Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/99A9DD187D2811EDB440254EC4F9AE02.roa
File: 99A9DD187D2811EDB440254EC4F9AE02.roa (raw, json)
Hash identifier: wTMFCzsM4vCSJV6PjP3FOm6ZO7W2h7xmmGhUzYHfvqI=
Subject key identifier: 39:1C:2B:22:64:83:16:AD:CA:18:39:DC:C9:91:06:9E:12:F1:41:75
Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial: 04BC
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/99A9DD187D2811EDB440254EC4F9AE02.roa
Signing time: Mon 30 Oct 2023 14:36:10 +0000
ROA not before: Mon 30 Oct 2023 14:36:10 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 142565
IP address blocks: 14.128.8.0/24 maxlen: 24
103.230.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Validity
Not Before: Oct 30 14:36:10 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=653fbf5a-0a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:3e:d6:16:0c:81:6f:00:d9:90:47:67:d7:
56:e8:c4:60:ef:f4:51:f2:e2:90:a2:6d:3c:59:41:
0c:52:78:dd:04:0e:0e:87:6c:d6:88:c6:43:89:6d:
a5:62:4c:7d:aa:96:d8:d2:58:86:36:53:24:0c:83:
1b:d1:33:b1:d9:a8:ad:6d:50:82:e1:35:f9:a8:f4:
d4:55:ea:50:ee:a4:04:d0:72:5e:c5:c2:6c:c2:04:
91:dd:eb:96:d0:1d:39:aa:a4:e5:42:28:47:f3:29:
4d:85:64:89:27:b0:10:f9:06:c9:6d:4b:b2:6e:15:
94:fc:eb:60:a7:c4:12:8a:7b:37:52:a9:a2:77:5c:
72:64:ba:d2:da:fa:b8:c2:be:05:6c:ca:93:d3:e9:
b1:fe:a5:71:1b:99:3c:04:c8:54:b3:be:aa:40:08:
de:31:db:9d:53:5f:e4:9c:18:74:2b:bf:53:4f:8f:
af:b3:89:4e:e9:47:97:c8:81:d7:83:02:6d:2e:35:
7f:c7:9a:e4:13:03:4a:87:af:7a:13:cb:ec:ed:b5:
72:09:36:67:81:b7:0c:da:23:d7:3e:e2:15:1b:06:
59:4c:2f:d4:c0:83:89:33:99:db:b7:be:b2:2d:c6:
cf:93:26:bb:2a:fc:99:a8:ef:bc:be:a5:00:e2:af:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:2B:22:64:83:16:AD:CA:18:39:DC:C9:91:06:9E:12:F1:41:75
X509v3 Authority Key Identifier:
keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/99A9DD187D2811EDB440254EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.128.8.0/24
103.230.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e1:66:2c:13:6b:77:45:59:91:46:5d:a7:11:62:71:d3:dd:
33:04:c6:b7:19:38:d0:d2:49:25:3b:48:35:2d:8a:3f:d6:f4:
98:47:cb:96:2d:4c:f8:01:01:b7:6d:fb:3f:32:c9:39:b5:28:
cc:d4:a6:62:5d:f4:30:fc:4c:d2:0c:e2:c8:f4:e0:81:d7:67:
f5:49:02:6d:d2:b5:92:ac:02:82:fb:51:cc:6f:41:68:68:61:
89:42:ad:9e:30:20:d6:e0:b2:d5:ea:22:6b:e5:ce:1b:98:38:
30:41:dc:a4:80:ce:bd:95:43:80:3f:78:74:51:e7:51:16:85:
b4:8f:1f:9f:7c:10:bc:f6:33:ab:6d:07:8c:8e:68:31:6e:4c:
4a:1a:eb:91:8f:c7:90:65:34:02:95:b8:93:1b:ca:08:4d:75:
b7:c9:fc:54:46:60:69:2c:37:fd:41:1c:8f:80:d4:61:d9:95:
01:f5:dd:20:62:59:43:c9:8c:46:86:a8:6e:b6:36:53:61:73:
a8:04:0b:fd:93:32:d7:6f:f3:14:66:55:ec:cc:30:2a:48:ec:
55:7e:cf:03:52:b5:e2:01:78:15:0e:40:cc:25:bc:02:12:72:
aa:64:cc:81:25:4a:e9:4d:05:77:f5:54:f5:cf:19:2d:c0:3b:
e6:b3:0a:85
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG
RkFBQ0M5QzcwHhcNMjMxMDMwMTQzNjEwWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTNmYmY1YS0wYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAQ+1hYMgW8A2ZBHZ9dW6MRg7/RR8uKQom08WUEMUnjdBA4Oh2zWiMZDiW2l
Ykx9qpbY0liGNlMkDIMb0TOx2aitbVCC4TX5qPTUVepQ7qQE0HJexcJswgSR3euW
0B05qqTlQihH8ylNhWSJJ7AQ+QbJbUuybhWU/Otgp8QSins3Uqmid1xyZLrS2vq4
wr4FbMqT0+mx/qVxG5k8BMhUs76qQAjeMdudU1/knBh0K79TT4+vs4lO6UeXyIHX
gwJtLjV/x5rkEwNKh696E8vs7bVyCTZngbcM2iPXPuIVGwZZTC/UwIOJM5nbt76y
LcbPkya7KvyZqO+8vqUA4q9wuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDkcKyJk
gxatyhg53MmRBp4S8UF1MB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG
QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ2QjAvMzJFOTg3M0NCRkM4MTFFQkI5RTRFQjZFQzRGOUFFMDIvOTlBOUREMTg3
RDI4MTFFREI0NDAyNTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAOgAgDBABn5nswDQYJKoZIhvcNAQELBQADggEBALfhZiwT
a3dFWZFGXacRYnHT3TMExrcZONDSSSU7SDUtij/W9JhHy5YtTPgBAbdt+z8yyTm1
KMzUpmJd9DD8TNIM4sj04IHXZ/VJAm3StZKsAoL7UcxvQWhoYYlCrZ4wINbgstXq
ImvlzhuYODBB3KSAzr2VQ4A/eHRR51EWhbSPH598ELz2M6ttB4yOaDFuTEoa65GP
x5BlNAKVuJMbyghNdbfJ/FRGYGksN/1BHI+A1GHZlQH13SBiWUPJjEaGqG62NlNh
c6gEC/2TMtdv8xRmVezMMCpI7FV+zwNSteIBeBUOQMwlvAIScqpkzIElSulNBXf1
VPXPGS3AO+azCoU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org