Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/ED6EBC2A7A6611EE8305C931C4F9AE02.roa
File: ED6EBC2A7A6611EE8305C931C4F9AE02.roa (raw, json)
Hash identifier: 8NWt2JDrBH5TmYZsQpEvamaWOTfkLix37Gg73TyAU5g=
Subject key identifier: EF:8E:0A:09:ED:59:01:C6:87:C3:40:AA:F7:53:2E:39:85:DE:72:C3
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 0602
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/ED6EBC2A7A6611EE8305C931C4F9AE02.roa
Signing time: Fri 03 Nov 2023 16:34:59 +0000
ROA not before: Fri 03 Nov 2023 16:34:58 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 49645
IP address blocks: 103.110.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Nov 3 16:34:58 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65452132-2a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:75:93:06:49:d4:f1:68:cd:7c:aa:fa:2f:
5e:d1:48:e5:63:fd:13:ee:d4:b9:73:e2:1a:6a:40:
28:8e:fc:f6:f0:4c:b4:4a:fa:9d:35:aa:b3:bf:42:
00:19:99:3b:06:c8:25:d9:a6:4d:04:a6:41:6d:bd:
c1:8c:40:a4:60:0a:50:11:30:cf:a5:d4:5b:cd:d6:
9b:24:64:99:43:60:0e:12:b6:47:26:93:ce:87:d6:
79:97:f7:95:4d:75:43:c5:62:37:45:3c:37:56:27:
f6:ad:63:1a:60:27:e7:e5:2d:48:79:71:49:0e:68:
86:c1:d6:19:0f:25:5a:b4:0d:66:44:3f:bc:ed:b2:
69:78:b9:eb:98:1b:66:3e:6a:42:31:5c:c2:26:9b:
ae:33:76:ed:c2:8d:50:d8:72:2d:ce:30:0c:f8:64:
f2:2b:03:63:e9:54:6a:61:f9:3d:a2:46:f0:b5:ce:
06:fb:f1:35:14:7c:2b:ff:16:c6:08:8f:c3:47:7c:
79:a5:47:d1:7e:39:19:ba:d0:cc:78:92:b3:c2:a3:
a1:f5:6b:b7:44:7d:22:0a:e4:f9:e4:07:e7:07:df:
99:a2:7a:4d:2e:17:33:c6:bd:30:24:fc:c6:d8:04:
30:1e:f6:c9:7e:19:89:59:5e:33:1c:da:7a:f1:e9:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:0A:09:ED:59:01:C6:87:C3:40:AA:F7:53:2E:39:85:DE:72:C3
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/ED6EBC2A7A6611EE8305C931C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.106.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ea:6d:b2:54:f9:8c:f1:b0:2e:0e:52:41:2f:bb:3c:64:4e:
38:3f:b0:18:0f:0f:fb:a1:07:db:73:84:46:14:76:8a:0f:ff:
ff:39:4e:70:e3:48:5d:6b:46:2f:d0:9c:10:63:e2:4f:54:86:
77:26:f7:eb:9b:8e:fd:87:98:58:21:38:b4:eb:41:42:86:65:
2f:f6:e3:e2:88:d2:63:81:43:d6:85:13:ba:13:5d:f4:6e:82:
e1:ff:d0:2c:ee:61:ca:ff:94:7c:6b:32:a7:29:93:63:b6:e1:
44:61:9b:0a:fa:ef:cf:84:13:65:07:71:ab:b6:07:f4:6a:83:
9b:ad:f8:e2:43:12:c4:08:46:e0:b8:ac:75:6a:cb:00:85:20:
c7:1c:3c:6b:7e:85:57:1d:50:9d:7c:7a:4d:44:40:13:c9:91:
5b:32:f5:f0:34:29:6e:bf:55:d8:78:41:a0:95:ba:06:1f:9b:
d2:0a:23:d6:31:ab:43:04:e9:53:ae:0a:95:43:90:9f:3c:b2:
e2:3e:ed:2a:19:81:70:31:7c:f5:62:1a:cd:3f:6d:33:f7:65:
0e:d7:d3:f8:34:7d:af:d2:be:c7:c7:c5:2e:25:08:35:8f:36:
8c:38:54:d2:67:f2:ab:51:c9:e9:38:77:ce:24:da:ff:0f:2d:
eb:46:22:11
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3
RDdGODc4RjIwHhcNMjMxMTAzMTYzNDU4WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQ1MjEzMi0yYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FJ1kwZJ1PFozXyq+i9e0UjlY/0T7tS5c+IaakAojvz28Ey0SvqdNaqzv0IA
GZk7Bsgl2aZNBKZBbb3BjECkYApQETDPpdRbzdabJGSZQ2AOErZHJpPOh9Z5l/eV
TXVDxWI3RTw3Vif2rWMaYCfn5S1IeXFJDmiGwdYZDyVatA1mRD+87bJpeLnrmBtm
PmpCMVzCJpuuM3btwo1Q2HItzjAM+GTyKwNj6VRqYfk9okbwtc4G+/E1FHwr/xbG
CI/DR3x5pUfRfjkZutDMeJKzwqOh9Wu3RH0iCuT55AfnB9+ZonpNLhczxr0wJPzG
2AQwHvbJfhmJWV4zHNp68embkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO+OCgnt
WQHGh8NAqvdTLjmF3nLDMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5
NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MxREMvQjJEMURFMjA1OTRGMTFFQjg4RjdBNzNFQzRGOUFFMDIvRUQ2RUJDMkE3
QTY2MTFFRTgzMDVDOTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnbmowDQYJKoZIhvcNAQELBQADggEBAEDqbbJU+YzxsC4O
UkEvuzxkTjg/sBgPD/uhB9tzhEYUdooP//85TnDjSF1rRi/QnBBj4k9Uhncm9+ub
jv2HmFghOLTrQUKGZS/24+KI0mOBQ9aFE7oTXfRuguH/0CzuYcr/lHxrMqcpk2O2
4URhmwr678+EE2UHcau2B/Rqg5ut+OJDEsQIRuC4rHVqywCFIMccPGt+hVcdUJ18
ek1EQBPJkVsy9fA0KW6/Vdh4QaCVugYfm9IKI9Yxq0ME6VOuCpVDkJ88suI+7SoZ
gXAxfPViGs0/bTP3ZQ7X0/g0fa/SvsfHxS4lCDWPNow4VNJn8qtRyek4d84k2v8P
LetGIhE=
-----END CERTIFICATE-----
Generated at Tue Dec 19 17:41:09 2023 by rpki-client on console-fra.rpki-client.org