Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/C53DF5EC32E311EEB370407FC4F9AE02.roa
File: C53DF5EC32E311EEB370407FC4F9AE02.roa (raw, json)
Hash identifier: QtNPrNMis0aKLmyUgrG5KCfd20dsdewFCzvroP74VDI=
Subject key identifier: 03:3B:08:09:DD:D1:ED:21:3C:00:26:38:3C:23:BF:D4:51:9A:5E:DA
Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial: 180F
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/C53DF5EC32E311EEB370407FC4F9AE02.roa
Signing time: Fri 04 Aug 2023 16:27:14 +0000
ROA not before: Fri 04 Aug 2023 16:27:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 103.126.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6159 (0x180f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Validity
Not Before: Aug 4 16:27:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64cd26e2-a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:44:c7:cd:08:e2:15:4e:e6:a7:d2:d1:c1:
d3:d4:52:2a:3f:06:ed:8d:42:a7:ab:f3:2e:08:0a:
b2:1c:16:88:d5:a4:05:a3:4e:0a:73:e6:58:aa:5d:
48:12:aa:6a:38:31:89:0e:dc:7c:48:86:b8:01:ef:
d6:62:ba:1c:71:26:16:f2:97:89:d1:fe:74:b1:02:
1c:01:a4:27:32:5d:60:95:37:35:82:52:92:40:e7:
9b:45:1a:1c:bf:2e:a3:19:4d:f4:c8:55:e0:b8:31:
c8:de:ea:cc:6a:44:86:cd:71:41:1b:4f:8c:a1:7c:
05:53:2c:af:c8:23:14:33:6b:2d:74:9d:93:5e:8a:
43:ab:1f:35:73:90:61:22:ea:c0:14:47:64:a6:5e:
2f:2d:0f:98:ea:42:be:77:52:78:35:ef:00:ab:d6:
17:43:74:60:7f:fa:06:3e:d3:6d:ea:98:dc:c8:30:
a5:ca:56:9c:8d:f0:31:dd:60:9c:fe:08:cd:4b:44:
fb:99:1a:ae:45:94:19:05:1d:e3:95:be:ac:d1:99:
9b:0d:6c:e3:21:c2:60:6d:60:fe:21:96:c2:c7:0d:
dd:51:21:dc:5e:c7:0b:0f:dd:52:c7:10:15:b9:39:
e6:34:80:0d:78:0f:6f:01:54:78:af:85:6f:8b:7b:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:08:09:DD:D1:ED:21:3C:00:26:38:3C:23:BF:D4:51:9A:5E:DA
X509v3 Authority Key Identifier:
keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/C53DF5EC32E311EEB370407FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:67:d8:47:0f:0f:b8:21:f7:c6:82:f7:e5:90:32:df:73:19:
1d:5e:20:9a:0a:4d:a6:82:6f:1a:fc:84:4c:61:d8:eb:9f:37:
e8:8c:ee:fe:97:a5:5a:14:82:22:0f:ea:e5:c8:81:a5:82:e9:
f9:dc:48:79:84:ba:52:7e:14:74:ef:ca:05:f2:28:6a:c4:84:
36:b9:11:eb:78:27:56:c0:d5:b2:6e:38:bb:41:00:09:af:d1:
6b:a2:af:23:8d:af:0c:c5:cc:85:20:cf:14:08:b5:5d:38:f1:
03:26:7d:15:7a:6d:04:4f:b4:4d:33:c8:b6:ab:18:2b:52:4e:
7c:50:ec:88:9e:9e:a4:b9:c8:d4:60:25:cc:30:fa:be:1c:0e:
ed:db:72:28:29:8b:45:38:22:a5:11:dc:1c:fe:aa:81:f2:0a:
06:5c:06:78:5c:46:71:c8:bd:ee:60:79:70:a5:48:e3:c1:a8:
f7:ca:67:fe:90:85:33:73:af:09:36:8e:ef:b1:b6:3a:bb:b0:
50:2c:f2:58:40:91:c5:20:84:0e:21:de:14:b0:fb:9f:c0:97:
e4:e2:c3:b9:6a:b9:5d:a2:21:e3:57:2f:b0:29:5c:2a:d7:ef:
96:b5:fe:0a:35:5a:33:2f:00:99:49:ea:00:06:ef:11:36:96:
1c:bf:5b:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw
QTA0NzNCNDMwHhcNMjMwODA0MTYyNzE0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNkMjZlMi1hMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssdEx80I4hVO5qfS0cHT1FIqPwbtjUKnq/MuCAqyHBaI1aQFo04Kc+ZYql1I
EqpqODGJDtx8SIa4Ae/WYroccSYW8peJ0f50sQIcAaQnMl1glTc1glKSQOebRRoc
vy6jGU30yFXguDHI3urMakSGzXFBG0+MoXwFUyyvyCMUM2stdJ2TXopDqx81c5Bh
IurAFEdkpl4vLQ+Y6kK+d1J4Ne8Aq9YXQ3Rgf/oGPtNt6pjcyDClylacjfAx3WCc
/gjNS0T7mRquRZQZBR3jlb6s0ZmbDWzjIcJgbWD+IZbCxw3dUSHcXscLD91SxxAV
uTnmNIANeA9vAVR4r4Vvi3uT6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAM7CAnd
0e0hPAAmODwjv9RRml7aMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD
QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZCN0YvMUJBRTI2NTQ3Q0M5MTFFNzkyQ0JBOTQ0QzRGOUFFMDIvQzUzREY1RUMz
MkUzMTFFRUIzNzA0MDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnfgQwDQYJKoZIhvcNAQELBQADggEBAFtn2EcPD7gh98aC
9+WQMt9zGR1eIJoKTaaCbxr8hExh2OufN+iM7v6XpVoUgiIP6uXIgaWC6fncSHmE
ulJ+FHTvygXyKGrEhDa5Eet4J1bA1bJuOLtBAAmv0WuiryONrwzFzIUgzxQItV04
8QMmfRV6bQRPtE0zyLarGCtSTnxQ7IienqS5yNRgJcww+r4cDu3bcigpi0U4IqUR
3Bz+qoHyCgZcBnhcRnHIve5geXClSOPBqPfKZ/6QhTNzrwk2ju+xtjq7sFAs8lhA
kcUghA4h3hSw+5/Al+Tiw7lquV2iIeNXL7ApXCrX75a1/go1WjMvAJlJ6gAG7xE2
lhy/W80=
-----END CERTIFICATE-----
Generated at Fri Aug 4 18:09:53 2023 by rpki-client on console-ams.rpki-client.org