Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/8AAABAF235AF11EB8957AD18C4F9AE02.roa
File: 8AAABAF235AF11EB8957AD18C4F9AE02.roa (raw, json)
Hash identifier: CkBZs/0N0lV8RvQyicbxgigpMF20MPh84pAwa9LvKRE=
Subject key identifier: AD:45:D5:8C:D6:74:DE:33:F2:E7:DB:63:5F:C1:6D:66:1C:DE:48:6F
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0459
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/8AAABAF235AF11EB8957AD18C4F9AE02.roa
Signing time: Fri 20 May 2022 00:46:34 +0000
ROA not before: Fri 20 May 2022 00:46:34 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.114.188.0/23 maxlen: 24
45.114.190.0/24 maxlen: 24
103.54.152.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 20 00:46:34 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6286e4ea-7eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:0e:f2:21:d8:56:f9:ae:e3:da:7f:7a:16:
a3:4a:8b:5c:0a:9f:df:fd:4c:3d:67:65:71:1e:b9:
93:b6:e4:f5:69:85:4e:36:40:57:f5:e0:2a:02:ed:
1f:29:d9:ac:23:f7:e6:cc:f5:aa:96:79:40:a7:56:
59:79:5f:8a:25:59:98:77:71:f3:3b:83:e1:ae:43:
e4:51:0d:5b:e6:b6:9e:d4:ff:cd:f7:40:db:b0:0a:
63:af:49:16:c4:ac:cf:a0:01:6f:da:fd:75:c2:bf:
52:95:5f:ad:28:d6:b5:34:41:a7:c0:df:7f:7a:98:
97:0d:6f:ce:ce:52:51:9a:fb:c3:3f:90:bd:34:df:
3f:13:b6:38:b1:3f:9e:a9:41:72:71:ff:a1:80:79:
25:38:9a:c2:90:b7:d7:f9:a3:74:32:2e:a6:ba:01:
c0:df:30:2f:64:54:7f:ee:37:a4:60:a5:e1:06:2b:
38:dd:ec:df:97:93:f6:4a:f3:d0:22:52:d7:fc:1f:
14:6b:1e:0a:5f:ad:02:f9:a5:dc:b3:94:37:2a:76:
14:16:7c:be:a4:b6:ae:0a:6a:a7:4c:7b:cb:2c:f9:
42:76:d9:31:7b:b7:1f:2f:46:c4:df:21:0c:fe:21:
92:cd:e0:3a:bf:00:90:80:74:61:ca:c8:3d:fe:92:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:D5:8C:D6:74:DE:33:F2:E7:DB:63:5F:C1:6D:66:1C:DE:48:6F
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/8AAABAF235AF11EB8957AD18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.188.0-45.114.190.255
103.54.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:76:b8:ea:d7:88:8b:88:12:21:65:6a:ba:47:c3:d6:13:f0:
65:7f:c2:68:b6:74:80:32:df:41:a9:f2:ee:f4:d5:11:f2:f3:
9c:5a:3b:22:f0:a4:58:a6:78:29:09:7f:02:35:d6:f0:22:17:
4b:fa:ce:14:a7:05:50:a5:bd:f5:1e:48:72:71:dc:0b:d6:57:
37:10:8e:e3:39:a5:b0:3c:fc:2c:50:77:53:cf:c7:03:56:df:
a4:14:0f:51:7f:af:30:29:2b:97:a5:49:e4:97:a2:41:be:6a:
f2:1f:e6:0e:d6:85:3c:3a:ae:25:13:c7:9d:a3:78:9b:b7:21:
e4:63:37:b1:e1:66:8b:da:99:45:c3:12:18:a2:97:60:e2:19:
e7:a9:b7:d0:aa:b0:2b:0b:61:6f:19:7f:32:50:3a:b0:6d:b3:
49:a4:2c:35:2f:e1:d3:63:63:43:f9:04:12:2f:d1:28:96:ef:
80:fd:69:74:ec:77:d5:78:1b:76:3d:6a:c3:47:4d:93:28:ae:
8f:91:33:94:ac:47:29:c9:16:b4:07:ea:ce:e5:aa:d7:34:9a:
19:e8:de:aa:e4:24:f7:11:e1:03:24:d5:6e:0f:97:dd:7c:61:
eb:01:b6:d3:8e:dd:e9:64:a6:6b:0f:ba:3f:83:6a:d7:54:0b:
76:7b:bc:1c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjIwNTIwMDA0NjM0WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjg2ZTRlYS03ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscUO8iHYVvmu49p/ehajSotcCp/f/Uw9Z2VxHrmTtuT1aYVONkBX9eAqAu0f
KdmsI/fmzPWqlnlAp1ZZeV+KJVmYd3HzO4PhrkPkUQ1b5rae1P/N90DbsApjr0kW
xKzPoAFv2v11wr9SlV+tKNa1NEGnwN9/epiXDW/OzlJRmvvDP5C9NN8/E7Y4sT+e
qUFycf+hgHklOJrCkLfX+aN0Mi6mugHA3zAvZFR/7jekYKXhBis43ezfl5P2SvPQ
IlLX/B8Uax4KX60C+aXcs5Q3KnYUFny+pLauCmqnTHvLLPlCdtkxe7cfL0bE3yEM
/iGSzeA6vwCQgHRhysg9/pI0FwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFK1F1YzW
dN4z8ufbY1/BbWYc3khvMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvOEFBQUJBRjIz
NUFGMTFFQjg5NTdBRDE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEAi1yvAMEAC1yvgMEAmc2mDANBgkqhkiG9w0BAQsFAAOC
AQEAG3a46teIi4gSIWVqukfD1hPwZX/CaLZ0gDLfQany7vTVEfLznFo7IvCkWKZ4
KQl/AjXW8CIXS/rOFKcFUKW99R5IcnHcC9ZXNxCO4zmlsDz8LFB3U8/HA1bfpBQP
UX+vMCkrl6VJ5JeiQb5q8h/mDtaFPDquJRPHnaN4m7ch5GM3seFmi9qZRcMSGKKX
YOIZ56m30KqwKwthbxl/MlA6sG2zSaQsNS/h02NjQ/kEEi/RKJbvgP1pdOx31Xgb
dj1qw0dNkyiuj5EzlKxHKckWtAfqzuWq1zSaGejequQk9xHhAyTVbg+X3Xxh6wG2
047d6WSmaw+6P4Nq11QLdnu8HA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org