Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/A3C0C1708B7111EDADF51C55C4F9AE02.roa
File: A3C0C1708B7111EDADF51C55C4F9AE02.roa (raw, json)
Hash identifier: 0DzeIeXuY39mto84WvElzsM81EO2Vn9NBAyddsLT0HU=
Subject key identifier: 50:9D:84:32:12:2D:3C:1D:01:0C:31:A1:27:FF:88:10:61:1F:D2:B4
Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial: 0627
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/A3C0C1708B7111EDADF51C55C4F9AE02.roa
Signing time: Tue 03 Jan 2023 14:19:31 +0000
ROA not before: Tue 03 Jan 2023 14:19:31 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 58689
IP address blocks: 103.155.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Validity
Not Before: Jan 3 14:19:31 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63b43973-efac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:1c:82:c6:9c:c5:23:1f:9f:a5:1e:97:1a:
ca:78:76:41:a6:0d:c9:eb:ea:a3:70:62:5e:10:cd:
f6:39:28:dd:06:5a:19:66:bc:80:a7:9b:b4:0e:03:
68:c5:3f:c5:78:a0:67:fd:78:56:b8:06:2d:55:36:
1f:11:15:3f:2f:35:41:e2:8b:04:70:ea:22:d1:42:
58:3e:5b:54:e2:5a:c2:c2:ed:d2:2a:6f:4d:2d:46:
25:73:d1:30:8b:4b:2b:e9:33:4f:55:bd:53:7d:3d:
f7:f0:47:42:37:d2:7a:5d:1f:b3:09:3b:1c:d0:9e:
78:7e:c1:5f:1f:db:22:49:c0:bc:93:d3:68:f8:47:
41:1a:20:41:8a:2f:ee:ae:94:3d:dc:c3:9e:f2:7b:
46:33:4f:d1:e5:a3:63:15:f1:4b:11:26:9d:2c:a3:
41:ab:6a:cc:06:02:c0:b8:b0:b4:5d:a3:d8:31:53:
e3:8f:a7:20:77:0e:9d:39:5d:90:47:42:49:01:87:
8e:23:3e:a4:df:c9:46:fa:1b:9b:b4:72:32:61:cb:
27:75:5d:30:6c:26:1a:cc:b9:b5:a6:0a:96:b4:70:
04:b1:6e:91:77:9a:56:36:a2:59:d9:1c:3a:66:40:
c6:48:a0:c8:c4:bd:2f:79:96:8d:97:cc:9d:ca:55:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:84:32:12:2D:3C:1D:01:0C:31:A1:27:FF:88:10:61:1F:D2:B4
X509v3 Authority Key Identifier:
keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/A3C0C1708B7111EDADF51C55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.99.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cf:d6:71:2b:f4:af:3c:e9:da:73:94:d1:4c:a2:2f:76:1a:
68:50:91:20:9f:16:da:0d:af:1f:b8:ad:63:eb:d6:4a:89:d1:
f0:4f:cf:17:51:90:d2:9f:bc:18:58:19:8b:9f:c7:b7:d6:68:
82:36:b4:50:8e:e0:26:d4:c1:51:53:d8:20:3a:16:80:c8:22:
f9:56:98:26:d7:61:2c:12:c5:ec:b3:8e:1d:46:cd:ed:b2:c5:
b1:8c:93:ae:8a:6c:86:f3:b3:a9:43:e9:09:14:87:44:f7:61:
37:77:44:fd:d7:99:a9:39:c4:51:aa:0c:69:44:44:f0:58:9c:
61:73:2d:94:8c:6c:74:9e:59:40:fa:29:e4:9d:57:c5:b9:41:
1a:a9:54:98:f5:11:60:f2:25:d4:13:a1:a9:27:23:3f:ed:ee:
59:03:fb:50:39:31:48:22:5d:c9:ea:06:cd:59:92:fe:14:4a:
5f:bb:80:a0:66:a2:cd:ac:cc:e5:90:ac:10:dc:3c:89:66:c3:
37:f8:bd:b9:68:d5:20:7e:1c:78:b4:8e:ef:b5:77:b1:1d:2c:
b2:3e:0b:58:bb:ed:94:2e:09:5c:5f:37:4e:9e:0a:74:f0:62:
17:f7:8e:ec:0a:d7:61:68:94:ba:4d:96:7b:d7:fc:a3:0b:6b:
2d:fe:98:4f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG
RUU0MDZDMTgwHhcNMjMwMTAzMTQxOTMxWhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2I0Mzk3My1lZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hccgsacxSMfn6UelxrKeHZBpg3J6+qjcGJeEM32OSjdBloZZryAp5u0DgNo
xT/FeKBn/XhWuAYtVTYfERU/LzVB4osEcOoi0UJYPltU4lrCwu3SKm9NLUYlc9Ew
i0sr6TNPVb1TfT338EdCN9J6XR+zCTsc0J54fsFfH9siScC8k9No+EdBGiBBii/u
rpQ93MOe8ntGM0/R5aNjFfFLESadLKNBq2rMBgLAuLC0XaPYMVPjj6cgdw6dOV2Q
R0JJAYeOIz6k38lG+hubtHIyYcsndV0wbCYazLm1pgqWtHAEsW6Rd5pWNqJZ2Rw6
ZkDGSKDIxL0veZaNl8ydylUtUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFCdhDIS
LTwdAQwxoSf/iBBhH9K0MB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF
QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjkxOEIvN0UwQ0VFRkFFRUI1MTFFQUFBNEZBRDMyQzRGOUFFMDIvQTNDMEMxNzA4
QjcxMTFFREFERjUxQzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnm2MwDQYJKoZIhvcNAQELBQADggEBAJjP1nEr9K886dpz
lNFMoi92GmhQkSCfFtoNrx+4rWPr1kqJ0fBPzxdRkNKfvBhYGYufx7fWaII2tFCO
4CbUwVFT2CA6FoDIIvlWmCbXYSwSxeyzjh1Gze2yxbGMk66KbIbzs6lD6QkUh0T3
YTd3RP3Xmak5xFGqDGlERPBYnGFzLZSMbHSeWUD6KeSdV8W5QRqpVJj1EWDyJdQT
oaknIz/t7lkD+1A5MUgiXcnqBs1Zkv4USl+7gKBmos2szOWQrBDcPIlmwzf4vblo
1SB+HHi0ju+1d7EdLLI+C1i77ZQuCVxfN06eCnTwYhf3juwK12FolLpNlnvX/KML
ay3+mE8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org