Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/2B2EF1E0417511EE96ADB173C4F9AE02.roa
File: 2B2EF1E0417511EE96ADB173C4F9AE02.roa (raw, json)
Hash identifier: Nt+hbmGbeHeu/i9vFUg8ATQWubfrmApV+IMRbQ8eHJ0=
Subject key identifier: F5:EC:76:8F:0F:8D:CC:73:DD:A5:5D:77:CC:E2:C0:E2:D5:28:1C:11
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 093A
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/2B2EF1E0417511EE96ADB173C4F9AE02.roa
Signing time: Fri 28 Jun 2024 21:24:49 +0000
ROA not before: Fri 28 Jun 2024 21:24:49 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 131340
IP address blocks: 45.250.229.0/24 maxlen: 24
103.202.220.0/24 maxlen: 24
103.209.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 04:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Jun 28 21:24:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=667f2a20-816b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:06:36:dd:fc:b5:66:99:16:fa:1f:c1:a9:
c3:ed:a7:f2:0c:d1:3b:39:8d:eb:7b:d4:f5:fc:62:
d0:5b:d2:12:e3:c1:50:76:d6:5d:58:f6:7a:0a:d9:
5a:4a:b7:36:33:bb:05:c4:32:d5:e7:43:d4:36:7a:
ab:f6:20:52:48:c9:d7:25:2f:77:82:60:48:e5:90:
71:b9:11:9e:2b:f4:b0:92:20:49:29:73:c2:24:a5:
5c:94:b4:14:ea:54:af:0d:aa:70:82:9d:99:86:3f:
04:e4:c3:77:7b:5e:20:d0:e8:cc:1a:bb:1e:c1:8e:
c7:97:4e:e5:8f:ec:93:09:a5:69:cf:8a:8c:7f:4a:
5f:da:95:56:b4:f5:55:70:ca:82:62:fd:18:d2:39:
8c:ff:56:34:5a:72:a8:8e:ed:56:9d:4d:ad:74:73:
08:68:07:b2:e7:33:d9:ec:93:70:98:fe:6a:49:36:
2c:0f:e1:c5:55:8d:c6:cf:df:64:e7:92:52:9c:0f:
ca:37:24:1a:91:97:a3:d5:bd:3f:5b:d1:fa:56:62:
37:a1:f7:1a:79:ae:6e:e9:1d:d6:f1:93:2d:4b:0a:
bf:17:01:e3:03:5b:a1:08:0c:e6:b7:71:b3:5f:32:
63:3f:5b:07:6c:98:72:22:6e:b1:63:8a:a4:3d:46:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:76:8F:0F:8D:CC:73:DD:A5:5D:77:CC:E2:C0:E2:D5:28:1C:11
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/2B2EF1E0417511EE96ADB173C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.229.0/24
103.202.220.0/24
103.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
77:aa:45:ba:44:a4:9d:54:8f:96:0c:df:14:2b:12:0f:58:3b:
96:83:7d:73:ed:40:fc:54:eb:37:d8:47:b4:07:d0:ae:8b:4f:
17:90:f5:3d:72:0b:9f:05:ed:2d:79:1f:df:b0:91:e1:40:3b:
a5:d7:b0:d6:38:e6:53:d5:97:29:a6:0c:3c:89:d2:89:7a:f6:
e6:ef:33:09:0d:9e:5a:60:fb:2e:f1:cb:9c:69:c1:e3:9c:a6:
d8:c1:7e:d0:52:3f:7d:f2:0f:4f:06:b5:e5:39:af:f0:0b:ec:
ac:e3:f3:02:fc:83:43:98:93:6f:bc:0b:8c:2e:c7:09:24:1b:
43:3c:34:1e:fa:e0:fa:34:86:74:a2:ce:f3:8f:6a:e7:fe:fc:
7c:8e:6b:94:d4:8c:2e:49:9c:10:1f:b3:62:81:8d:b8:5a:c1:
ef:c3:00:71:82:c1:a0:cd:21:13:53:47:8f:73:68:c2:5c:71:
9f:0d:f3:9e:cc:9d:06:30:92:a2:91:37:9d:5e:68:af:d3:a1:
67:1a:20:f5:1c:61:c0:dd:ba:85:7b:71:7d:93:cf:d2:a8:2a:
cf:fc:04:f0:98:70:32:6e:8f:cb:e3:ff:6b:5c:6c:81:0f:5f:
43:07:fc:95:42:79:51:ec:25:4e:b6:4d:bd:d9:74:ec:10:2e:
bd:da:63:32
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF
NjIwRUY5RjQwHhcNMjQwNjI4MjEyNDQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdmMmEyMC04MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvO0GNt38tWaZFvofwanD7afyDNE7OY3re9T1/GLQW9IS48FQdtZdWPZ6Ctla
Src2M7sFxDLV50PUNnqr9iBSSMnXJS93gmBI5ZBxuRGeK/SwkiBJKXPCJKVclLQU
6lSvDapwgp2Zhj8E5MN3e14g0OjMGrsewY7Hl07lj+yTCaVpz4qMf0pf2pVWtPVV
cMqCYv0Y0jmM/1Y0WnKoju1WnU2tdHMIaAey5zPZ7JNwmP5qSTYsD+HFVY3Gz99k
55JSnA/KNyQakZej1b0/W9H6VmI3ofcaea5u6R3W8ZMtSwq/FwHjA1uhCAzmt3Gz
XzJjP1sHbJhyIm6xY4qkPUbfYQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPXsdo8P
jcxz3aVdd8ziwOLVKBwRMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF
OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDY5NDQvNDNCRDFDNkU4RTk1MTFFQUE5RDczQTJFQzRGOUFFMDIvMkIyRUYxRTA0
MTc1MTFFRTk2QURCMTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAAt+uUDBABnytwDBABn0cYwDQYJKoZIhvcNAQELBQADggEB
AHeqRbpEpJ1Uj5YM3xQrEg9YO5aDfXPtQPxU6zfYR7QH0K6LTxeQ9T1yC58F7S15
H9+wkeFAO6XXsNY45lPVlymmDDyJ0ol69ubvMwkNnlpg+y7xy5xpweOcptjBftBS
P33yD08GteU5r/AL7Kzj8wL8g0OYk2+8C4wuxwkkG0M8NB764Po0hnSizvOPauf+
/HyOa5TUjC5JnBAfs2KBjbhawe/DAHGCwaDNIRNTR49zaMJccZ8N857MnQYwkqKR
N51eaK/ToWcaIPUcYcDduoV7cX2Tz9KoKs/8BPCYcDJuj8vj/2tcbIEPX0MH/JVC
eVHsJU62Tb3ZdOwQLr3aYzI=
-----END CERTIFICATE-----
Generated at Tue Aug 6 07:25:32 2024 by rpki-client on console-ams.rpki-client.org