Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/4981B4100A4611ECAE818D54C4F9AE02.roa
File: 4981B4100A4611ECAE818D54C4F9AE02.roa (raw, json)
Hash identifier: 93HOPW2YFzoOVO5JZyGluBR3ruohQqZ1lLRSmDnf/5U=
Subject key identifier: CA:A4:EB:09:6E:49:40:A1:46:7E:38:0C:38:1A:9E:5C:74:16:81:E3
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 06FA
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/4981B4100A4611ECAE818D54C4F9AE02.roa
Signing time: Fri 16 Jun 2023 22:54:46 +0000
ROA not before: Fri 16 Jun 2023 22:54:46 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 135391
IP address blocks: 169.136.88.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 10:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 16 22:54:46 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=648ce836-fbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:bf:71:14:a8:4f:65:98:be:4d:9c:d2:07:
d4:a8:e5:a3:08:1a:d7:76:0a:28:07:82:a6:0e:70:
94:a5:a8:30:a2:89:2b:18:0a:2c:da:3e:94:c1:fa:
ce:37:0d:63:c9:5d:b7:f5:5d:c0:07:09:08:42:5c:
b2:4d:c9:d8:73:44:e3:5c:ab:db:bb:69:e3:94:b9:
49:6c:24:01:86:30:6e:fd:c1:1d:2e:2d:10:0c:6a:
81:df:93:2e:42:49:40:f2:81:0d:11:eb:f8:f7:41:
42:ea:02:a1:37:a2:1e:7d:ef:d3:70:7e:b2:f5:1a:
b5:9c:d3:be:88:d4:95:42:e6:7c:d5:36:a1:38:c9:
e0:bd:88:3e:de:78:9f:87:97:f3:0d:6d:90:bc:e7:
5b:af:6b:5e:f6:d9:da:96:64:d1:56:83:8e:1f:29:
bd:02:9b:8b:ec:dd:88:7b:22:99:18:b6:24:96:e0:
3e:70:be:11:66:87:d2:75:8e:90:f8:00:07:33:dd:
59:3f:26:02:96:2d:7c:a8:62:86:9f:2d:0d:de:e3:
7b:46:ea:8a:98:3a:08:a4:51:da:76:b5:bd:f7:62:
64:ba:46:c0:de:99:32:47:31:f9:d3:49:2a:8c:64:
fa:df:d0:1a:1d:70:f1:3a:cd:76:46:6d:5e:55:b2:
a1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:EB:09:6E:49:40:A1:46:7E:38:0C:38:1A:9E:5C:74:16:81:E3
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/4981B4100A4611ECAE818D54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.88.0/24
169.136.131.0/24
Signature Algorithm: sha256WithRSAEncryption
75:45:71:c2:8a:7a:00:91:5e:ab:28:ea:b6:f2:57:e9:5d:ce:
9c:c0:df:1c:83:22:17:1b:cf:2c:e2:66:b6:7b:ca:39:de:4b:
01:19:3f:3c:4d:39:25:66:b7:8d:83:a0:ff:5f:88:8d:25:fc:
66:d2:1f:c8:a4:b3:79:22:8b:24:02:94:9e:92:70:46:cc:59:
58:ee:65:8a:37:e8:81:8b:88:ce:d0:a6:a0:cd:c5:1f:04:7d:
dc:9a:65:54:3e:1d:4c:cd:a0:9a:8d:30:50:f7:78:5e:75:54:
5e:f9:96:b6:95:b9:e4:4d:b0:94:a3:10:eb:f0:d4:fc:99:ca:
db:4e:63:ba:15:47:ce:5a:5a:8e:a6:8d:4c:e6:a3:e8:aa:93:
ad:3b:00:70:73:27:16:15:56:34:0d:65:63:42:b4:7f:20:77:
7c:36:42:f2:d1:24:c0:a6:9f:9a:5b:23:c1:05:61:f3:f7:d5:
ec:78:1e:8d:b3:7e:ad:e7:9c:ab:fa:78:ce:15:f0:64:29:8e:
94:1c:db:b4:6c:e9:ca:c1:0a:72:eb:8a:27:30:5a:b2:fb:5d:
29:8f:c8:2e:6f:e4:a3:47:90:5c:a8:b7:c2:a4:07:e2:b1:f9:
cc:b8:09:0a:06:89:e7:22:94:e1:78:98:c1:5d:f8:a0:15:9b:
8e:f5:46:7b
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5
RTlBQ0RCODgwHhcNMjMwNjE2MjI1NDQ2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDhjZTgzNi1mYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZy/cRSoT2WYvk2c0gfUqOWjCBrXdgooB4KmDnCUpagwookrGAos2j6UwfrO
Nw1jyV239V3ABwkIQlyyTcnYc0TjXKvbu2njlLlJbCQBhjBu/cEdLi0QDGqB35Mu
QklA8oENEev490FC6gKhN6Iefe/TcH6y9Rq1nNO+iNSVQuZ81TahOMngvYg+3nif
h5fzDW2QvOdbr2te9tnalmTRVoOOHym9ApuL7N2IeyKZGLYkluA+cL4RZofSdY6Q
+AAHM91ZPyYCli18qGKGny0N3uN7RuqKmDoIpFHadrW992JkukbA3pkyRzH500kq
jGT639AaHXDxOs12Rm1eVbKhfQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMqk6wlu
SUChRn44DDganlx0FoHjMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRjdERkE3MkVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvNDk4MUI0MTAw
QTQ2MTFFQ0FFODE4RDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBACpiFgDBACpiIMwDQYJKoZIhvcNAQELBQADggEBAHVFccKK
egCRXqso6rbyV+ldzpzA3xyDIhcbzyziZrZ7yjneSwEZPzxNOSVmt42DoP9fiI0l
/GbSH8iks3kiiyQClJ6ScEbMWVjuZYo36IGLiM7QpqDNxR8EfdyaZVQ+HUzNoJqN
MFD3eF51VF75lraVueRNsJSjEOvw1PyZyttOY7oVR85aWo6mjUzmo+iqk607AHBz
JxYVVjQNZWNCtH8gd3w2QvLRJMCmn5pbI8EFYfP31ex4Ho2zfq3nnKv6eM4V8GQp
jpQc27Rs6crBCnLriicwWrL7XSmPyC5v5KNHkFyot8KkB+Kx+cy4CQoGiecilOF4
mMFd+KAVm471Rns=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:31 2024 by rpki-client on console-ams.rpki-client.org