Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E44E1552D3E311EDB0E7CA45C4F9AE02.roa
File: E44E1552D3E311EDB0E7CA45C4F9AE02.roa (raw, json)
Hash identifier: iQ70mtLh5wACv03QvnD2+LmEXaumkA16NjllSAu2uGU=
Subject key identifier: A7:81:92:36:92:C6:D6:9F:C6:87:8A:52:55:9C:EC:15:FB:D7:63:43
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 078B
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E44E1552D3E311EDB0E7CA45C4F9AE02.roa
Signing time: Thu 06 Apr 2023 22:39:41 +0000
ROA not before: Thu 06 Apr 2023 22:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 103.112.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Apr 6 22:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642f4a2d-a80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:75:53:d2:13:97:e3:e1:12:31:29:f5:32:
96:54:3b:cc:aa:c8:ed:30:3a:31:21:12:cb:94:42:
cf:8a:32:ff:7a:68:ab:20:92:42:f6:31:05:d0:b6:
b3:fb:0e:aa:f0:bd:95:98:01:7e:0b:8a:76:25:2b:
ed:83:83:9e:0d:de:ad:1d:ef:fd:32:80:db:17:81:
4c:57:e3:1e:e2:13:51:10:80:b9:93:a0:13:ef:8c:
51:75:69:00:ae:1c:9a:3a:33:9d:01:f1:8f:f6:38:
30:b9:44:05:bf:1e:31:be:29:5b:6b:1f:66:05:5f:
16:84:7e:d1:96:3d:24:5e:02:85:e4:ce:8e:a9:f4:
0b:aa:ef:4c:d3:ac:61:8f:2d:24:57:19:9d:f5:81:
ff:1f:92:09:df:26:a9:ef:a3:e3:ca:f1:86:16:7a:
71:5c:34:82:8c:54:b7:6a:3c:39:bb:fb:c7:d8:a4:
7b:08:a5:a5:77:b1:93:93:74:57:76:d3:0a:2b:51:
15:ad:27:89:da:e5:e6:e4:57:11:73:0f:68:1f:5f:
07:3b:ed:fd:1c:5a:68:20:24:67:86:1d:83:a1:59:
11:60:87:24:07:d1:0b:88:88:9b:d7:a7:30:34:12:
49:31:e3:0e:c1:2c:87:1a:d9:34:2e:5d:5d:52:04:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:81:92:36:92:C6:D6:9F:C6:87:8A:52:55:9C:EC:15:FB:D7:63:43
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E44E1552D3E311EDB0E7CA45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ab:ba:a0:65:c7:99:a8:2b:f9:84:a6:ae:e9:f6:28:69:8a:
7f:6a:84:32:52:43:ff:9d:c6:fb:f1:2e:2a:36:6a:5e:2e:56:
f0:a8:d3:c9:ab:4e:9c:4e:f8:fe:9d:0f:6c:5c:4a:ef:72:e4:
77:76:e7:dc:04:44:5f:f1:77:07:77:55:21:dc:d0:e2:38:c3:
84:5c:6d:63:89:10:fa:ff:f8:90:b2:5c:df:ce:a8:b3:bd:44:
fc:20:8e:bb:91:18:e1:41:f4:cd:b9:c9:7b:d6:58:21:38:2d:
8e:b3:81:70:9c:8a:7c:09:32:34:a9:40:34:ca:8f:fc:f4:fb:
2a:46:d5:85:1e:05:a7:3b:ec:c0:5f:c3:ac:e0:1a:8b:3f:39:
ff:26:d8:f3:ed:d2:0a:cb:79:83:01:6e:4b:7f:e8:b7:06:97:
6e:d9:74:3d:b7:58:e8:6f:f2:81:17:61:4a:27:74:9e:39:fa:
71:fe:76:e7:1c:fa:3c:d7:72:14:12:39:89:dc:69:dc:53:1b:
5f:54:3b:78:58:5d:85:65:eb:ac:5b:cc:12:3a:d6:c9:63:6c:
f7:40:be:54:bf:ac:9c:92:02:e8:c7:dc:87:3e:0e:de:d0:03:
79:a9:49:4d:e5:3e:c9:0b:70:71:b2:c8:8d:16:d2:30:39:f8:
b6:8b:e0:15
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE
RkRBMkNGRDAwHhcNMjMwNDA2MjIzOTQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJmNGEyZC1hODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwix1U9ITl+PhEjEp9TKWVDvMqsjtMDoxIRLLlELPijL/emirIJJC9jEF0Laz
+w6q8L2VmAF+C4p2JSvtg4OeDd6tHe/9MoDbF4FMV+Me4hNREIC5k6AT74xRdWkA
rhyaOjOdAfGP9jgwuUQFvx4xvilbax9mBV8WhH7Rlj0kXgKF5M6OqfQLqu9M06xh
jy0kVxmd9YH/H5IJ3yap76PjyvGGFnpxXDSCjFS3ajw5u/vH2KR7CKWld7GTk3RX
dtMKK1EVrSeJ2uXm5FcRcw9oH18HO+39HFpoICRnhh2DoVkRYIckB9ELiIib16cw
NBJJMeMOwSyHGtk0Ll1dUgROfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKeBkjaS
xtafxoeKUlWc7BX712NDMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw
OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvRTQ0RTE1NTJE
M0UzMTFFREIwRTdDQTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABncAEwDQYJKoZIhvcNAQELBQADggEBALeruqBlx5moK/mE
pq7p9ihpin9qhDJSQ/+dxvvxLio2al4uVvCo08mrTpxO+P6dD2xcSu9y5Hd259wE
RF/xdwd3VSHc0OI4w4RcbWOJEPr/+JCyXN/OqLO9RPwgjruRGOFB9M25yXvWWCE4
LY6zgXCcinwJMjSpQDTKj/z0+ypG1YUeBac77MBfw6zgGos/Of8m2PPt0grLeYMB
bkt/6LcGl27ZdD23WOhv8oEXYUondJ45+nH+ducc+jzXchQSOYncadxTG19UO3hY
XYVl66xbzBI61sljbPdAvlS/rJySAujH3Ic+Dt7QA3mpSU3lPskLcHGyyI0W0jA5
+LaL4BU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org