Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/15641D08CB4C11ED883B0131C4F9AE02.roa
File: 15641D08CB4C11ED883B0131C4F9AE02.roa (raw, json)
Hash identifier: mlK6Jfvyd7cJeAAhw20l24aPwd9vyC3w0hfo18AYjKs=
Subject key identifier: C3:83:8F:76:05:D4:56:4A:80:9A:2D:B4:8F:B0:D7:4E:E7:FF:73:C3
Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial: 0497
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/15641D08CB4C11ED883B0131C4F9AE02.roa
Signing time: Wed 31 May 2023 02:29:49 +0000
ROA not before: Wed 31 May 2023 02:29:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139009
IP address blocks: 103.166.89.0/24 maxlen: 24
2001:df6:8580::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jul 2023 11:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Validity
Not Before: May 31 02:29:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6476b11d-5ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:2b:1b:4f:c4:9e:b5:6b:fc:ab:c7:d4:d7:
70:16:0b:63:51:cc:3c:cd:3d:53:f6:be:14:78:7e:
f5:35:2e:e6:ba:68:ee:40:10:5e:98:29:ae:04:10:
fa:ce:9c:6d:8e:1e:da:9f:c0:e3:ff:05:52:b5:82:
73:db:56:ef:23:83:ba:27:9e:bd:1e:65:1f:a5:ca:
b6:0f:5c:32:2b:60:38:6d:3e:e5:95:e7:1b:b2:89:
98:81:64:a2:2c:bb:29:0b:f5:b6:96:27:4c:4e:5b:
13:7d:1d:f8:c7:5e:5d:b2:1f:7d:cd:10:e4:1a:84:
45:d8:8a:25:a7:d6:73:fe:4c:f8:31:bc:da:2b:a2:
fe:95:69:11:c2:14:a4:56:c0:49:63:e1:d1:62:96:
71:e1:85:b4:aa:d6:8f:e8:46:ef:ac:07:f7:ee:de:
31:69:76:a4:d4:77:7e:7e:8a:09:17:0d:ba:27:9b:
6c:d3:26:43:69:d2:b7:c7:2e:a4:df:a8:3f:08:5c:
5a:60:d3:91:fb:64:a4:e0:56:7a:b4:5a:69:15:12:
95:b3:7c:39:6c:70:e2:11:13:66:2f:ab:92:c7:8e:
dc:bd:7a:31:32:b0:af:02:c9:91:06:1d:6a:e1:7d:
0c:61:e2:22:e1:ca:3a:48:6f:08:ab:1e:59:b4:1d:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:8F:76:05:D4:56:4A:80:9A:2D:B4:8F:B0:D7:4E:E7:FF:73:C3
X509v3 Authority Key Identifier:
keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/15641D08CB4C11ED883B0131C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.89.0/24
IPv6:
2001:df6:8580::/48
Signature Algorithm: sha256WithRSAEncryption
67:f6:29:4d:86:93:07:59:68:c8:55:23:a4:82:13:da:76:32:
93:0e:14:28:c4:a4:32:2c:d4:8f:7d:36:eb:e4:13:d3:6d:83:
e2:01:76:10:93:20:f7:a3:27:bd:bc:ae:b2:88:6e:2e:ec:8a:
0f:18:a0:19:92:2b:a6:9d:93:7f:51:2a:af:d8:dd:c5:19:eb:
1b:68:88:29:a4:29:55:50:e0:c2:dc:f3:2b:a0:58:48:e2:b6:
27:6b:2f:3e:66:c9:57:bb:2d:c4:01:41:e6:a8:4a:46:95:ed:
50:88:04:32:ea:f2:cd:58:01:ae:34:3b:94:19:3f:4b:f9:c1:
4c:39:b4:3e:9e:50:d0:2a:1a:43:b5:a1:d5:63:0e:5e:d7:a7:
8f:04:ce:1b:64:4e:2e:4e:6d:bc:f4:ff:82:0a:24:2e:3d:76:
9c:6a:56:03:3a:ea:65:9e:b7:89:eb:08:a5:4f:09:35:44:0f:
f9:20:2f:96:00:d7:18:ef:ff:15:9c:f1:58:b7:4b:69:c8:2b:
72:4e:26:ea:c9:d9:92:f8:4e:8c:d2:33:04:fd:b3:65:b8:e7:
84:23:d2:19:97:eb:3a:d6:b4:9b:59:22:3d:7b:f3:0f:ff:45:
30:69:db:c7:27:5b:5b:23:5d:47:85:12:8a:04:4d:cb:5e:38:
87:84:4c:8e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz
RDkyNUI2MzYwHhcNMjMwNTMxMDIyOTQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc2YjExZC01YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoAwrG0/EnrVr/KvH1NdwFgtjUcw8zT1T9r4UeH71NS7mumjuQBBemCmuBBD6
zpxtjh7an8Dj/wVStYJz21bvI4O6J569HmUfpcq2D1wyK2A4bT7llecbsomYgWSi
LLspC/W2lidMTlsTfR34x15dsh99zRDkGoRF2Iolp9Zz/kz4MbzaK6L+lWkRwhSk
VsBJY+HRYpZx4YW0qtaP6EbvrAf37t4xaXak1Hd+fooJFw26J5ts0yZDadK3xy6k
36g/CFxaYNOR+2Sk4FZ6tFppFRKVs3w5bHDiERNmL6uSx47cvXoxMrCvAsmRBh1q
4X0MYeIi4co6SG8Iqx5ZtB0v1wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMODj3YF
1FZKgJottI+w107n/3PDMB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2
NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQwMEMvQzNFQ0Q5NjhBNjc0MTFFQjhDNDMyMjZGQzRGOUFFMDIvMTU2NDFEMDhD
QjRDMTFFRDg4M0IwMTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnplkwDwQCAAIwCQMHACABDfaFgDANBgkqhkiG9w0BAQsF
AAOCAQEAZ/YpTYaTB1loyFUjpIIT2nYykw4UKMSkMizUj3026+QT022D4gF2EJMg
96MnvbyusohuLuyKDxigGZIrpp2Tf1Eqr9jdxRnrG2iIKaQpVVDgwtzzK6BYSOK2
J2svPmbJV7stxAFB5qhKRpXtUIgEMuryzVgBrjQ7lBk/S/nBTDm0Pp5Q0CoaQ7Wh
1WMOXtenjwTOG2ROLk5tvPT/ggokLj12nGpWAzrqZZ63iesIpU8JNUQP+SAvlgDX
GO//FZzxWLdLacgrck4m6snZkvhOjNIzBP2zZbjnhCPSGZfrOta0m1kiPXvzD/9F
MGnbxydbWyNdR4USigRNy144h4RMjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org