Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
File: 4B24492A9BE211EDA44C435CC4F9AE02.roa (raw, json)
Hash identifier: LiVuDSz3lh805VnA5JU3WJLYAPZ07qzdWsbcsZOr+Rg=
Subject key identifier: 9E:D8:73:BF:E8:DD:CA:59:56:2E:8F:FC:FD:D1:C3:02:01:DB:0D:23
Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Certificate serial: 0B34
Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
Signing time: Thu 18 May 2023 20:00:18 +0000
ROA not before: Thu 18 May 2023 20:00:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150731
IP address blocks: 182.161.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7
Validity
Not Before: May 18 20:00:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646683d2-adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:61:22:12:43:32:63:a0:96:7f:26:36:9c:
ed:fe:af:30:48:0b:be:dc:c8:9e:d8:75:a3:0c:ef:
6a:45:ca:37:74:e2:95:96:4c:70:09:e9:02:cd:2a:
85:05:41:4d:89:aa:a7:af:f0:a9:05:2a:37:47:03:
1c:ed:b5:fd:ca:9e:6e:10:91:3a:53:af:91:b9:59:
b9:06:fc:cc:45:06:a3:a1:fa:b1:44:b3:95:51:da:
f5:48:66:37:f9:8a:6c:b1:d2:84:d8:32:27:9f:f0:
2a:e6:bd:46:65:13:e3:64:88:b3:c7:6d:93:a0:50:
20:dd:cf:48:99:16:dc:6b:5d:c6:48:a3:dd:bb:04:
a7:de:69:b3:de:37:03:00:ac:aa:e8:28:9f:72:fb:
69:99:18:7b:bd:5e:6c:5e:ae:cc:1e:af:23:75:13:
3c:06:1d:83:c3:b5:1c:9a:52:34:52:56:6a:37:d6:
7b:f7:c9:6b:b4:79:51:8e:fb:55:1a:63:ff:82:d8:
94:71:70:9b:6a:bb:7f:1c:ac:ad:38:ff:2c:72:8d:
ae:e0:eb:24:20:81:91:f8:6d:3f:90:06:f7:ad:39:
0d:9b:99:6a:03:fc:48:a0:b0:07:3a:d1:1f:85:df:
7e:2b:01:1a:d0:cb:f1:4f:0b:3b:96:f0:d9:62:a5:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:73:BF:E8:DD:CA:59:56:2E:8F:FC:FD:D1:C3:02:01:DB:0D:23
X509v3 Authority Key Identifier:
keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/4B24492A9BE211EDA44C435CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
182.161.67.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:7a:e9:46:f4:08:fc:86:4a:b0:26:9a:95:92:bb:ef:95:
ad:25:0a:7a:ea:46:96:39:d5:1c:5d:31:61:3a:f9:a4:c2:c7:
e5:74:ba:51:0d:80:fa:a9:69:c8:8d:f8:ea:5f:dc:db:d1:9d:
76:24:db:74:10:81:03:3c:50:2a:7c:a3:d8:d0:94:8b:36:6f:
1d:5d:b2:09:da:2d:62:49:de:9b:b2:90:37:31:a7:7e:13:64:
09:73:0d:72:ff:3f:a1:b2:a5:0e:0c:a7:d9:d7:d4:30:85:19:
2b:be:34:13:fb:9b:d9:68:be:7c:d6:d2:ad:d6:36:1d:d8:2a:
fc:76:33:9a:2a:a2:cf:e1:cf:8a:97:43:95:1d:a7:bf:2a:7b:
02:d4:e6:f0:64:92:a2:2c:c9:46:3a:42:fe:e5:50:30:61:1d:
f6:17:cd:04:f3:c2:0f:02:9c:0c:f5:ab:4c:2b:8b:f7:44:c3:
d2:c7:00:8c:82:7d:43:0d:16:bb:54:9d:86:4a:f0:df:5a:43:
de:ff:81:5a:f6:cf:af:4f:de:09:2e:69:1b:33:6e:c8:28:2c:
60:95:20:f0:eb:4d:d8:e3:5b:41:b7:e3:61:87:0f:60:42:d9:
f5:e4:60:b8:8f:bd:5b:20:a6:86:3d:b0:86:69:38:07:19:70:
ab:43:a3:19
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG
RkNCQ0FERDcwHhcNMjMwNTE4MjAwMDE4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDY2ODNkMi1hZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzsVhIhJDMmOgln8mNpzt/q8wSAu+3Mie2HWjDO9qRco3dOKVlkxwCekCzSqF
BUFNiaqnr/CpBSo3RwMc7bX9yp5uEJE6U6+RuVm5BvzMRQajofqxRLOVUdr1SGY3
+YpssdKE2DInn/Aq5r1GZRPjZIizx22ToFAg3c9ImRbca13GSKPduwSn3mmz3jcD
AKyq6CifcvtpmRh7vV5sXq7MHq8jdRM8Bh2Dw7UcmlI0UlZqN9Z798lrtHlRjvtV
GmP/gtiUcXCbart/HKytOP8sco2u4OskIIGR+G0/kAb3rTkNm5lqA/xIoLAHOtEf
hd9+KwEa0MvxTws7lvDZYqWn/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ7Yc7/o
3cpZVi6P/P3RwwIB2w0jMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0
RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBDRjIvRDAwREI3NkVGNEVFMTFFOUFFRkVBODE5QzRGOUFFMDIvNEIyNDQ5MkE5
QkUyMTFFREE0NEM0MzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC2oUMwDQYJKoZIhvcNAQELBQADggEBAGTLeulG9Aj8hkqw
JpqVkrvvla0lCnrqRpY51RxdMWE6+aTCx+V0ulENgPqpaciN+Opf3NvRnXYk23QQ
gQM8UCp8o9jQlIs2bx1dsgnaLWJJ3puykDcxp34TZAlzDXL/P6GypQ4Mp9nX1DCF
GSu+NBP7m9lovnzW0q3WNh3YKvx2M5oqos/hz4qXQ5Udp78qewLU5vBkkqIsyUY6
Qv7lUDBhHfYXzQTzwg8CnAz1q0wri/dEw9LHAIyCfUMNFrtUnYZK8N9aQ97/gVr2
z69P3gkuaRszbsgoLGCVIPDrTdjjW0G342GHD2BC2fXkYLiPvVsgpoY9sIZpOAcZ
cKtDoxk=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:22 2023 by rpki-client on console.sobornost.net