Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/33FF50C6601611ED894DD02FC4F9AE02.roa
File: 33FF50C6601611ED894DD02FC4F9AE02.roa (raw, json)
Hash identifier: Aau/lAVFBQSjfKYJocyqGtnZDvR4wa/EhBEq8CNCLyU=
Subject key identifier: EB:84:DD:78:7A:30:52:48:7B:5B:DD:79:36:D2:04:59:33:C7:38:30
Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Certificate serial: 0BE2
Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/33FF50C6601611ED894DD02FC4F9AE02.roa
Signing time: Sat 04 May 2024 19:57:56 +0000
ROA not before: Sat 04 May 2024 19:57:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139053
IP address blocks: 103.214.82.0/24 maxlen: 24
103.214.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 06:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD
Validity
Not Before: May 4 19:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66369343-7e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:4d:a7:53:16:50:99:b8:44:19:0e:75:f1:
6d:a3:1a:95:9c:14:86:fa:c6:ed:e9:b6:c2:fa:1e:
54:6a:04:42:86:24:61:e2:8c:07:2b:63:30:40:fc:
87:d3:86:1d:47:6d:a4:d6:ef:ff:cc:b6:be:26:2d:
9a:c4:1a:18:87:1c:5c:f4:ce:02:38:60:19:a7:b6:
78:36:df:1c:7f:23:42:0b:5d:19:86:eb:81:0f:2d:
04:cc:ad:b6:e4:5d:76:ce:03:7d:b8:5c:00:00:f3:
02:8a:5f:17:af:4a:32:4a:2a:53:bd:b5:2a:1b:9f:
c3:f7:a1:3f:0b:32:35:74:76:10:32:b1:10:d7:67:
73:2a:50:42:e9:a0:70:03:4d:a6:3a:80:1b:28:9f:
41:bd:cb:24:97:30:c0:54:bc:b1:0b:10:6f:8a:b1:
e6:5a:dc:7e:59:e0:bd:97:6d:71:1e:6a:57:eb:b0:
27:f4:11:07:d1:df:0c:cc:a9:6d:4a:e3:ab:b9:e0:
fc:0a:91:63:f5:90:cd:2c:73:ae:10:97:8c:62:1b:
b1:dc:8b:da:43:87:5b:fa:3a:6e:a2:d1:e1:c8:8d:
f7:5b:cf:95:f6:d9:9a:80:77:98:f2:86:9d:f0:27:
3a:11:be:c4:08:8c:c8:10:c9:22:77:1d:48:2c:ff:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:84:DD:78:7A:30:52:48:7B:5B:DD:79:36:D2:04:59:33:C7:38:30
X509v3 Authority Key Identifier:
keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/33FF50C6601611ED894DD02FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:e5:20:b3:e1:25:13:e0:5b:d2:ea:0c:8a:68:e1:f9:79:28:
86:b9:4f:63:cf:45:22:98:d0:f8:ae:c1:bc:48:a9:82:2f:fa:
5a:0c:3e:ca:ec:60:88:f6:ff:d9:8b:b6:15:5e:40:d4:02:c4:
a3:df:8a:10:7c:f3:80:0b:ce:7d:f9:e5:f1:e3:71:55:47:1a:
a6:9c:ab:f8:75:a5:df:d2:50:a5:08:15:6e:2c:e9:80:c0:7c:
47:b4:86:ea:13:5f:cc:3b:f9:09:bd:f0:92:7a:df:98:ab:67:
94:ae:dd:31:76:c2:9e:c2:6f:21:b2:0e:24:88:db:fb:b4:32:
be:d2:1a:f9:29:47:16:70:29:88:96:bc:a8:cf:4c:ca:00:96:
0c:07:5c:b5:96:d1:d0:1a:fb:15:10:29:53:86:33:d4:c7:fa:
c7:47:2d:b7:aa:b7:44:63:98:98:d9:4f:9f:55:f2:9d:90:14:
80:5a:fa:49:67:6d:ac:88:2e:80:51:51:a5:21:12:c3:f9:f2:
fd:f6:93:78:4e:e2:22:b0:c6:9f:93:e4:e7:49:1e:e0:ba:74:
a6:e7:68:7b:93:74:05:c4:52:a9:b4:72:d6:16:c7:ca:14:53:
2e:ee:2d:b2:58:d1:6c:de:da:56:ce:33:de:9d:66:8c:4a:8a:
a8:dd:4b:e8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE
MTdGQTk2Q0QwHhcNMjQwNTA0MTk1NzU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM2OTM0My03ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUZNp1MWUJm4RBkOdfFtoxqVnBSG+sbt6bbC+h5UagRChiRh4owHK2MwQPyH
04YdR22k1u//zLa+Ji2axBoYhxxc9M4COGAZp7Z4Nt8cfyNCC10ZhuuBDy0EzK22
5F12zgN9uFwAAPMCil8Xr0oySipTvbUqG5/D96E/CzI1dHYQMrEQ12dzKlBC6aBw
A02mOoAbKJ9BvcsklzDAVLyxCxBvirHmWtx+WeC9l21xHmpX67An9BEH0d8MzKlt
SuOrueD8CpFj9ZDNLHOuEJeMYhux3IvaQ4db+jpuotHhyI33W8+V9tmagHeY8oad
8Cc6Eb7ECIzIEMkidx1ILP9ymQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOuE3Xh6
MFJIe1vdeTbSBFkzxzgwMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0
NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVCRTMvODBBRTEwQzYwNDUwMTFFQUJBODJDNDE1QzRGOUFFMDIvMzNGRjUwQzY2
MDE2MTFFRDg5NEREMDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn1lIwDQYJKoZIhvcNAQELBQADggEBAHrlILPhJRPgW9Lq
DIpo4fl5KIa5T2PPRSKY0PiuwbxIqYIv+loMPsrsYIj2/9mLthVeQNQCxKPfihB8
84ALzn355fHjcVVHGqacq/h1pd/SUKUIFW4s6YDAfEe0huoTX8w7+Qm98JJ635ir
Z5Su3TF2wp7CbyGyDiSI2/u0Mr7SGvkpRxZwKYiWvKjPTMoAlgwHXLWW0dAa+xUQ
KVOGM9TH+sdHLbeqt0RjmJjZT59V8p2QFIBa+klnbayILoBRUaUhEsP58v32k3hO
4iKwxp+T5OdJHuC6dKbnaHuTdAXEUqm0ctYWx8oUUy7uLbJY0Wze2lbOM96dZoxK
iqjdS+g=
-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org