Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/351AB804E5E711ED912DC842C4F9AE02.roa
File: 351AB804E5E711ED912DC842C4F9AE02.roa (raw, json)
Hash identifier: cdVEOsbqreIaAo7p97FzT3xE809qfOP5YSZWr/MU/60=
Subject key identifier: 76:28:4A:4E:FC:81:A2:10:71:50:D0:50:8D:6C:6F:DE:16:40:3F:88
Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial: 1C
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/351AB804E5E711ED912DC842C4F9AE02.roa
Signing time: Fri 28 Apr 2023 17:07:51 +0000
ROA not before: Fri 28 Apr 2023 17:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151051
IP address blocks: 103.121.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 07:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Validity
Not Before: Apr 28 17:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644bfd67-b7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:20:b0:8d:f9:81:44:8c:41:a5:2c:0f:92:
21:61:f1:0c:47:cb:91:40:37:70:3e:e3:6e:72:6b:
aa:32:f6:87:21:23:73:ac:76:c7:50:13:0a:2a:49:
e7:7a:64:a7:25:3a:07:dc:51:21:35:70:05:d5:68:
ca:43:6f:a2:81:af:f4:99:d5:0f:ae:69:04:11:d2:
15:33:64:ab:8a:8b:d7:9c:99:b2:dc:09:f4:bd:d7:
9a:49:5b:b9:3c:da:5d:f8:03:6d:80:3d:d7:05:b4:
a5:38:08:a8:94:17:df:b6:6c:33:45:15:57:94:8a:
08:00:77:d8:ff:35:d8:e3:15:e6:54:2e:d3:3d:fe:
46:93:e2:3f:e0:4a:29:ac:a6:26:82:04:3e:ed:09:
48:59:31:52:ce:22:7e:0a:df:48:09:bc:32:46:15:
9d:ca:cc:96:af:10:52:44:27:70:b6:27:5a:4a:7e:
f4:e9:b1:a6:9e:e3:6c:fc:4c:2a:38:a7:83:88:f9:
da:ee:1c:90:15:bd:13:24:2f:60:2a:2f:f3:11:a9:
df:10:d7:37:ec:d1:a3:1f:b2:a1:a6:fb:d2:74:a9:
f2:04:f0:93:84:44:0d:d9:bd:bc:0b:f2:c1:b2:dc:
0d:e4:18:69:c3:d2:33:cf:ed:a5:f8:51:92:54:61:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:4A:4E:FC:81:A2:10:71:50:D0:50:8D:6C:6F:DE:16:40:3F:88
X509v3 Authority Key Identifier:
keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/351AB804E5E711ED912DC842C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.179.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:64:6e:a1:8d:36:05:12:a7:39:fa:f3:83:08:d5:76:a5:44:
37:67:fa:c8:9e:bf:11:c9:20:f2:61:fb:b3:db:46:ff:8f:57:
b5:61:cf:af:26:31:42:f4:3f:86:3f:e3:5c:b9:ab:d0:38:0f:
02:b5:f9:50:9c:12:31:06:13:aa:1e:46:57:57:23:f6:52:d6:
96:4c:35:ab:05:d6:b1:13:8b:87:e4:bf:01:4d:43:05:a9:65:
45:3b:88:c3:cd:96:f2:e3:5c:51:f4:ac:3f:0c:54:4a:dc:76:
ce:ab:be:7a:73:78:ab:18:1a:22:38:e9:d8:72:c2:9a:31:12:
b8:c4:14:da:f7:39:49:25:9e:96:14:d0:6a:92:2d:09:87:50:
3a:95:1d:c3:86:e4:3d:bb:ee:c0:57:6b:7f:ad:e0:79:13:8e:
4c:38:56:be:dc:ea:a2:d1:8a:a6:bc:1d:1c:a9:d9:e8:8d:d1:
86:f8:56:a9:46:90:32:06:15:9c:42:98:10:5c:4b:a7:f0:c2:
4c:2b:1e:63:ac:6c:20:fb:2b:dd:7a:31:e5:26:b1:d9:5b:dd:
c4:21:b3:32:1d:b2:92:84:06:cc:55:83:5f:bd:58:19:0f:4e:
97:f9:27:f4:23:4e:95:1f:3e:f0:08:39:bb:ef:b0:73:32:ec:
c8:ee:ca:c8
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RDFENTExMC8GA1UEBRMoQzU0NTI1RTk3MDVCRDY5RDYxNDI0REJFRTdCMDQ5M0Y1
RkQ2RjBBNDAeFw0yMzA0MjgxNzA3NTFaFw0yNDA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NGJmZDY3LWI3ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdTyCwjfmBRIxBpSwPkiFh8QxHy5FAN3A+425ya6oy9ochI3OsdsdQEwoqSed6
ZKclOgfcUSE1cAXVaMpDb6KBr/SZ1Q+uaQQR0hUzZKuKi9ecmbLcCfS915pJW7k8
2l34A22APdcFtKU4CKiUF9+2bDNFFVeUiggAd9j/NdjjFeZULtM9/kaT4j/gSims
piaCBD7tCUhZMVLOIn4K30gJvDJGFZ3KzJavEFJEJ3C2J1pKfvTpsaae42z8TCo4
p4OI+druHJAVvRMkL2AqL/MRqd8Q1zfs0aMfsqGm+9J0qfIE8JOERA3ZvbwL8sGy
3A3kGGnD0jPP7aX4UZJUYfOLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdihKTvyB
ohBxUNBQjWxv3hZAP4gwHwYDVR0jBBgwFoAUxUUl6XBb1p1hQk2+57BJP1/W8KQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEMUQ1LzM0MzM2MUVFQ0M4
QzExRURBNEMxQTE0M0M0RjlBRTAyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhL
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveFVVbDZYQmIxcDFoUWsyLTU3QkpQMV9XOEtRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi8zNTFBQjgwNEU1
RTcxMUVEOTEyREM4NDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGd5szANBgkqhkiG9w0BAQsFAAOCAQEA12RuoY02BRKnOfrz
gwjVdqVEN2f6yJ6/Eckg8mH7s9tG/49XtWHPryYxQvQ/hj/jXLmr0DgPArX5UJwS
MQYTqh5GV1cj9lLWlkw1qwXWsROLh+S/AU1DBallRTuIw82W8uNcUfSsPwxUStx2
zqu+enN4qxgaIjjp2HLCmjESuMQU2vc5SSWelhTQapItCYdQOpUdw4bkPbvuwFdr
f63geROOTDhWvtzqotGKprwdHKnZ6I3RhvhWqUaQMgYVnEKYEFxLp/DCTCseY6xs
IPsr3Xox5Sax2VvdxCGzMh2ykoQGzFWDX71YGQ9Ol/kn9CNOlR8+8Ag5u++wczLs
yO7KyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org