Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/37F06E30264111EEA850773FC4F9AE02.roa
File: 37F06E30264111EEA850773FC4F9AE02.roa (raw, json)
Hash identifier: uMUsD8gctUKLQ8xr/Fpre+fjAnZdm2QNxLICBW65aAQ=
Subject key identifier: F7:CD:99:65:FB:B3:2F:3D:6E:56:C0:D2:AC:26:53:17:C2:EB:09:B4
Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial: 0AE5
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/37F06E30264111EEA850773FC4F9AE02.roa
Signing time: Wed 19 Jul 2023 14:34:39 +0000
ROA not before: Wed 19 Jul 2023 14:34:39 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 151080
IP address blocks: 103.114.96.0/23 maxlen: 24
103.114.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Validity
Not Before: Jul 19 14:34:39 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64b7f47f-4860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:3f:b4:e3:50:db:ef:90:0e:18:85:ea:fd:
95:ea:d5:22:00:3d:91:2f:21:ba:a3:7b:02:db:5f:
59:09:61:00:ba:26:fe:0e:d3:f9:f0:53:f3:d8:c8:
de:be:b8:ef:7b:ab:07:18:24:bf:b1:93:40:80:f1:
a2:3a:25:69:8a:a9:b1:ee:9f:1c:2d:5d:5c:92:30:
e7:0b:ef:11:3e:e7:8c:7a:fd:e1:a8:d7:21:e1:5a:
50:d6:b8:68:ba:98:24:db:ed:1e:71:18:24:68:c7:
29:08:41:72:fb:79:b2:a3:49:92:cc:5c:6d:af:15:
02:31:b3:56:3c:d9:5a:b5:47:a6:63:3c:a6:e8:0a:
56:bf:82:14:39:86:18:8c:5e:34:57:b3:64:9a:00:
cf:05:eb:2f:17:02:3b:b8:a9:49:9d:f9:bf:9d:44:
c2:cf:a4:96:8d:dd:8b:8a:db:8a:81:4e:33:16:4b:
35:fb:eb:dd:27:6d:ff:ea:f6:2d:22:d6:7c:77:28:
c3:bd:f2:bf:03:be:e2:40:56:7b:d2:8c:7f:85:a7:
f3:c6:5a:48:57:5a:35:12:f7:cd:c7:d6:f5:35:ee:
67:31:7e:e1:f1:49:83:f1:e8:26:fa:b3:53:11:63:
2c:c8:c6:aa:26:86:9c:a0:53:f9:7c:78:e4:2d:d3:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CD:99:65:FB:B3:2F:3D:6E:56:C0:D2:AC:26:53:17:C2:EB:09:B4
X509v3 Authority Key Identifier:
keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/37F06E30264111EEA850773FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.96.0-103.114.98.255
Signature Algorithm: sha256WithRSAEncryption
6b:a5:70:17:98:2c:85:9d:d5:b0:72:d1:74:38:5f:aa:a0:b6:
17:28:72:ce:83:07:46:db:cf:43:c8:31:d1:f2:22:ee:da:65:
4c:06:2c:f8:49:01:07:e2:0c:9f:16:59:58:5a:bd:c6:9d:fd:
a9:c0:7f:e6:bb:fc:f2:41:e5:74:30:f2:5f:0a:82:c2:a5:b5:
df:af:f2:3d:e0:4d:f5:37:75:58:ba:f0:41:a3:95:f4:30:c2:
00:44:f8:32:8e:da:c5:aa:6c:6d:01:90:29:4e:7a:c4:ca:f2:
3b:fa:4f:72:ca:11:0a:3a:a0:f8:04:44:51:13:ec:01:00:08:
cf:0b:15:86:54:99:36:7a:98:53:38:74:f0:c2:9a:99:67:b4:
42:76:f2:4e:27:83:d4:ad:73:c1:61:b6:f3:be:01:c0:9f:c8:
41:94:fb:18:13:ac:bf:9c:06:29:54:f2:d4:66:76:d4:bd:ea:
05:90:b1:7a:2c:e6:8a:5f:d4:a8:66:2e:61:da:2e:f1:61:8c:
7d:7a:dc:07:d3:79:f2:17:63:c8:75:84:a1:71:e7:b8:24:29:
53:c3:bd:d9:b8:a2:f7:bc:c6:db:d7:2e:86:0f:e6:66:90:bf:
8c:3e:b0:64:27:5a:b5:a7:b8:01:ef:25:34:14:9b:ea:80:0b:
f2:07:5c:32
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0
Qjc4RjE5QzIwHhcNMjMwNzE5MTQzNDM5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI3ZjQ3Zi00ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGQ/tONQ2++QDhiF6v2V6tUiAD2RLyG6o3sC219ZCWEAuib+DtP58FPz2Mje
vrjve6sHGCS/sZNAgPGiOiVpiqmx7p8cLV1ckjDnC+8RPueMev3hqNch4VpQ1rho
upgk2+0ecRgkaMcpCEFy+3myo0mSzFxtrxUCMbNWPNlatUemYzym6ApWv4IUOYYY
jF40V7NkmgDPBesvFwI7uKlJnfm/nUTCz6SWjd2LituKgU4zFks1++vdJ23/6vYt
ItZ8dyjDvfK/A77iQFZ70ox/hafzxlpIV1o1EvfNx9b1Ne5nMX7h8UmD8egm+rNT
EWMsyMaqJoacoFP5fHjkLdPX5QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPfNmWX7
sy89blbA0qwmUxfC6wm0MB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB
RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvMzdGMDZFMzAy
NjQxMTFFRUE4NTA3NzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEBWdyYAMEAGdyYjANBgkqhkiG9w0BAQsFAAOCAQEAa6Vw
F5gshZ3VsHLRdDhfqqC2FyhyzoMHRtvPQ8gx0fIi7tplTAYs+EkBB+IMnxZZWFq9
xp39qcB/5rv88kHldDDyXwqCwqW136/yPeBN9Td1WLrwQaOV9DDCAET4Mo7axaps
bQGQKU56xMryO/pPcsoRCjqg+AREURPsAQAIzwsVhlSZNnqYUzh08MKamWe0Qnby
TieD1K1zwWG2874BwJ/IQZT7GBOsv5wGKVTy1GZ21L3qBZCxeizmil/UqGYuYdou
8WGMfXrcB9N58hdjyHWEoXHnuCQpU8O92bii97zG29cuhg/mZpC/jD6wZCdatae4
Ae8lNBSb6oAL8gdcMg==
-----END CERTIFICATE-----
Generated at Sun Oct 8 09:09:57 2023 by rpki-client on console-ams.rpki-client.org