Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/A440ECEC696611EDBB4FBD50C4F9AE02.roa
File: A440ECEC696611EDBB4FBD50C4F9AE02.roa (raw, json)
Hash identifier: 05CcBjsKORCKSHJoOhhlk6EgBDkQ44ZuWBPpHhapnno=
Subject key identifier: B3:24:40:60:7A:51:D4:2F:8F:DA:10:5F:E7:87:1C:46:CF:8B:9A:F1
Certificate issuer: /CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Certificate serial: 08
Authority key identifier: E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/A440ECEC696611EDBB4FBD50C4F9AE02.roa
Signing time: Mon 21 Nov 2022 06:35:09 +0000
ROA not before: Mon 21 Nov 2022 06:35:09 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 141681
IP address blocks: 103.41.92.0/24 maxlen: 24
103.41.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912127A/serialNumber=E7520E2489FF6038B0D879B047170F9C51ACF7CE
Validity
Not Before: Nov 21 06:35:09 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=637b1c1c-928c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:40:2d:b0:21:23:23:5e:9e:47:2a:5a:f9:
9e:81:8d:5c:96:f0:d3:15:bb:ed:02:dd:df:7c:9e:
b4:5e:2d:e1:c2:bf:c8:09:8d:d0:b7:88:f1:97:15:
42:52:d0:e7:e6:34:4d:d7:84:fd:d5:15:71:78:0e:
7d:c8:70:9f:6e:9a:59:dc:99:fa:5c:c4:62:e5:cd:
33:72:0e:78:19:2d:a0:5d:b2:0d:bf:89:ec:4a:ff:
3b:39:0b:96:e4:f9:d1:63:ed:48:8b:55:29:64:71:
f6:7d:8f:e2:21:b5:85:c3:6a:ea:02:54:2d:0e:73:
b6:93:9b:b6:e8:cf:96:65:7e:f1:34:43:c2:fb:5e:
91:96:49:fc:10:f9:1b:17:6f:98:d3:8e:be:d9:9b:
1f:91:f5:bb:9e:92:be:62:7f:1e:0a:34:72:6c:b8:
81:3d:10:2a:ca:70:69:eb:50:cc:b2:37:2c:b2:50:
1c:d2:a0:8d:5b:7a:b2:c0:31:18:ee:29:9e:27:3a:
e1:91:7e:12:22:97:b6:12:74:19:a2:30:10:10:31:
42:6c:8a:bc:47:09:8a:1f:37:91:4e:e3:08:e1:3a:
6a:9e:3d:19:b3:bf:e7:b9:3f:ec:a6:fc:4d:d4:08:
cb:6b:a8:cd:a9:97:e9:a8:87:9a:aa:e4:d4:fa:8d:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:40:60:7A:51:D4:2F:8F:DA:10:5F:E7:87:1C:46:CF:8B:9A:F1
X509v3 Authority Key Identifier:
keyid:E7:52:0E:24:89:FF:60:38:B0:D8:79:B0:47:17:0F:9C:51:AC:F7:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/51IOJIn_YDiw2HmwRxcPnFGs984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51IOJIn_YDiw2HmwRxcPnFGs984.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912127A/9EB009B666E111ED8552471BC4F9AE02/A440ECEC696611EDBB4FBD50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.92.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:3f:73:0e:3d:fd:c3:25:f3:bf:29:fb:61:d3:4c:0d:43:c3:
8b:0f:4f:8b:49:32:55:49:fc:bf:40:85:d4:12:a2:bb:5a:99:
19:3e:1b:d8:ce:4e:ca:06:2a:81:65:43:41:7f:59:a0:6c:a9:
7c:04:3c:45:d5:2e:04:87:67:2a:6c:2e:7a:3b:8a:8b:b1:e1:
96:77:17:ab:96:23:fd:a7:51:dc:d0:42:d4:9f:3f:45:c5:af:
07:c9:b7:c6:0e:4a:f6:fb:48:9b:e5:7f:06:23:d2:9d:19:21:
c2:a8:86:84:68:f9:4d:f7:84:c8:78:13:bd:b5:16:80:90:61:
65:e9:28:34:f2:b4:42:73:ee:b7:94:4c:ca:78:bb:cb:89:92:
63:f4:01:8d:57:6d:f2:a3:43:b0:98:f1:13:bf:a8:a8:b4:eb:
a8:9f:0e:86:01:75:88:7c:4b:85:33:84:c1:4e:3b:9e:da:90:
9f:4d:9d:e9:98:30:48:e3:09:9d:8f:9d:eb:07:48:f4:32:3f:
ff:97:b4:00:32:28:50:4e:81:5a:82:7f:f4:2a:3e:cb:8e:34:
46:c2:05:10:b1:67:a4:bf:52:40:45:69:01:d8:a3:2f:50:05:
f6:b4:13:9a:9c:87:63:8a:87:9b:7c:53:1c:e3:38:49:2c:44:
d1:8f:79:dd
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MTI3QTExMC8GA1UEBRMoRTc1MjBFMjQ4OUZGNjAzOEIwRDg3OUIwNDcxNzBGOUM1
MUFDRjdDRTAeFw0yMjExMjEwNjM1MDlaFw0yNDAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzN2IxYzFjLTkyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK5EAtsCEjI16eRypa+Z6BjVyW8NMVu+0C3d98nrReLeHCv8gJjdC3iPGXFUJS
0OfmNE3XhP3VFXF4Dn3IcJ9umlncmfpcxGLlzTNyDngZLaBdsg2/iexK/zs5C5bk
+dFj7UiLVSlkcfZ9j+IhtYXDauoCVC0Oc7aTm7boz5ZlfvE0Q8L7XpGWSfwQ+RsX
b5jTjr7Zmx+R9buekr5ifx4KNHJsuIE9ECrKcGnrUMyyNyyyUBzSoI1berLAMRju
KZ4nOuGRfhIil7YSdBmiMBAQMUJsirxHCYofN5FO4wjhOmqePRmzv+e5P+ym/E3U
CMtrqM2pl+moh5qq5NT6jaZzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsyRAYHpR
1C+P2hBf54ccRs+LmvEwHwYDVR0jBBgwFoAU51IOJIn/YDiw2HmwRxcPnFGs984w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxMjdBLzlFQjAwOUI2NjZF
MTExRUQ4NTUyNDcxQkM0RjlBRTAyLzUxSU9KSW5fWURpdzJIbXdSeGNQbkZHczk4
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNTFJT0pJbl9ZRGl3Mkhtd1J4Y1BuRkdzOTg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTI3QS85RUIwMDlCNjY2RTExMUVEODU1MjQ3MUJDNEY5QUUwMi9BNDQwRUNFQzY5
NjYxMUVEQkI0RkJENTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcpXDANBgkqhkiG9w0BAQsFAAOCAQEAPj9zDj39wyXzvyn7
YdNMDUPDiw9Pi0kyVUn8v0CF1BKiu1qZGT4b2M5OygYqgWVDQX9ZoGypfAQ8RdUu
BIdnKmwuejuKi7HhlncXq5Yj/adR3NBC1J8/RcWvB8m3xg5K9vtIm+V/BiPSnRkh
wqiGhGj5TfeEyHgTvbUWgJBhZekoNPK0QnPut5RMyni7y4mSY/QBjVdt8qNDsJjx
E7+oqLTrqJ8OhgF1iHxLhTOEwU47ntqQn02d6ZgwSOMJnY+d6wdI9DI//5e0ADIo
UE6BWoJ/9Co+y440RsIFELFnpL9SQEVpAdijL1AF9rQTmpyHY4qHm3xTHOM4SSxE
0Y953Q==
-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:36 2024 by rpki-client on console-fra.rpki-client.org