Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/4BD55BDA0C6011EF8736F54AC4F9AE02.roa
File: 4BD55BDA0C6011EF8736F54AC4F9AE02.roa (raw, json)
Hash identifier: YnGDvDhAGEPtsA9v8WOeGq7+OJuGSpkxS8tkkDN+Vuc=
Subject key identifier: 11:D0:A6:CC:88:9D:E6:83:C7:FB:7C:16:CB:55:CC:EF:A2:87:8C:78
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0A5E
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/4BD55BDA0C6011EF8736F54AC4F9AE02.roa
Signing time: Tue 07 May 2024 10:55:20 +0000
ROA not before: Tue 07 May 2024 10:55:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138623
IP address blocks: 103.134.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 11:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2654 (0xa5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: May 7 10:55:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=663a0898-e2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:e0:64:ca:e8:17:db:62:0a:a0:85:68:6e:
df:d5:3c:ea:ee:7b:7b:25:fd:fe:81:2a:9c:07:b9:
65:49:ca:26:ee:59:d4:1b:32:7c:fe:9f:6d:9d:1e:
f2:26:a7:a3:37:92:1e:08:02:57:85:46:32:12:c5:
0e:ea:48:73:ad:6a:03:c5:0e:26:b0:b4:b6:f1:b8:
49:70:fc:23:0d:98:55:4d:b5:5b:87:6e:34:15:76:
bc:e4:f0:5b:2e:ff:79:da:7c:cd:3d:05:40:c5:c8:
0b:ec:ca:27:59:98:94:34:fc:b2:19:72:d4:26:48:
14:0d:80:f8:68:35:cb:40:9a:65:27:0a:2f:91:98:
b5:f4:4c:43:b4:73:4e:90:d2:92:cb:c1:f5:50:9c:
f6:a8:e7:cf:97:e2:c6:62:1b:8f:fa:67:29:41:1c:
33:ea:69:af:22:40:b2:2e:73:56:5a:84:1e:cf:fe:
76:da:7d:b0:8c:b5:77:7b:d9:71:b4:36:79:a7:5c:
35:54:df:da:ab:ac:d4:d8:4a:f2:77:13:d0:d0:ec:
23:26:bf:bc:e6:71:63:42:01:3a:dc:5e:63:ac:74:
48:63:53:c5:a2:77:6f:03:79:ac:52:9e:63:3e:cc:
1c:db:0c:50:03:07:d7:34:54:e9:99:a1:09:5d:f1:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:A6:CC:88:9D:E6:83:C7:FB:7C:16:CB:55:CC:EF:A2:87:8C:78
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/4BD55BDA0C6011EF8736F54AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:c7:51:30:19:f9:95:b0:e1:b8:b4:f1:6a:93:fd:61:10:bb:
41:24:66:b0:7a:dd:15:7b:33:96:72:a3:12:cf:8a:18:57:71:
11:a1:0f:0c:67:19:bb:94:a5:f2:95:84:87:ee:5c:ab:69:d5:
66:1a:d0:f6:93:33:1c:6c:54:0f:16:fd:dc:16:17:1c:cb:d6:
61:a7:cf:ad:d2:43:f2:6b:f5:0d:12:1c:ad:60:6c:1a:ba:f8:
b9:bf:6f:bf:6d:6f:57:ca:4a:d8:f0:b0:e9:84:9e:70:a0:e8:
39:9f:04:fa:3d:1d:c3:1e:f2:73:2f:02:ef:8b:fe:52:72:cf:
82:8e:01:54:76:db:0f:d8:13:43:b2:97:33:fa:e4:c1:06:38:
5c:05:35:e1:ff:2c:89:7c:5a:2f:3c:b9:b9:d1:37:4c:82:d4:
9f:52:8d:48:1a:97:9e:5f:83:54:06:68:7a:1d:bd:91:8f:9f:
41:05:1a:83:bc:49:f4:b7:7b:c4:7d:10:db:01:68:b5:b3:ec:
78:8f:e7:34:12:31:66:cd:83:98:49:19:26:0f:da:d5:99:ed:
d5:0b:e7:72:ed:a4:a0:26:27:09:2e:5f:bd:69:17:97:90:bc:
78:be:dc:86:81:36:fb:18:5a:1d:b0:61:a7:59:fa:e5:5f:b9:
6a:ec:72:96
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD
NTAxMkYyOUMwHhcNMjQwNTA3MTA1NTIwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjNhMDg5OC1lMmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbTgZMroF9tiCqCFaG7f1Tzq7nt7Jf3+gSqcB7llScom7lnUGzJ8/p9tnR7y
JqejN5IeCAJXhUYyEsUO6khzrWoDxQ4msLS28bhJcPwjDZhVTbVbh240FXa85PBb
Lv952nzNPQVAxcgL7MonWZiUNPyyGXLUJkgUDYD4aDXLQJplJwovkZi19ExDtHNO
kNKSy8H1UJz2qOfPl+LGYhuP+mcpQRwz6mmvIkCyLnNWWoQez/522n2wjLV3e9lx
tDZ5p1w1VN/aq6zU2ErydxPQ0OwjJr+85nFjQgE63F5jrHRIY1PFondvA3msUp5j
Pswc2wxQAwfXNFTpmaEJXfH9zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBHQpsyI
neaDx/t8FstVzO+ih4x4MB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG
NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUyOTAvQkVGNDU5MDIzRjZCMTFFQUI3QjlDNTZFQzRGOUFFMDIvNEJENTVCREEw
QzYwMTFFRjg3MzZGNTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhvAwDQYJKoZIhvcNAQELBQADggEBABvHUTAZ+ZWw4bi0
8WqT/WEQu0EkZrB63RV7M5ZyoxLPihhXcRGhDwxnGbuUpfKVhIfuXKtp1WYa0PaT
MxxsVA8W/dwWFxzL1mGnz63SQ/Jr9Q0SHK1gbBq6+Lm/b79tb1fKStjwsOmEnnCg
6DmfBPo9HcMe8nMvAu+L/lJyz4KOAVR22w/YE0OylzP65MEGOFwFNeH/LIl8Wi88
ubnRN0yC1J9SjUgal55fg1QGaHodvZGPn0EFGoO8SfS3e8R9ENsBaLWz7HiP5zQS
MWbNg5hJGSYP2tWZ7dUL53LtpKAmJwkuX71pF5eQvHi+3IaBNvsYWh2wYadZ+uVf
uWrscpY=
-----END CERTIFICATE-----
Generated at Tue May 7 15:44:43 2024 by rpki-client on console-ams.rpki-client.org