Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/06722EA0265011EBA412972DC4F9AE02.roa
File: 06722EA0265011EBA412972DC4F9AE02.roa (raw, json)
Hash identifier: NMSu2gscf8n/L98i8wY/NmUfJD59S9b2KxyPGSNcAOI=
Subject key identifier: DE:67:F4:28:BC:EA:54:3B:DE:A9:FB:4F:CA:EB:1E:CF:53:B1:B9:22
Certificate issuer: /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Certificate serial: 0875
Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/06722EA0265011EBA412972DC4F9AE02.roa
Signing time: Sat 20 May 2023 22:13:31 +0000
ROA not before: Sat 20 May 2023 22:13:31 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 140579
IP address blocks: 103.150.154.0/24 maxlen: 24
103.150.155.0/24 maxlen: 24
2001:df3:8380::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 14:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165 (0x875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Validity
Not Before: May 20 22:13:31 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6469460a-658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:d4:03:22:3f:64:5b:4b:8b:4d:73:bd:80:
24:45:26:16:d2:9d:33:0c:83:85:9d:2a:8c:b7:b0:
89:cb:c4:c4:95:80:c8:ff:a9:56:d6:62:24:45:13:
5c:49:75:a9:99:11:b1:ab:fe:55:e6:3d:87:fe:e2:
e6:a9:40:e8:06:8b:b3:ba:db:a2:d7:bc:98:37:1e:
60:dc:41:88:99:a5:e8:41:a0:ca:50:5c:9b:5b:c8:
82:64:83:73:a5:28:38:80:a7:b6:c4:84:c0:c7:b9:
02:3b:6f:c3:a1:41:05:0c:fb:2a:00:2b:fe:8e:e2:
d1:9e:fc:b6:6c:69:2a:1f:66:ef:89:5a:6c:ae:00:
2b:14:ad:14:7c:05:6f:57:8a:b2:37:4a:ec:10:b9:
14:17:52:72:b5:40:f5:b0:39:b1:b3:c0:4f:f6:c6:
37:32:d1:3e:57:39:0d:ee:bc:f0:cc:97:46:99:cc:
31:d0:fc:87:98:17:77:e5:7c:1d:5e:07:38:50:7d:
27:85:eb:eb:3d:66:6d:72:6d:f6:f7:fb:7e:27:9e:
ea:58:77:48:1c:e6:57:70:87:5c:d7:61:58:0c:3d:
d4:fa:d5:a1:94:af:39:24:e7:e8:2e:64:fb:b6:1e:
c9:49:37:38:dd:8f:c0:84:7d:5a:07:b6:9c:ee:ae:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:F4:28:BC:EA:54:3B:DE:A9:FB:4F:CA:EB:1E:CF:53:B1:B9:22
X509v3 Authority Key Identifier:
keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/06722EA0265011EBA412972DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.154.0/23
IPv6:
2001:df3:8380::/48
Signature Algorithm: sha256WithRSAEncryption
61:73:d7:71:72:94:70:e4:b9:32:60:79:f1:b3:9e:81:6c:55:
b9:72:0d:48:12:9c:32:f3:22:a7:76:76:72:8e:53:66:76:a9:
84:77:e3:95:24:ea:6e:51:a1:e9:f2:d4:30:85:be:f2:b9:0f:
98:93:38:5a:f0:20:c2:97:de:96:82:2f:7e:8b:9e:6f:14:0b:
89:da:a2:39:11:11:69:9d:41:c0:26:49:41:9a:2f:62:82:b7:
d0:ff:a4:de:af:e1:e7:cc:90:fd:7c:c7:21:ea:dd:81:de:09:
2c:94:33:0f:8c:08:36:a6:15:b2:87:d4:b1:c0:ab:42:e7:76:
af:ff:fe:23:04:2c:02:42:71:29:3b:72:aa:51:ba:02:7f:45:
d6:dd:ad:0d:74:72:4d:7e:91:cf:a1:61:df:6c:67:19:6e:ae:
72:8e:aa:eb:3b:91:5b:8b:80:8e:a1:8b:4a:3a:bf:c1:3e:26:
0b:e1:1e:bc:e8:6d:5c:9b:b4:3a:37:32:1f:95:8a:2e:fd:c7:
e1:a9:ad:5a:e5:59:de:00:ad:b0:a7:7f:6b:8f:a0:39:7d:85:
83:a1:68:c4:3b:97:e0:32:87:9f:51:ed:ab:d0:41:db:de:b9:
ed:f6:1a:87:54:16:90:f5:16:8d:30:aa:b8:72:3c:6b:2f:c3:
6d:f3:aa:b6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJGMzMxMTAvBgNVBAUTKDE0RTY3M0M0QTcxREIzNEE3NTY4MTM1ODdFNDgyMTJE
QTJFNzczMzAwHhcNMjMwNTIwMjIxMzMxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDY5NDYwYS02NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlDUAyI/ZFtLi01zvYAkRSYW0p0zDIOFnSqMt7CJy8TElYDI/6lW1mIkRRNc
SXWpmRGxq/5V5j2H/uLmqUDoBouzutui17yYNx5g3EGImaXoQaDKUFybW8iCZINz
pSg4gKe2xITAx7kCO2/DoUEFDPsqACv+juLRnvy2bGkqH2bviVpsrgArFK0UfAVv
V4qyN0rsELkUF1JytUD1sDmxs8BP9sY3MtE+VzkN7rzwzJdGmcwx0PyHmBd35Xwd
Xgc4UH0nhevrPWZtcm329/t+J57qWHdIHOZXcIdc12FYDD3U+tWhlK85JOfoLmT7
th7JSTc43Y/AhH1aB7ac7q4SjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFN5n9Ci8
6lQ73qn7T8rrHs9TsbkiMB8GA1UdIwQYMBaAFBTmc8SnHbNKdWgTWH5IIS2i53Mw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkYzMy9FNkVDMkQ5Mjgw
OTExMUVBQUJDREZGNkNDNEY5QUUwMi9GT1p6eEtjZHMwcDFhQk5ZZmtnaExhTG5j
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZPWnp4S2NkczBwMWFCTllma2doTGFMbmN6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTJGMzMvRTZFQzJEOTI4MDkxMTFFQUFCQ0RGRjZDQzRGOUFFMDIvMDY3MjJFQTAy
NjUwMTFFQkE0MTI5NzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnlpowDwQCAAIwCQMHACABDfODgDANBgkqhkiG9w0BAQsF
AAOCAQEAYXPXcXKUcOS5MmB58bOegWxVuXINSBKcMvMip3Z2co5TZnaphHfjlSTq
blGh6fLUMIW+8rkPmJM4WvAgwpfeloIvfouebxQLidqiORERaZ1BwCZJQZovYoK3
0P+k3q/h58yQ/XzHIerdgd4JLJQzD4wINqYVsofUscCrQud2r//+IwQsAkJxKTty
qlG6An9F1t2tDXRyTX6Rz6Fh32xnGW6uco6q6zuRW4uAjqGLSjq/wT4mC+EevOht
XJu0OjcyH5WKLv3H4amtWuVZ3gCtsKd/a4+gOX2Fg6FoxDuX4DKHn1Htq9BB2965
7fYah1QWkPUWjTCquHI8ay/DbfOqtg==
-----END CERTIFICATE-----
Generated at Wed May 29 17:52:11 2024 by rpki-client on console-fra.rpki-client.org