Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7D7995B8592111EEB92AD234C4F9AE02.roa
File: 7D7995B8592111EEB92AD234C4F9AE02.roa (raw, json)
Hash identifier: Ej8tVNY0V15VumHN2gSdWiNw30oU1RM0UY/talNF2sc=
Subject key identifier: 13:C4:36:03:62:C8:EA:16:CC:7C:08:91:4C:EF:59:6B:46:BA:10:46
Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial: 15
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7D7995B8592111EEB92AD234C4F9AE02.roa
Signing time: Fri 22 Sep 2023 08:24:47 +0000
ROA not before: Fri 22 Sep 2023 08:24:47 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 212238
IP address blocks: 103.72.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Validity
Not Before: Sep 22 08:24:47 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=650d4f4f-72a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:90:25:c2:b2:cb:87:97:7f:b0:88:b8:62:
6d:8d:63:c5:6a:4a:b6:83:a2:b7:56:0b:9c:07:13:
47:4d:31:f7:f3:44:45:26:15:ee:44:af:7b:69:c0:
24:52:55:0d:c2:d7:f8:d9:0d:77:fe:76:a8:ea:76:
94:82:60:3e:79:39:09:ad:70:49:fa:9d:1f:19:cb:
de:b5:db:d1:e9:c2:1e:10:d7:08:cd:a5:b0:f3:03:
eb:45:5a:11:6c:c6:b1:1f:43:cb:0e:66:28:32:2a:
ba:80:4d:1a:cc:13:f8:80:ac:6d:97:78:f9:97:f5:
dc:5f:f5:cd:6d:f0:6d:a1:65:8f:49:22:5a:52:8a:
ce:46:a6:fe:82:bf:46:8d:fd:ba:19:40:50:67:94:
6d:4c:a4:b0:6e:4d:b1:62:12:e2:c9:64:c0:54:e5:
3b:66:ec:2b:0f:70:52:ba:ec:4b:b0:89:93:c1:c9:
22:e5:ac:a7:2c:7d:d8:cd:c2:fd:21:5c:ba:68:f8:
d0:e7:74:f7:33:f1:e5:25:66:da:0f:e5:4c:cc:3e:
14:84:9f:21:03:07:50:49:4f:44:e3:82:59:bc:f0:
04:41:9e:ed:1d:da:fb:5d:7e:48:3c:31:b2:93:77:
da:cf:c3:70:91:a8:1e:98:aa:56:3d:a5:f8:9e:2f:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:36:03:62:C8:EA:16:CC:7C:08:91:4C:EF:59:6B:46:BA:10:46
X509v3 Authority Key Identifier:
keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7D7995B8592111EEB92AD234C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.62.0/24
Signature Algorithm: sha256WithRSAEncryption
81:04:4d:ad:6c:38:03:24:89:c5:1e:84:be:13:d6:84:62:b1:
87:ae:fa:9c:4b:97:18:73:d3:fc:ac:0e:8c:35:4f:33:1f:1a:
a9:a2:f1:27:75:87:c5:49:50:15:79:21:96:c7:2d:15:e7:17:
16:22:fe:8d:16:8a:81:e9:f7:ec:17:ff:59:60:5c:d6:ee:dd:
1f:99:13:1b:09:1d:8c:08:d8:b1:36:cd:df:37:71:62:1f:5a:
ae:c9:e3:dd:df:7d:d2:13:ca:96:9b:d4:e0:09:6b:83:d3:f7:
f2:6a:9a:35:45:91:97:6e:c9:41:55:bb:62:31:7d:75:09:a6:
27:4f:1c:70:a7:45:af:c1:09:e1:e7:6c:84:8d:fb:58:cb:b5:
36:b7:2c:e6:5c:40:27:17:ef:17:8e:c7:fe:56:55:c2:2e:07:
e2:81:26:60:47:ac:9a:61:7b:e3:72:dc:46:7b:ee:8b:80:ac:
a8:35:a2:e0:ee:c1:4d:ea:5c:fa:ca:ea:5b:30:e9:7e:5a:09:
c5:a6:cf:36:03:78:c0:1d:2c:a8:96:1e:82:91:a8:39:13:ce:
6c:2b:f9:6a:02:8b:33:6c:2e:05:aa:1e:fa:33:7b:70:f9:2b:
85:5e:06:83:54:b7:ca:fd:ce:bf:9b:42:2b:96:64:dd:48:3e:
9d:53:af:b9
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzE1QzExMC8GA1UEBRMoRTc3MTMyRTRGRUFEMDRFRUQ0RkU5NDZENjA3QTBEQ0I1
N0E0MjA2NTAeFw0yMzA5MjIwODI0NDdaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MGQ0ZjRmLTcyYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrx5AlwrLLh5d/sIi4Ym2NY8VqSraDordWC5wHE0dNMffzREUmFe5Er3tpwCRS
VQ3C1/jZDXf+dqjqdpSCYD55OQmtcEn6nR8Zy96129Hpwh4Q1wjNpbDzA+tFWhFs
xrEfQ8sOZigyKrqATRrME/iArG2XePmX9dxf9c1t8G2hZY9JIlpSis5Gpv6Cv0aN
/boZQFBnlG1MpLBuTbFiEuLJZMBU5Ttm7CsPcFK67EuwiZPBySLlrKcsfdjNwv0h
XLpo+NDndPcz8eUlZtoP5UzMPhSEnyEDB1BJT0Tjglm88ARBnu0d2vtdfkg8MbKT
d9rPw3CRqB6YqlY9pfieLxaZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUE8Q2A2LI
6hbMfAiRTO9Za0a6EEYwHwYDVR0jBBgwFoAU53Ey5P6tBO7U/pRtYHoNy1ekIGUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MTVDLzVGMDcyNjM4NEYz
MzExRUU5NjZFMEY3MkM0RjlBRTAyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lH
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNTNFeTVQNnRCTzdVX3BSdFlIb055MWVrSUdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzE1Qy81RjA3MjYzODRGMzMxMUVFOTY2RTBGNzJDNEY5QUUwMi83RDc5OTVCODU5
MjExMUVFQjkyQUQyMzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdIPjANBgkqhkiG9w0BAQsFAAOCAQEAgQRNrWw4AySJxR6E
vhPWhGKxh676nEuXGHPT/KwOjDVPMx8aqaLxJ3WHxUlQFXkhlsctFecXFiL+jRaK
gen37Bf/WWBc1u7dH5kTGwkdjAjYsTbN3zdxYh9arsnj3d990hPKlpvU4Alrg9P3
8mqaNUWRl27JQVW7YjF9dQmmJ08ccKdFr8EJ4edshI37WMu1Nrcs5lxAJxfvF47H
/lZVwi4H4oEmYEesmmF743LcRnvui4CsqDWi4O7BTepc+srqWzDpfloJxabPNgN4
wB0sqJYegpGoORPObCv5agKLM2wuBaoe+jN7cPkrhV4Gg1S3yv3Ov5tCK5Zk3Ug+
nVOvuQ==
-----END CERTIFICATE-----
Generated at Fri Sep 22 13:40:28 2023 by rpki-client on console-ams.rpki-client.org