38:93:
4e:ae:95:4e:f9:15:f7:79:72:f1:cc:d4:35:fe:9a:
81:cf:2c:17:da:f5:03:e0:e3:ab:a3:6d:66:88:41:
1a:9a:19:4b:56:dc:ca:42:2e:23:a1:5b:b1:ee:28:
04:6a:ac:a6:12:84:b5:60:50:c6:3b:ba:32:57:26:
68:21:77:2a:02:27:5e:bf:b2:28:0f:f9:dd:00:4d:
58:0b:57:ce:21:67:82:97:6e:70:f3:3e:be:83:3e:
42:eb:66:f6:8e:fe:7d:5c:9c:f7:16:43:39:69:2a:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:DE:FC:9D:D0:C2:0F:67:53:BE:B4:8D:FB:83:55:4D:1B:0E:82
X509v3 Authority Key Identifier:
keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/CBED76CEBFAB11EE83D1892CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.91.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:af:d2:84:36:dd:66:32:90:d6:3c:1c:12:6d:11:8d:80:12:
d3:f3:a5:32:e6:a9:b9:46:5e:9b:f2:8e:41:a8:76:90:58:4a:
ac:0e:3b:b0:44:68:8e:59:d3:eb:d8:64:5d:1b:a1:31:07:a0:
90:5b:d2:af:a5:59:e7:4e:17:4c:ad:35:1d:c7:a2:96:ee:6b:
34:0a:02:af:c5:31:01:af:3c:04:91:01:74:bb:01:52:b3:c0:
df:8e:9e:d1:d4:59:b5:04:0e:21:2a:99:4c:21:26:ed:ff:0d:
f3:2a:00:19:6d:92:62:17:00:79:7c:d4:99:4c:1e:6f:a2:f7:
24:8d:5d:44:a7:08:10:6a:d9:e3:6d:f8:2e:68:33:b6:f6:9e:
a9:45:2f:86:da:6c:b0:09:6b:4b:c4:c8:cb:98:56:52:58:60:
17:86:72:77:4b:fd:b4:64:a1:32:b0:98:bc:60:fa:28:29:55:
ea:69:ab:3f:d8:e8:c7:3b:cc:46:b2:85:1c:51:87:88:6e:df:
ae:9e:28:f2:ce:43:a9:fb:d7:b9:99:1b:e8:83:86:49:7a:df:
03:b1:e5:a5:d3:d3:96:f8:3a:78:1c:53:d2:d3:b5:de:74:76:
a6:c3:19:fe:88:c7:4e:5c:33:ce:00:2a:c4:1b:d5:b7:65:f6:
d3:2e:b6:1a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz
NTg4Rjc3QzMwHhcNMjQwMTMwMjAxMTQ4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5NTgwMy0wOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbJwA1rxnxJxPi3rUvVz7XtT9Kmjc5jPbHod8T4p1WlDL/Kj9eaNrGiUHTC4
FGjZLbGujO5NJRVcMz6CY7Wvgf4w9aQ5T2dgTdIgqk0NxUDrJXbuSJkDf/iOJr0/
eereBJneOffByytY71PJeM0oTQUIL4JTAXTtnVWuhlDy9NqTqXK2y7NkiyE7XIQ/
lpySq41cOJNOrpVO+RX3eXLxzNQ1/pqBzywX2vUD4OOro21miEEamhlLVtzKQi4j
oVux7igEaqymEoS1YFDGO7oyVyZoIXcqAidev7IoD/ndAE1YC1fOIWeCl25w8z6+
gz5C62b2jv59XJz3FkM5aSqaQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMlV3vyd
0MIPZ1O+tI37g1VNGw6CMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0
NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDA4NTMvNUI5NDM5MEUwNDQxMTFFQjkxQzQzRTQ1QzRGOUFFMDIvQ0JFRDc2Q0VC
RkFCMTFFRTgzRDE4OTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKW6owDQYJKoZIhvcNAQELBQADggEBAKyv0oQ23WYykNY8
HBJtEY2AEtPzpTLmqblGXpvyjkGodpBYSqwOO7BEaI5Z0+vYZF0boTEHoJBb0q+l
WedOF0ytNR3HopbuazQKAq/FMQGvPASRAXS7AVKzwN+OntHUWbUEDiEqmUwhJu3/
DfMqABltkmIXAHl81JlMHm+i9ySNXUSnCBBq2eNt+C5oM7b2nqlFL4babLAJa0vE
yMuYVlJYYBeGcndL/bRkoTKwmLxg+igpVeppqz/Y6Mc7zEayhRxRh4hu366eKPLO
Q6n717mZG+iDhkl63wOx5aXT05b4OngcU9LTtd50dqbDGf6Ix05cM84AKsQb1bdl
9tMutho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:28 2024 by rpki-client on console-ams.rpki-client.org