Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/70813366E58111ED9F882E19C4F9AE02.roa
File: 70813366E58111ED9F882E19C4F9AE02.roa (raw, json)
Hash identifier: C6czdVolT/ZmvGrNhPf2Ct5OshEqfT9rWNwb7Ebw1mE=
Subject key identifier: D5:08:6F:3F:2A:04:32:7D:AE:D6:11:80:3F:77:EE:AE:BE:1F:5E:6C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0BC1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/70813366E58111ED9F882E19C4F9AE02.roa
Signing time: Wed 24 May 2023 23:25:32 +0000
ROA not before: Wed 24 May 2023 23:25:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 149009
IP address blocks: 180.178.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 12:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3009 (0xbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 23:25:32 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e9cec-4a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:02:ab:37:6e:29:a0:15:e6:86:57:93:14:
09:5e:87:83:f5:21:b2:5d:f6:2e:61:ee:fe:ac:d2:
9c:43:52:34:03:09:7b:48:72:80:14:1d:ec:26:47:
54:b9:6d:57:7b:98:1c:81:2d:88:2c:5e:d4:8c:b9:
e1:85:62:64:b1:30:e8:9f:04:1d:f7:f7:27:06:b3:
f6:e5:8c:e1:b4:cc:50:6a:bb:d2:35:f6:40:29:08:
ee:6a:e4:5c:68:cc:45:d7:1e:aa:ca:f7:6a:fc:7c:
5d:f9:92:1e:c1:3e:d8:d2:cc:b1:0d:d3:86:bd:89:
58:84:dc:0f:df:ae:0a:3c:29:07:c8:95:66:d8:00:
cc:49:ae:83:4d:78:4b:a5:b0:89:84:2a:f8:ed:85:
3c:e9:83:19:60:63:86:56:55:a5:54:c5:3d:fa:fe:
d8:1b:34:44:f3:17:ce:c6:c1:8b:68:42:82:dc:ca:
40:da:64:74:0e:d7:5e:85:66:da:5f:3f:1c:50:f8:
3b:6f:f6:b5:b8:bc:e5:59:2b:8e:6b:b3:c5:58:f2:
de:bb:17:a8:a6:5d:68:71:f2:ea:68:a1:0e:f3:df:
87:be:d9:94:b9:56:db:07:22:e4:6e:df:d0:c8:b8:
3e:3c:0a:b2:8a:66:bb:c2:d1:b0:da:1d:9b:cd:0e:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:6F:3F:2A:04:32:7D:AE:D6:11:80:3F:77:EE:AE:BE:1F:5E:6C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/70813366E58111ED9F882E19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
51:66:b0:c5:ba:b2:0a:1a:c3:a6:bb:42:42:58:27:6e:44:8c:
9a:f0:ff:37:31:f6:0e:5a:23:01:5a:3f:e7:3d:f1:62:59:37:
8d:5a:2a:69:bf:24:c6:ed:be:f9:ee:e5:5a:6b:73:7d:ab:fc:
27:de:85:ef:ae:be:54:25:5a:5b:8d:ea:bf:cd:35:ed:8d:5d:
43:30:af:9c:47:cd:70:50:29:6a:97:d1:37:73:fb:68:4a:f5:
83:14:73:7a:5b:56:de:99:fe:14:99:43:5a:28:a0:77:45:59:
a8:aa:14:8a:51:bf:0c:e7:82:46:a4:25:c5:c4:3e:94:4f:9d:
0b:8a:63:8a:8c:e9:91:6f:03:0e:49:2d:7a:eb:48:00:12:9f:
ef:5b:4b:02:46:69:6a:bd:ba:31:db:48:c1:01:21:97:ad:d7:
70:93:9b:ad:91:f9:73:ab:f4:88:5f:ed:6f:c3:6e:80:a1:d8:
ff:16:d7:27:7a:65:b8:22:74:1c:b9:2b:da:ea:fd:a0:b3:af:
63:e6:fa:24:e5:cb:c5:5b:2f:3b:55:a2:2b:c8:e5:6b:24:ac:
de:9b:9c:5e:55:3f:84:a0:74:46:22:7c:50:a9:41:60:95:88:
a2:5f:dc:a2:ba:c0:08:7f:0e:15:49:ee:cc:81:2d:b4:04:f0:
4b:b6:81:b2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTI0MjMyNTMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDZlOWNlYy00YTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv04CqzduKaAV5oZXkxQJXoeD9SGyXfYuYe7+rNKcQ1I0Awl7SHKAFB3sJkdU
uW1Xe5gcgS2ILF7UjLnhhWJksTDonwQd9/cnBrP25YzhtMxQarvSNfZAKQjuauRc
aMxF1x6qyvdq/Hxd+ZIewT7Y0syxDdOGvYlYhNwP364KPCkHyJVm2ADMSa6DTXhL
pbCJhCr47YU86YMZYGOGVlWlVMU9+v7YGzRE8xfOxsGLaEKC3MpA2mR0DtdehWba
Xz8cUPg7b/a1uLzlWSuOa7PFWPLeuxeopl1ocfLqaKEO89+HvtmUuVbbByLkbt/Q
yLg+PAqyima7wtGw2h2bzQ5e8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNUIbz8q
BDJ9rtYRgD937q6+H15sMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNzA4MTMzNjZF
NTgxMTFFRDlGODgyRTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC0spYwDQYJKoZIhvcNAQELBQADggEBAFFmsMW6sgoaw6a7
QkJYJ25EjJrw/zcx9g5aIwFaP+c98WJZN41aKmm/JMbtvvnu5Vprc32r/Cfehe+u
vlQlWluN6r/NNe2NXUMwr5xHzXBQKWqX0Tdz+2hK9YMUc3pbVt6Z/hSZQ1oooHdF
WaiqFIpRvwzngkakJcXEPpRPnQuKY4qM6ZFvAw5JLXrrSAASn+9bSwJGaWq9ujHb
SMEBIZet13CTm62R+XOr9Ihf7W/DboCh2P8W1yd6ZbgidBy5K9rq/aCzr2Pm+iTl
y8VbLztVoivI5WskrN6bnF5VP4SgdEYifFCpQWCViKJf3KK6wAh/DhVJ7syBLbQE
8Eu2gbI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:34 2024 by rpki-client on console-ams.rpki-client.org