Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/6097B302659911ED8981D533C4F9AE02.roa
File: 6097B302659911ED8981D533C4F9AE02.roa (raw, json)
Hash identifier: omT2d0cPLspNjzWNIaOX1/k+9Bgv/NSy/WfyxCgITNw=
Subject key identifier: EF:00:6D:33:0C:57:65:57:EA:A6:49:CD:D0:82:15:5C:9F:AA:32:E8
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 078C
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/6097B302659911ED8981D533C4F9AE02.roa
Signing time: Thu 06 Apr 2023 22:39:42 +0000
ROA not before: Thu 06 Apr 2023 22:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.112.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Apr 6 22:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642f4a2d-a604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:35:35:9f:2f:bc:b4:0b:64:41:cd:fc:18:
f0:68:bd:49:4a:d2:96:8e:96:f4:61:a8:47:91:d3:
65:4d:e5:56:7f:80:d9:5e:d7:53:d3:93:1e:c4:24:
06:52:cb:32:c5:8c:15:c9:34:45:f4:71:c7:64:f7:
40:2b:e7:21:78:af:1f:7c:96:2b:40:f2:e9:2e:22:
de:6a:c9:8e:13:09:3b:cd:86:9f:87:7b:69:eb:ea:
b6:f3:a1:95:0a:7d:35:7f:1c:aa:28:c2:8e:c2:8c:
2b:06:ee:36:e2:e9:28:5e:e6:72:55:cd:7c:86:ad:
1c:2c:d7:b0:aa:3f:c2:8c:e2:ed:ed:51:33:0f:d0:
4b:b0:72:90:9e:86:a6:35:ff:a9:77:79:99:a8:08:
78:2c:7f:c0:6c:81:d9:6a:20:72:59:ab:4a:58:4c:
0c:21:79:4a:b9:2f:cc:0b:3d:22:57:ff:ab:67:25:
a2:20:c5:21:a0:0c:2f:f0:7a:6c:cd:14:8f:65:1d:
92:85:9e:f3:26:c8:84:e1:59:59:59:97:66:02:19:
2a:b9:40:0e:7b:43:e8:59:59:b3:fa:35:fe:bd:05:
7b:9f:ba:f0:91:75:6f:b9:67:64:c1:e2:2b:28:a7:
a4:36:57:5b:ea:8f:a9:ae:0d:75:ca:35:94:a7:0e:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:6D:33:0C:57:65:57:EA:A6:49:CD:D0:82:15:5C:9F:AA:32:E8
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/6097B302659911ED8981D533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:78:9e:e4:42:28:a4:0e:86:9e:2d:09:88:21:c3:d2:8f:0a:
07:de:8b:25:28:17:91:37:d8:37:6d:5e:25:52:ad:da:86:7e:
a0:aa:3c:82:70:a1:e7:8e:80:fd:5c:43:1b:d4:25:3a:33:e0:
88:a6:ee:18:d2:da:da:5c:99:f4:b0:81:26:9d:67:13:e7:2a:
a5:ff:44:98:5c:8f:1b:f9:7a:a4:ad:76:c5:ee:32:c9:ae:1e:
98:57:be:49:4a:68:b9:63:54:30:a2:8c:52:94:f7:98:f1:9b:
36:91:53:63:35:9e:cd:e3:b7:20:e7:7f:f8:c4:3f:a9:a6:a1:
ae:84:6b:21:0b:61:2a:82:77:20:0b:0e:a8:48:d1:2f:75:c4:
e0:41:81:80:ea:a5:13:84:fb:a7:9c:5e:cb:96:83:cb:cd:d8:
46:2a:3a:d0:36:6d:81:32:d2:7a:bd:15:0c:85:57:f8:b0:3f:
7b:5f:5b:dc:d8:f1:3a:c0:fe:45:fc:b3:6e:96:10:e5:ae:0e:
c0:48:9a:b1:5b:6f:91:a5:a8:70:01:51:fc:ec:1c:44:98:a5:
eb:9c:c1:56:9e:a8:24:90:eb:b4:d9:94:3c:be:44:25:c2:f3:
f8:1c:ac:fb:80:1b:1b:f8:1b:7a:31:5a:a3:77:ef:71:0c:6e:
1f:0b:50:17
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjMwNDA2MjIzOTQyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJmNGEyZC1hNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUM1NZ8vvLQLZEHN/BjwaL1JStKWjpb0YahHkdNlTeVWf4DZXtdT05MexCQG
UssyxYwVyTRF9HHHZPdAK+cheK8ffJYrQPLpLiLeasmOEwk7zYafh3tp6+q286GV
Cn01fxyqKMKOwowrBu424ukoXuZyVc18hq0cLNewqj/CjOLt7VEzD9BLsHKQnoam
Nf+pd3mZqAh4LH/AbIHZaiByWatKWEwMIXlKuS/MCz0iV/+rZyWiIMUhoAwv8Hps
zRSPZR2ShZ7zJsiE4VlZWZdmAhkquUAOe0PoWVmz+jX+vQV7n7rwkXVvuWdkweIr
KKekNldb6o+prg11yjWUpw67NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO8AbTMM
V2VX6qZJzdCCFVyfqjLoMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvNjA5N0IzMDI2
NTk5MTFFRDg5ODFENTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncAAwDQYJKoZIhvcNAQELBQADggEBAEt4nuRCKKQOhp4t
CYghw9KPCgfeiyUoF5E32DdtXiVSrdqGfqCqPIJwoeeOgP1cQxvUJToz4Iim7hjS
2tpcmfSwgSadZxPnKqX/RJhcjxv5eqStdsXuMsmuHphXvklKaLljVDCijFKU95jx
mzaRU2M1ns3jtyDnf/jEP6mmoa6EayELYSqCdyALDqhI0S91xOBBgYDqpROE+6ec
XsuWg8vN2EYqOtA2bYEy0nq9FQyFV/iwP3tfW9zY8TrA/kX8s26WEOWuDsBImrFb
b5GlqHABUfzsHESYpeucwVaeqCSQ67TZlDy+RCXC8/gcrPuAGxv4G3oxWqN373EM
bh8LUBc=
-----END CERTIFICATE-----
Generated at Wed Dec 6 18:28:50 2023 by rpki-client on console-fra.rpki-client.org