Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/7C7E05741B4911EEA4356F0BC4F9AE02.roa
File: 7C7E05741B4911EEA4356F0BC4F9AE02.roa (raw, json)
Hash identifier: AlkRymHj0edSCo0W2zeLQeDex6VcqsUWkbfjQ/KM85M=
Subject key identifier: 71:90:AA:D8:0D:D7:87:ED:2E:7A:CE:71:C1:A3:4C:5A:3D:44:88:B8
Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5
Certificate serial: 05
Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/7C7E05741B4911EEA4356F0BC4F9AE02.roa
Signing time: Thu 06 Jul 2023 04:33:23 +0000
ROA not before: Thu 06 Jul 2023 04:33:23 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150683
IP address blocks: 103.229.252.0/23 maxlen: 23
103.229.252.0/24 maxlen: 24
103.229.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Sep 2023 07:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5
Validity
Not Before: Jul 6 04:33:23 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a64413-ce96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:85:22:ab:bc:77:3c:2f:ee:81:94:aa:dc:
33:7e:c9:cc:6b:fe:26:58:76:6b:1b:35:55:3a:4a:
70:64:14:e4:20:e9:e2:90:ff:7e:ce:cf:60:7c:15:
da:ca:0a:eb:14:fc:99:ee:2e:b1:f4:90:ee:25:84:
8a:4e:28:d6:70:48:ef:ab:3f:3c:ed:6a:ed:16:c9:
fa:b2:35:48:17:05:73:94:f8:ee:43:d2:9b:8a:c2:
39:00:c8:6e:54:a6:8b:1c:7d:48:01:cc:9c:2a:31:
96:eb:9f:bf:9d:84:37:4c:55:82:3e:4f:ac:05:0b:
9f:e1:6f:4d:86:db:32:a0:9f:2b:b7:99:59:cc:a6:
b0:91:07:94:bc:bf:26:4d:1f:8d:64:88:94:9f:a2:
d8:e7:83:bb:1e:42:1b:98:12:55:60:35:69:e0:7a:
20:58:56:30:91:9f:05:1a:13:3d:d7:a9:b4:84:87:
1a:51:a9:31:cf:3c:fe:a6:bd:84:a5:92:dc:67:df:
7a:c3:4f:de:b1:2b:85:a8:06:ff:11:a1:bc:ba:7d:
01:78:40:8b:2c:1e:6b:db:d8:94:ef:a7:46:ef:ec:
9f:35:4a:c9:85:ea:91:b7:45:f2:fb:b2:e6:eb:91:
ed:62:3a:17:3c:c7:91:db:6b:53:e0:6c:62:54:3d:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:AA:D8:0D:D7:87:ED:2E:7A:CE:71:C1:A3:4C:5A:3D:44:88:B8
X509v3 Authority Key Identifier:
keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/7C7E05741B4911EEA4356F0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.252.0/23
Signature Algorithm: sha256WithRSAEncryption
42:07:81:57:8d:63:17:a0:63:1d:28:9c:7d:41:7d:aa:69:7d:
f2:0c:34:36:16:16:7c:0c:34:53:b1:fb:d0:71:e0:f7:01:5f:
1f:76:ff:22:4c:3e:22:15:b4:13:23:8d:d4:c7:39:27:2b:b4:
b7:da:fc:e3:13:4e:ed:2a:16:f2:3a:43:62:07:58:02:3c:0e:
bd:56:20:84:f2:b8:b0:a9:28:4a:50:47:94:4f:e7:7c:0c:91:
f6:e3:d3:55:62:86:f5:61:e3:be:86:e4:43:31:be:60:2b:e6:
b9:56:9f:4e:ba:18:e4:10:c7:88:25:3c:67:d7:e2:8c:40:cc:
f9:64:ba:b8:b0:b4:3c:85:69:45:74:c4:56:50:2a:09:f9:86:
1a:53:76:9e:90:e8:df:d4:d3:2f:c7:59:1c:af:5a:57:1b:4e:
9a:31:87:ea:a8:23:7b:cc:4b:22:53:38:15:28:a8:21:e8:6d:
7d:e9:3e:af:05:8d:56:f3:61:b3:ad:9d:82:0e:ef:af:ed:80:
bc:8b:15:77:45:7b:03:35:ae:48:3e:e5:3f:61:8f:91:e0:9e:
24:07:63:ca:94:9b:91:1f:93:f0:a0:a6:a9:f4:9d:15:8e:39:
6c:2b:02:21:d8:dc:25:34:1b:cb:d0:88:12:9e:cd:91:ab:56:
88:09:a7:29
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Q0I3RDExMC8GA1UEBRMoOTQwNENFREY3NEI5NDk3NDUxRUYzMkJCN0ExMkJFRDcx
RDJDMjNFNTAeFw0yMzA3MDYwNDMzMjNaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YTY0NDEzLWNlOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD74Uiq7x3PC/ugZSq3DN+ycxr/iZYdmsbNVU6SnBkFOQg6eKQ/37Oz2B8FdrK
CusU/JnuLrH0kO4lhIpOKNZwSO+rPzztau0WyfqyNUgXBXOU+O5D0puKwjkAyG5U
poscfUgBzJwqMZbrn7+dhDdMVYI+T6wFC5/hb02G2zKgnyu3mVnMprCRB5S8vyZN
H41kiJSfotjng7seQhuYElVgNWngeiBYVjCRnwUaEz3XqbSEhxpRqTHPPP6mvYSl
ktxn33rDT96xK4WoBv8Roby6fQF4QIssHmvb2JTvp0bv7J81SsmF6pG3RfL7subr
ke1iOhc8x5Hba1PgbGJUPRahAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUcZCq2A3X
h+0ues5xwaNMWj1EiLgwHwYDVR0jBBgwFoAUlATO33S5SXRR7zK7ehK+1x0sI+Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDQjdEL0IyQjNENzdDMUI0
NDExRUVBMzU3OEUyOUM0RjlBRTAyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0kt
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEFUTzMzUzVTWFJSN3pLN2VoSy0xeDBzSS1VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0I3RC9CMkIzRDc3QzFCNDQxMUVFQTM1NzhFMjlDNEY5QUUwMi83QzdFMDU3NDFC
NDkxMUVFQTQzNTZGMEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWfl/DANBgkqhkiG9w0BAQsFAAOCAQEAQgeBV41jF6BjHSic
fUF9qml98gw0NhYWfAw0U7H70HHg9wFfH3b/Ikw+IhW0EyON1Mc5Jyu0t9r84xNO
7SoW8jpDYgdYAjwOvVYghPK4sKkoSlBHlE/nfAyR9uPTVWKG9WHjvobkQzG+YCvm
uVafTroY5BDHiCU8Z9fijEDM+WS6uLC0PIVpRXTEVlAqCfmGGlN2npDo39TTL8dZ
HK9aVxtOmjGH6qgje8xLIlM4FSioIehtfek+rwWNVvNhs62dgg7vr+2AvIsVd0V7
AzWuSD7lP2GPkeCeJAdjypSbkR+T8KCmqfSdFY45bCsCIdjcJTQby9CIEp7NkatW
iAmnKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org