Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/6EA6BBA61BEB11EE952A5538C4F9AE02.roa
File: 6EA6BBA61BEB11EE952A5538C4F9AE02.roa (raw, json)
Hash identifier: 2AVtbwfwgVy8eL+oKsRRRNg86F0nBUHXKlSaYoZXeTE=
Subject key identifier: 3D:F2:82:74:E7:72:42:39:FA:3F:8A:0B:5C:6B:F1:03:DC:DE:1C:78
Certificate issuer: /CN=A9133B40/serialNumber=3CACDCFE27E8908DC47F33EF914AE3C508BA47B3
Certificate serial: 03
Authority key identifier: 3C:AC:DC:FE:27:E8:90:8D:C4:7F:33:EF:91:4A:E3:C5:08:BA:47:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKzc_ifokI3EfzPvkUrjxQi6R7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/6EA6BBA61BEB11EE952A5538C4F9AE02.roa
Signing time: Thu 06 Jul 2023 10:54:08 +0000
ROA not before: Thu 06 Jul 2023 10:54:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151078
IP address blocks: 103.130.188.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B40/serialNumber=3CACDCFE27E8908DC47F33EF914AE3C508BA47B3
Validity
Not Before: Jul 6 10:54:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a69d50-51e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:c4:fa:51:ec:9b:a9:a4:43:e2:c9:0f:35:
58:93:97:e1:65:6c:89:9a:b3:5c:0b:14:6a:4c:10:
fb:9d:97:52:b5:c8:13:44:91:a9:37:f6:24:d6:43:
43:e7:86:8a:9b:6d:3f:68:5c:2e:4a:0b:b3:5f:3c:
76:8c:4a:e1:11:94:ac:fd:03:d1:a7:9a:ee:59:4e:
c6:12:c0:83:7e:28:ee:b9:88:5a:65:bd:be:10:69:
02:fb:3a:26:e8:62:26:71:5f:c1:07:61:9b:86:be:
a9:cc:3a:71:07:e1:04:4d:76:81:c0:dd:cc:25:a7:
b1:0a:1e:ce:03:1b:ca:46:69:3c:a1:2f:b2:17:af:
7b:1e:a2:76:7e:d7:66:25:92:d9:1f:2c:88:3f:95:
1d:ac:f5:8c:f7:9b:aa:05:05:dc:77:7c:fe:2f:ed:
cb:20:99:8e:d1:8f:4b:68:2b:6f:37:94:47:84:d7:
e2:d8:df:d8:f7:a4:45:93:dd:1c:3d:9f:86:35:9b:
7c:0d:65:a2:8c:b1:16:3b:a1:56:c5:92:84:3d:82:
cf:e8:0f:e7:2b:a8:33:fc:a1:47:d4:0d:5b:39:0f:
50:b1:71:50:20:37:96:bb:12:40:6b:0e:ab:ae:d2:
5f:78:d6:71:c6:6d:9d:13:59:a8:9d:c7:f6:d3:46:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:82:74:E7:72:42:39:FA:3F:8A:0B:5C:6B:F1:03:DC:DE:1C:78
X509v3 Authority Key Identifier:
keyid:3C:AC:DC:FE:27:E8:90:8D:C4:7F:33:EF:91:4A:E3:C5:08:BA:47:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/PKzc_ifokI3EfzPvkUrjxQi6R7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKzc_ifokI3EfzPvkUrjxQi6R7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B40/F01CA9C61B2211EEB79B1E1BC4F9AE02/6EA6BBA61BEB11EE952A5538C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.188.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:d9:ba:97:5f:1b:b1:4a:a0:6e:c3:1c:6e:e5:84:e1:80:49:
97:a2:9f:a7:5a:7c:66:c5:43:0e:56:ee:35:8c:a9:11:18:81:
7b:00:79:eb:b7:c9:58:fd:da:19:ef:81:15:ed:5f:db:5d:65:
8e:91:19:e2:73:0e:17:75:ce:1c:14:07:c2:53:1d:df:fc:85:
fe:ef:86:cb:3a:f2:51:e6:28:ce:36:10:92:c2:2d:d0:e3:8d:
52:6b:7e:8c:f1:a7:5b:f8:cc:62:4b:ad:0b:4c:a6:97:37:f4:
36:34:ee:90:08:d1:16:b7:19:6f:85:dc:82:b5:48:89:e0:37:
56:a8:1d:0e:83:e7:fc:d7:3b:5b:cc:94:ef:65:e4:1e:19:21:
95:36:d4:f3:3a:0f:84:6d:6f:be:15:0d:5d:47:4a:ec:2e:04:
a9:c6:ab:bc:c7:20:87:93:64:fa:80:92:e8:99:ba:34:c9:9e:
16:da:11:e5:12:ad:69:c8:e6:2b:1e:f8:3d:f2:14:29:4d:17:
f2:ff:b4:e6:b8:21:b8:cc:0a:dc:63:23:9d:85:26:be:c9:f1:
c7:da:14:35:0a:33:3d:3e:b3:c6:ac:8e:f6:bf:bd:88:0c:46:
14:0c:83:61:04:5f:5f:ff:0d:e0:07:13:1c:44:2c:1c:b5:bf:
1b:64:e2:88
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
M0I0MDExMC8GA1UEBRMoM0NBQ0RDRkUyN0U4OTA4REM0N0YzM0VGOTE0QUUzQzUw
OEJBNDdCMzAeFw0yMzA3MDYxMDU0MDhaFw0yNDA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YTY5ZDUwLTUxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiZMT6UeybqaRD4skPNViTl+FlbImas1wLFGpMEPudl1K1yBNEkak39iTWQ0Pn
hoqbbT9oXC5KC7NfPHaMSuERlKz9A9Gnmu5ZTsYSwIN+KO65iFplvb4QaQL7Oibo
YiZxX8EHYZuGvqnMOnEH4QRNdoHA3cwlp7EKHs4DG8pGaTyhL7IXr3seonZ+12Yl
ktkfLIg/lR2s9Yz3m6oFBdx3fP4v7csgmY7Rj0toK283lEeE1+LY39j3pEWT3Rw9
n4Y1m3wNZaKMsRY7oVbFkoQ9gs/oD+crqDP8oUfUDVs5D1CxcVAgN5a7EkBrDquu
0l941nHGbZ0TWaidx/bTRuLVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUPfKCdOdy
Qjn6P4oLXGvxA9zeHHgwHwYDVR0jBBgwFoAUPKzc/ifokI3EfzPvkUrjxQi6R7Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQjQwL0YwMUNBOUM2MUIy
MjExRUVCNzlCMUUxQkM0RjlBRTAyL1BLemNfaWZva0kzRWZ6UHZrVXJqeFFpNlI3
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUEt6Y19pZm9rSTNFZnpQdmtVcmp4UWk2UjdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0I0MC9GMDFDQTlDNjFCMjIxMUVFQjc5QjFFMUJDNEY5QUUwMi82RUE2QkJBNjFC
RUIxMUVFOTUyQTU1MzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeCvDANBgkqhkiG9w0BAQsFAAOCAQEAj9m6l18bsUqgbsMc
buWE4YBJl6Kfp1p8ZsVDDlbuNYypERiBewB567fJWP3aGe+BFe1f211ljpEZ4nMO
F3XOHBQHwlMd3/yF/u+GyzryUeYozjYQksIt0OONUmt+jPGnW/jMYkutC0ymlzf0
NjTukAjRFrcZb4XcgrVIieA3VqgdDoPn/Nc7W8yU72XkHhkhlTbU8zoPhG1vvhUN
XUdK7C4EqcarvMcgh5Nk+oCS6Jm6NMmeFtoR5RKtacjmKx74PfIUKU0X8v+05rgh
uMwK3GMjnYUmvsnxx9oUNQozPT6zxqyO9r+9iAxGFAyDYQRfX/8N4AcTHEQsHLW/
G2TiiA==
-----END CERTIFICATE-----
Generated at Tue Sep 12 06:11:25 2023 by rpki-client on console-ams.rpki-client.org