Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/A14248B84BDF11EEB2859812C4F9AE02.roa
File: A14248B84BDF11EEB2859812C4F9AE02.roa (raw, json)
Hash identifier: wMvp14mjzO6OoOZAkSSXIkWKAPXzDl82iYAfVv/W3Es=
Subject key identifier: 33:BA:CC:F1:F6:46:6B:EC:A0:FC:DD:22:A8:7F:95:EA:A8:C7:2D:D1
Certificate issuer: /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Certificate serial: 0F02
Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/A14248B84BDF11EEB2859812C4F9AE02.roa
Signing time: Tue 05 Sep 2023 11:30:35 +0000
ROA not before: Tue 05 Sep 2023 11:30:35 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 49981
IP address blocks: 103.136.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3842 (0xf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Validity
Not Before: Sep 5 11:30:35 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64f7115b-0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:ff:d1:ac:21:80:21:00:5b:0e:34:21:3c:
cb:39:7c:e5:a8:4e:3a:eb:29:5d:cd:37:5b:fc:44:
83:b2:32:0e:9a:65:79:08:2a:8c:2c:5b:88:86:1c:
5f:0f:03:03:aa:f0:d9:2e:b6:77:70:69:6e:a0:81:
40:23:fb:76:53:b6:2d:65:e6:b1:13:ad:53:7b:0c:
1b:9a:a9:b1:19:1c:a9:36:4d:d4:40:57:6a:5d:cf:
98:f6:bd:79:ce:d2:58:d3:bb:19:79:42:2d:1a:67:
d1:18:cd:d2:a5:24:dd:1a:d9:bc:b7:9c:c1:3f:a7:
21:42:e3:1e:5d:2c:a5:39:70:ca:8c:55:b1:7d:5f:
45:65:22:e7:b9:8b:fa:51:81:8d:0e:07:41:62:24:
b7:b8:a6:b7:db:5b:d8:8f:e5:e4:c4:4b:4d:ae:d7:
82:e4:27:b8:0c:ac:6b:fa:01:06:09:75:f2:dd:c9:
45:35:5f:f4:bd:9a:62:2a:4f:5e:e7:84:c8:56:ef:
5b:2c:b4:53:5e:2f:92:ed:32:8a:fe:49:40:b7:06:
80:75:89:26:01:9a:32:75:d1:57:61:d8:01:ac:98:
6a:15:86:00:45:88:eb:09:67:9c:5d:62:66:59:40:
65:af:e3:50:66:84:58:33:e7:91:79:a0:6f:70:0a:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:CC:F1:F6:46:6B:EC:A0:FC:DD:22:A8:7F:95:EA:A8:C7:2D:D1
X509v3 Authority Key Identifier:
keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/A14248B84BDF11EEB2859812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.42.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bc:c4:c3:72:da:cf:e9:9f:11:71:c4:5b:30:e2:49:e0:9f:
d3:5f:dd:c5:9b:ed:35:2c:c4:41:ad:72:e2:d0:8a:01:24:80:
5d:fa:3d:3e:be:b1:2a:6d:9f:ce:c7:2e:bd:3d:c4:d9:9c:ee:
6f:1c:b2:a4:0b:de:db:45:90:c3:c8:a2:0d:a3:78:03:75:4d:
71:09:8e:2f:d4:77:20:c4:c3:9f:54:4f:a2:d6:fc:19:f8:33:
63:60:d6:62:a0:99:bc:ed:ab:e8:c5:38:90:6d:1b:a5:6f:d7:
7d:f9:07:30:a0:cb:0d:cb:a6:ea:d8:4a:17:8c:80:c7:52:8c:
d3:76:cd:1b:56:0a:02:60:c5:b7:87:98:6c:82:83:18:91:d3:
40:0b:57:2d:6f:47:f2:38:22:33:a3:f4:62:16:d2:dd:2e:00:
9d:7a:a8:8e:4c:ee:81:c9:8d:e7:8d:cc:29:be:b3:be:8a:59:
5b:39:06:75:2d:bd:24:c4:48:87:1e:11:73:af:b0:40:76:62:
99:98:a5:28:ba:13:f8:05:45:68:df:9e:32:27:95:bd:66:0d:
1a:83:5e:b5:b7:b2:10:37:4e:12:a7:5f:40:91:91:92:27:41:
34:b1:7a:9b:12:13:00:cb:58:1d:21:65:a0:49:f2:b2:31:88:
d6:c0:c5:7c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNEODUxMTAvBgNVBAUTKEJCMDdFRDQ2NEIyODBENTdGQTc3MTg0MUY3N0Y1MkVB
N0Q1MDc5MjcwHhcNMjMwOTA1MTEzMDM1WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NGY3MTE1Yi0wOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28L/0awhgCEAWw40ITzLOXzlqE466yldzTdb/ESDsjIOmmV5CCqMLFuIhhxf
DwMDqvDZLrZ3cGluoIFAI/t2U7YtZeaxE61TewwbmqmxGRypNk3UQFdqXc+Y9r15
ztJY07sZeUItGmfRGM3SpSTdGtm8t5zBP6chQuMeXSylOXDKjFWxfV9FZSLnuYv6
UYGNDgdBYiS3uKa321vYj+XkxEtNrteC5Ce4DKxr+gEGCXXy3clFNV/0vZpiKk9e
54TIVu9bLLRTXi+S7TKK/klAtwaAdYkmAZoyddFXYdgBrJhqFYYARYjrCWecXWJm
WUBlr+NQZoRYM+eReaBvcAqj3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDO6zPH2
RmvsoPzdIqh/leqoxy3RMB8GA1UdIwQYMBaAFLsH7UZLKA1X+ncYQfd/Uup9UHkn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4NS85MTUzMjUyMDNG
QzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RWZjZkeGhCOTM5UzZuMVFl
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3ZnRSa3NvRFZmNmR4aEI5MzlTNm4xUWVTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTNEODUvOTE1MzI1MjAzRkM5MTFFOTk3OUJCODNCQzRGOUFFMDIvQTE0MjQ4Qjg0
QkRGMTFFRUIyODU5ODEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABniCowDQYJKoZIhvcNAQELBQADggEBACO8xMNy2s/pnxFx
xFsw4kngn9Nf3cWb7TUsxEGtcuLQigEkgF36PT6+sSptn87HLr09xNmc7m8csqQL
3ttFkMPIog2jeAN1TXEJji/UdyDEw59UT6LW/Bn4M2Ng1mKgmbztq+jFOJBtG6Vv
1335BzCgyw3LpurYSheMgMdSjNN2zRtWCgJgxbeHmGyCgxiR00ALVy1vR/I4IjOj
9GIW0t0uAJ16qI5M7oHJjeeNzCm+s76KWVs5BnUtvSTESIceEXOvsEB2YpmYpSi6
E/gFRWjfnjInlb1mDRqDXrW3shA3ThKnX0CRkZInQTSxepsSEwDLWB0hZaBJ8rIx
iNbAxXw=
-----END CERTIFICATE-----
Generated at Tue Sep 5 13:53:52 2023 by rpki-client on console-fra.rpki-client.org