Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/CC5A05A8DAAB11EE8337D81AC4F9AE02.roa
File: CC5A05A8DAAB11EE8337D81AC4F9AE02.roa (raw, json)
Hash identifier: 0PtkKo0wQtoyZWhSydqj4FMf4bCbGiom+gaZuPJCRM4=
Subject key identifier: 9F:63:A0:A9:AF:D7:38:05:FA:22:7F:27:85:3C:B2:C1:FD:D8:75:B9
Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Certificate serial: 92
Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/CC5A05A8DAAB11EE8337D81AC4F9AE02.roa
Signing time: Tue 05 Mar 2024 04:49:50 +0000
ROA not before: Tue 05 Mar 2024 04:49:50 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 149768
IP address blocks: 103.134.216.0/24 maxlen: 24
103.134.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 06:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Validity
Not Before: Mar 5 04:49:50 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65e6a46e-5aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:39:70:b6:79:75:89:78:09:81:6c:f4:9e:
2f:67:35:0b:ae:ff:e1:13:fd:24:d7:09:80:d8:eb:
85:cc:b0:3a:70:40:93:d3:8d:f0:be:47:a5:32:1b:
7a:18:ab:b1:07:bb:7e:b5:87:e5:ac:19:68:55:7d:
57:74:2f:dc:e8:29:85:14:4e:62:5f:46:a3:1c:d9:
d8:b8:17:f5:db:a9:c4:af:34:0d:97:89:02:93:8a:
63:b1:8e:cd:4c:7d:f8:19:51:48:3a:e8:9b:1a:08:
f1:7b:b0:4a:df:c8:56:83:06:23:52:fc:a3:a5:73:
f2:be:bf:54:77:b2:7b:e0:36:20:19:a1:17:65:a7:
5c:d6:16:4c:33:2b:2d:9d:d4:cb:a9:b7:c7:c3:b4:
a6:2b:df:3a:da:c9:14:08:1a:36:c5:12:32:32:f7:
de:91:94:62:a8:49:82:24:7e:5e:73:e6:f3:a7:86:
8c:94:5f:4a:73:29:2b:c5:33:65:2a:d4:fa:7c:d0:
32:12:a7:0d:ca:5d:43:3d:63:a3:e7:53:11:2a:bc:
61:d2:fc:d2:42:d3:c1:3a:9c:0a:9d:5c:01:49:53:
23:fb:61:4d:0e:09:52:36:4c:f7:f9:f1:c7:4b:d4:
9c:38:7c:2b:37:42:5e:55:ec:7e:18:7a:a3:d7:49:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:A0:A9:AF:D7:38:05:FA:22:7F:27:85:3C:B2:C1:FD:D8:75:B9
X509v3 Authority Key Identifier:
keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/CC5A05A8DAAB11EE8337D81AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.216.0/24
103.134.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:09:44:ac:44:0e:f4:bc:ce:1e:04:c1:28:5e:c6:64:cc:61:
54:01:28:d0:6f:d1:47:a2:27:dc:15:8c:b6:ee:09:0f:cb:13:
50:2a:e4:34:77:32:ae:e0:8b:ac:1e:11:ee:ee:16:03:25:c8:
c3:d7:31:55:d9:55:16:2d:35:8d:6a:7b:a5:94:56:ca:d1:32:
89:e7:e5:75:ee:b6:10:59:74:7e:af:2b:13:9b:f1:38:7c:65:
2c:22:23:8c:c5:86:43:00:e1:ea:d3:bb:cc:c8:e9:24:e8:6c:
0f:c7:09:6f:73:60:36:8c:a5:21:56:f3:67:df:85:6f:d2:08:
58:70:b9:8d:f9:b0:98:17:cb:97:c0:05:da:48:15:fb:3d:b6:
b0:d2:5f:8e:22:de:08:f6:39:6f:39:da:6e:b9:62:27:4c:ec:
83:fc:ad:02:30:4b:93:7b:f5:bc:56:98:a5:2d:3d:72:ef:ae:
4f:3a:27:f8:1f:77:da:ee:17:0a:0d:8f:2e:9a:0e:26:b1:31:
72:8d:1c:a7:59:83:fa:6c:e2:a6:fb:34:33:7f:7c:56:4b:2a:
62:25:05:6d:ba:6d:83:e0:f9:e6:1f:9f:0d:be:e0:d2:48:84:
74:03:a5:f3:68:2d:83:d4:78:dc:4c:63:53:da:02:9b:a0:fc:
4d:dd:08:91
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF
NkNDQkEyMkYwHhcNMjQwMzA1MDQ0OTUwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU2YTQ2ZS01YWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIY5cLZ5dYl4CYFs9J4vZzULrv/hE/0k1wmA2OuFzLA6cECT043wvkelMht6
GKuxB7t+tYflrBloVX1XdC/c6CmFFE5iX0ajHNnYuBf126nErzQNl4kCk4pjsY7N
TH34GVFIOuibGgjxe7BK38hWgwYjUvyjpXPyvr9Ud7J74DYgGaEXZadc1hZMMyst
ndTLqbfHw7SmK9862skUCBo2xRIyMvfekZRiqEmCJH5ec+bzp4aMlF9KcykrxTNl
KtT6fNAyEqcNyl1DPWOj51MRKrxh0vzSQtPBOpwKnVwBSVMj+2FNDglSNkz3+fHH
S9ScOHwrN0JeVex+GHqj10nu4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ9joKmv
1zgF+iJ/J4U8ssH92HW5MB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0
MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjFCNEMvMjk3OTkxNTIwNDMwMTFFRUIzNzMyQzVCQzRGOUFFMDIvQ0M1QTA1QThE
QUFCMTFFRTgzMzdEODFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnhtgDBABnhtowDQYJKoZIhvcNAQELBQADggEBAMEJRKxE
DvS8zh4EwShexmTMYVQBKNBv0UeiJ9wVjLbuCQ/LE1Aq5DR3Mq7gi6weEe7uFgMl
yMPXMVXZVRYtNY1qe6WUVsrRMonn5XXuthBZdH6vKxOb8Th8ZSwiI4zFhkMA4erT
u8zI6STobA/HCW9zYDaMpSFW82ffhW/SCFhwuY35sJgXy5fABdpIFfs9trDSX44i
3gj2OW852m65YidM7IP8rQIwS5N79bxWmKUtPXLvrk86J/gfd9ruFwoNjy6aDiax
MXKNHKdZg/ps4qb7NDN/fFZLKmIlBW26bYPg+eYfnw2+4NJIhHQDpfNoLYPUeNxM
Y1PaApug/E3dCJE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org