Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/5BCD7FF42F1B11EE81FCC076C4F9AE02.roa
File: 5BCD7FF42F1B11EE81FCC076C4F9AE02.roa (raw, json)
Hash identifier: wxeyguVObTHUBYTUXz7Bi/M/Lao4ImpHgGbYYEa1f1U=
Subject key identifier: BB:FF:7C:B2:22:70:9A:71:21:4B:BA:D8:55:01:1D:0D:97:DD:91:40
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 062D
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/5BCD7FF42F1B11EE81FCC076C4F9AE02.roa
Signing time: Sun 30 Jul 2023 20:55:05 +0000
ROA not before: Sun 30 Jul 2023 20:55:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 41378
IP address blocks: 103.54.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Jul 30 20:55:05 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64c6ce28-6dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:ef:b6:9a:da:ef:f4:d3:2c:cc:c3:48:4f:
f8:a3:8f:f6:e4:9d:fa:0a:43:ea:5d:d2:35:54:69:
ba:f1:99:d3:91:01:de:20:15:2a:3d:d5:42:92:57:
b9:f3:25:cc:ce:85:db:e2:41:9f:13:43:36:1c:1d:
cf:28:bc:7c:77:17:58:4f:12:83:de:f8:61:43:f4:
c8:97:69:c6:aa:f3:14:d4:ce:47:f4:0f:14:36:c0:
23:59:7e:28:5f:18:fb:0b:ed:2d:b9:dc:f1:ab:80:
82:92:6b:c6:82:91:c7:d8:d0:43:f9:11:6b:ae:7a:
02:1e:4e:f4:b4:eb:a7:95:99:d1:ce:77:4e:46:8c:
c2:97:22:00:2c:fe:c5:fb:c8:9c:a1:bf:7d:a1:a0:
16:e0:8a:0a:58:92:bd:c2:4e:24:79:e1:35:ff:54:
aa:f6:c1:df:80:cd:72:af:b6:b5:c1:5b:96:c2:6a:
65:53:cc:6f:30:3b:0e:44:fc:6c:8f:6d:75:bd:f5:
21:9b:ad:1b:a0:3b:c6:02:ad:e8:c5:db:f9:41:6d:
21:62:1f:a7:1c:50:f2:ea:c2:2c:a4:76:5b:c5:07:
0a:b8:17:e9:05:33:c8:5c:bf:bf:d2:d4:dc:f5:63:
b2:b4:42:ec:74:0b:69:0c:29:dd:a6:ad:e1:c9:4d:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:7C:B2:22:70:9A:71:21:4B:BA:D8:55:01:1D:0D:97:DD:91:40
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/5BCD7FF42F1B11EE81FCC076C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.152.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:70:ad:39:d4:a0:31:fe:f5:ed:ed:13:ad:e5:5e:11:c8:f1:
5e:d8:e7:a2:9b:2a:5a:3e:c9:14:1c:c2:24:b0:c5:3b:88:70:
f3:16:42:74:a1:44:76:7e:1c:1c:46:b3:7d:3d:f9:fc:eb:de:
7a:c3:e5:26:18:68:9b:10:ff:b2:69:0f:96:33:14:ba:6e:c0:
8b:9a:de:b4:3e:40:db:e8:80:61:d1:06:a2:5b:75:6b:42:cb:
97:ab:8b:17:45:ce:97:e0:09:be:71:9a:50:b1:94:da:eb:94:
b2:e0:3b:7e:e0:e1:3c:8e:a3:bf:4e:98:10:af:75:58:6d:ba:
a2:f0:05:81:7c:50:8d:88:bb:01:83:dc:ad:59:e6:25:d1:b6:
de:91:d6:b7:c8:d6:a4:78:83:70:1d:3d:ee:8b:07:cb:0c:ad:
0c:f8:fc:db:e3:f5:31:fa:15:29:d1:7a:1f:5c:b4:b3:80:64:
c0:3c:d2:8b:fd:0c:1a:99:9b:d1:09:41:14:36:57:d8:32:e6:
75:7e:57:29:9d:13:8e:8e:1f:26:ee:76:b7:19:67:1f:a6:3f:
c7:de:4b:a3:3b:cd:73:c0:d1:73:d5:ec:4b:c8:9e:f0:a5:16:
61:ad:57:44:25:4b:07:43:30:d9:ae:23:f5:25:ab:68:7c:6a:
85:c1:36:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjMwNzMwMjA1NTA1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM2Y2UyOC02ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApirvtpra7/TTLMzDSE/4o4/25J36CkPqXdI1VGm68ZnTkQHeIBUqPdVCkle5
8yXMzoXb4kGfE0M2HB3PKLx8dxdYTxKD3vhhQ/TIl2nGqvMU1M5H9A8UNsAjWX4o
Xxj7C+0tudzxq4CCkmvGgpHH2NBD+RFrrnoCHk70tOunlZnRzndORozClyIALP7F
+8icob99oaAW4IoKWJK9wk4keeE1/1Sq9sHfgM1yr7a1wVuWwmplU8xvMDsORPxs
j211vfUhm60boDvGAq3oxdv5QW0hYh+nHFDy6sIspHZbxQcKuBfpBTPIXL+/0tTc
9WOytELsdAtpDCndpq3hyU0jiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLv/fLIi
cJpxIUu62FUBHQ2X3ZFAMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvNUJDRDdGRjQy
RjFCMTFFRTgxRkNDMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNpgwDQYJKoZIhvcNAQELBQADggEBAH9wrTnUoDH+9e3t
E63lXhHI8V7Y56KbKlo+yRQcwiSwxTuIcPMWQnShRHZ+HBxGs309+fzr3nrD5SYY
aJsQ/7JpD5YzFLpuwIua3rQ+QNvogGHRBqJbdWtCy5erixdFzpfgCb5xmlCxlNrr
lLLgO37g4TyOo79OmBCvdVhtuqLwBYF8UI2IuwGD3K1Z5iXRtt6R1rfI1qR4g3Ad
Pe6LB8sMrQz4/Nvj9TH6FSnReh9ctLOAZMA80ov9DBqZm9EJQRQ2V9gy5nV+Vymd
E46OHybudrcZZx+mP8feS6M7zXPA0XPV7EvInvClFmGtV0QlSwdDMNmuI/Ulq2h8
aoXBNrs=
-----END CERTIFICATE-----
Generated at Sat Sep 23 15:58:02 2023 by rpki-client on console-fra.rpki-client.org