Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/22DCA07A3CC311EE8DAEB57CC4F9AE02.roa
File: 22DCA07A3CC311EE8DAEB57CC4F9AE02.roa (raw, json)
Hash identifier: s/3q26dI8HhGgT38v5Yj3D39JV9SYkWOafnJgFzE8mk=
Subject key identifier: 95:1E:54:42:FA:B7:50:20:88:87:A9:F7:90:5F:0C:06:3B:09:54:5E
Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial: 18
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/22DCA07A3CC311EE8DAEB57CC4F9AE02.roa
Signing time: Fri 18 Aug 2023 01:16:01 +0000
ROA not before: Fri 18 Aug 2023 01:16:01 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 151465
IP address blocks: 103.229.188.0/23 maxlen: 23
103.229.188.0/24 maxlen: 24
103.229.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 05:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Validity
Not Before: Aug 18 01:16:01 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dec651-745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:c1:d5:57:39:3f:a3:82:d1:a5:63:ab:ea:
17:f3:ea:48:78:fd:9e:8a:78:ee:01:b4:67:24:0c:
93:1b:1e:18:8e:0e:fd:4e:f0:a4:4b:76:d0:a2:4e:
b5:fc:b6:96:03:77:7b:6b:ea:07:c1:a7:50:aa:b9:
f2:ca:d7:db:f6:f6:75:ab:0f:3b:7f:83:be:d1:04:
3e:4b:8b:1c:a5:92:fb:9b:8c:d2:3e:17:de:16:32:
20:a5:7f:82:96:d9:8f:bb:7d:a3:5c:e2:14:b6:1e:
56:69:04:08:1b:b9:de:0d:19:52:c0:7b:01:9a:49:
63:c3:ec:c2:e1:10:40:df:af:7e:96:be:6c:b9:69:
8b:99:eb:5e:c1:b5:ae:73:b2:5e:43:12:b4:e5:2a:
d8:15:7d:cf:30:be:95:e6:98:18:ea:93:46:6d:8b:
b8:d4:e5:53:74:19:42:7f:e8:9e:d6:86:d2:32:b0:
03:2d:f4:c5:a3:9b:64:44:04:0f:5e:7f:43:91:2a:
9c:a8:5d:d9:e7:5a:7a:e3:1b:23:91:f8:e4:22:a4:
fc:a0:64:18:b7:21:59:a8:e5:17:22:33:16:be:eb:
75:ff:25:c1:84:3a:ba:df:f5:20:16:95:4e:b5:37:
23:01:15:18:43:1f:95:31:11:3a:c3:ca:80:3d:58:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:54:42:FA:B7:50:20:88:87:A9:F7:90:5F:0C:06:3B:09:54:5E
X509v3 Authority Key Identifier:
keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/22DCA07A3CC311EE8DAEB57CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:50:63:4e:03:c9:4d:1f:1b:d1:3f:d3:a0:4b:15:b5:ca:0c:
5e:51:64:bd:8f:b0:dc:43:aa:ca:9c:87:c1:d1:54:09:4a:7e:
5c:2c:d1:a7:8a:80:79:3c:c8:34:f3:99:b1:e2:92:91:e7:10:
5b:d6:cf:82:6c:98:ae:c5:65:46:5d:d9:37:b9:9e:ef:5f:95:
b8:d7:27:c1:fa:84:58:bf:e8:50:2e:c5:db:bd:ee:94:90:68:
63:0b:8d:dd:58:e1:bf:cc:b7:eb:31:21:b1:3f:39:c6:77:d8:
0d:f1:a1:56:b0:51:d8:9b:b1:49:7a:3e:c9:cc:c5:ab:06:e9:
b1:df:0d:00:a1:86:7d:1e:50:93:1b:a7:df:98:75:38:9f:71:
8b:c5:0d:d1:b3:ce:cf:d0:da:50:57:8e:e7:19:c2:b3:d1:a6:
b1:f7:5b:05:92:d5:e9:cb:4a:48:9f:69:fc:28:af:16:c9:0f:
26:51:88:3f:57:3a:fe:94:5b:12:b4:7f:4d:3a:3d:60:a1:ac:
2a:65:2f:f1:03:b0:25:a5:14:b3:2f:b1:77:52:65:3b:5c:a0:
d2:59:28:9e:ed:7f:9f:cb:97:00:ee:79:17:a3:07:ca:df:aa:
1f:50:ea:7b:90:f7:20:2c:1f:dd:a7:a6:be:f8:66:9f:8e:10:
c2:b4:c9:43
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
M0EyNzExMC8GA1UEBRMoNzkyRTBCM0VCMzYwNDQyN0ZDODQ4Rjk2QzczNEFDNEQ5
OUZFNzU5NjAeFw0yMzA4MTgwMTE2MDFaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZGVjNjUxLTc0NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7hcHVVzk/o4LRpWOr6hfz6kh4/Z6KeO4BtGckDJMbHhiODv1O8KRLdtCiTrX8
tpYDd3tr6gfBp1CqufLK19v29nWrDzt/g77RBD5LixylkvubjNI+F94WMiClf4KW
2Y+7faNc4hS2HlZpBAgbud4NGVLAewGaSWPD7MLhEEDfr36Wvmy5aYuZ617Bta5z
sl5DErTlKtgVfc8wvpXmmBjqk0Zti7jU5VN0GUJ/6J7WhtIysAMt9MWjm2REBA9e
f0ORKpyoXdnnWnrjGyOR+OQipPygZBi3IVmo5RciMxa+63X/JcGEOrrf9SAWlU61
NyMBFRhDH5UxETrDyoA9WDjtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlR5UQvq3
UCCIh6n3kF8MBjsJVF4wHwYDVR0jBBgwFoAUeS4LPrNgRCf8hI+WxzSsTZn+dZYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTI3LzUzNUVBNjRFMjFG
NzExRUVCQjg0ODYzNEM0RjlBRTAyL2VTNExQck5nUkNmOGhJLVd4elNzVFpuLWRa
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVM0TFByTmdSQ2Y4aEktV3h6U3NUWm4tZFpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0EyNy81MzVFQTY0RTIxRjcxMUVFQkI4NDg2MzRDNEY5QUUwMi8yMkRDQTA3QTND
QzMxMUVFOERBRUI1N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWflvDANBgkqhkiG9w0BAQsFAAOCAQEAsFBjTgPJTR8b0T/T
oEsVtcoMXlFkvY+w3EOqypyHwdFUCUp+XCzRp4qAeTzINPOZseKSkecQW9bPgmyY
rsVlRl3ZN7me71+VuNcnwfqEWL/oUC7F273ulJBoYwuN3Vjhv8y36zEhsT85xnfY
DfGhVrBR2JuxSXo+yczFqwbpsd8NAKGGfR5Qkxun35h1OJ9xi8UN0bPOz9DaUFeO
5xnCs9GmsfdbBZLV6ctKSJ9p/CivFskPJlGIP1c6/pRbErR/TTo9YKGsKmUv8QOw
JaUUsy+xd1JlO1yg0lkonu1/n8uXAO55F6MHyt+qH1Dqe5D3ICwf3aemvvhmn44Q
wrTJQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org