Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/E5BDFC2872CB11ED9E1ADD6FC4F9AE02.roa
File: E5BDFC2872CB11ED9E1ADD6FC4F9AE02.roa (raw, json)
Hash identifier: RQuHVGFBEf526ABBJsRnikzVslV9IETq3bDULmi7dIs=
Subject key identifier: 3B:12:64:32:71:F4:B5:C6:33:35:98:B2:BB:33:83:11:7B:55:F9:7F
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 034D
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/E5BDFC2872CB11ED9E1ADD6FC4F9AE02.roa
Signing time: Sat 11 Nov 2023 02:13:47 +0000
ROA not before: Sat 11 Nov 2023 02:13:47 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 146990
IP address blocks: 103.172.138.0/24 maxlen: 24
103.172.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 08:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Nov 11 02:13:47 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=654ee35b-1c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:4e:93:20:11:2b:44:32:24:d5:a3:19:ab:
ef:0f:2f:2b:f1:16:68:a8:a7:23:ad:76:ee:85:90:
a9:30:ad:8b:36:96:d2:3b:24:05:2a:9e:3f:04:55:
d4:41:dc:4c:75:ed:e5:ca:96:89:a2:65:22:3b:3d:
e4:d8:6a:32:a7:c9:2e:82:ab:ef:23:0c:3a:50:57:
d7:a5:ab:60:b8:64:a6:55:28:bd:57:94:c5:c7:8b:
c9:18:e9:16:81:0f:fd:ef:3e:48:fe:58:c9:42:0f:
8a:6e:b3:1c:74:4d:f3:78:d6:a6:0c:53:21:96:43:
e2:c9:91:b9:32:9f:da:26:8a:c9:15:5c:29:ae:22:
05:36:03:a8:b9:68:ab:44:06:bf:62:ea:a5:91:a9:
aa:2e:d3:62:cd:fe:13:50:d8:f4:93:50:c9:b9:ec:
08:58:df:ff:bb:4f:1d:b5:e5:ee:2b:bc:8e:6c:10:
cf:4d:ac:4a:ee:8a:e6:a8:c7:05:7d:94:fb:08:a1:
e5:2c:54:cb:62:f5:be:99:fb:60:e9:5b:06:32:86:
a6:65:4a:66:ca:64:2f:90:91:45:f3:fd:d4:43:35:
ab:e7:6e:e9:ca:bc:3e:11:4f:52:a9:54:89:92:a2:
ae:e0:d7:51:0b:1d:4c:62:f4:b2:92:9a:25:12:86:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:64:32:71:F4:B5:C6:33:35:98:B2:BB:33:83:11:7B:55:F9:7F
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/E5BDFC2872CB11ED9E1ADD6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.138.0/23
Signature Algorithm: sha256WithRSAEncryption
09:a8:3c:7c:5f:61:a9:31:d6:da:b1:d8:e3:fb:bb:15:d2:c2:
91:b9:43:99:f9:33:61:55:0d:14:35:28:19:ea:cd:76:83:c0:
f7:c4:68:45:70:42:97:39:25:5f:f4:c5:10:c3:85:c3:46:13:
f1:6e:c2:0e:7b:62:4e:c0:e1:b8:6a:94:a6:ab:56:66:9b:0d:
78:a7:a5:bb:7a:e1:84:3a:cf:c1:92:b2:29:5e:6d:0c:e6:43:
a4:8e:cb:cf:2b:7c:9f:64:f4:7b:b7:18:83:ac:f3:d4:b1:4d:
68:5b:df:ba:8f:43:d9:4b:a8:b9:0d:4a:25:03:f2:5c:3a:1d:
66:e3:e7:5b:6e:4e:d3:b7:b8:6d:07:91:53:09:ce:b4:f9:2c:
02:f3:1c:50:fe:5b:25:eb:a0:1a:d8:54:ab:c1:f3:05:ae:a8:
0c:70:85:ea:ac:76:58:a1:8d:56:53:aa:57:52:b2:4f:1f:be:
da:02:ed:dd:d3:95:13:ee:4e:04:83:37:fb:bb:87:01:5d:d4:
da:db:94:58:47:60:94:2b:65:08:b3:20:5a:72:1c:29:aa:c0:
e1:0d:d5:d5:5b:ac:cb:d6:46:ca:da:d0:fa:40:c4:64:e3:0a:
d0:8b:15:ea:fd:73:11:33:35:a4:b5:1a:b4:2f:d8:52:63:f3:
af:7c:c4:36
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy
RTBGMzUxNjAwHhcNMjMxMTExMDIxMzQ3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRlZTM1Yi0xYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4AFOkyARK0QyJNWjGavvDy8r8RZoqKcjrXbuhZCpMK2LNpbSOyQFKp4/BFXU
QdxMde3lypaJomUiOz3k2Goyp8kugqvvIww6UFfXpatguGSmVSi9V5TFx4vJGOkW
gQ/97z5I/ljJQg+KbrMcdE3zeNamDFMhlkPiyZG5Mp/aJorJFVwpriIFNgOouWir
RAa/YuqlkamqLtNizf4TUNj0k1DJuewIWN//u08dteXuK7yObBDPTaxK7ormqMcF
fZT7CKHlLFTLYvW+mftg6VsGMoamZUpmymQvkJFF8/3UQzWr527pyrw+EU9SqVSJ
kqKu4NdRCx1MYvSykpolEoZn2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDsSZDJx
9LXGMzWYsrszgxF7Vfl/MB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2
NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUYzNUIvRTAxMDE1OEE1NjRFMTFFQzg1ODg1OTE0QzRGOUFFMDIvRTVCREZDMjg3
MkNCMTFFRDlFMUFERDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrIowDQYJKoZIhvcNAQELBQADggEBAAmoPHxfYakx1tqx
2OP7uxXSwpG5Q5n5M2FVDRQ1KBnqzXaDwPfEaEVwQpc5JV/0xRDDhcNGE/Fuwg57
Yk7A4bhqlKarVmabDXinpbt64YQ6z8GSsilebQzmQ6SOy88rfJ9k9Hu3GIOs89Sx
TWhb37qPQ9lLqLkNSiUD8lw6HWbj51tuTtO3uG0HkVMJzrT5LALzHFD+WyXroBrY
VKvB8wWuqAxwheqsdlihjVZTqldSsk8fvtoC7d3TlRPuTgSDN/u7hwFd1NrblFhH
YJQrZQizIFpyHCmqwOEN1dVbrMvWRsra0PpAxGTjCtCLFer9cxEzNaS1GrQv2FJj
8698xDY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org