Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa
File: 6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa (raw, json)
Hash identifier: K1RWcCLEGDrDNc6x1Bn06vdSsg9FOSkJcIRgTGwUnlg=
Subject key identifier: 32:28:59:1C:C5:15:6E:50:E3:55:48:C3:B8:6B:33:CC:8F:D9:1D:F8
Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial: 11
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa
Signing time: Mon 21 Aug 2023 08:55:28 +0000
ROA not before: Mon 21 Aug 2023 08:55:28 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 151489
IP address blocks: 103.233.176.0/24 maxlen: 24
103.233.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 14:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Validity
Not Before: Aug 21 08:55:28 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64e3267f-c593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:29:5e:51:a8:1d:9d:78:69:4d:ad:01:20:
9e:4b:2e:7f:4c:53:80:8f:37:d8:33:03:fe:5b:39:
22:1a:48:41:10:34:21:c9:e7:35:45:83:f2:2a:14:
8f:f9:c1:d9:fe:1a:4f:73:46:a2:47:8b:cc:3d:6a:
c6:f2:42:17:65:cf:57:74:cc:a7:fc:47:0e:b4:c4:
92:3e:3d:4e:3b:45:d5:39:f1:97:e0:f7:2c:56:1c:
20:e3:54:1c:78:21:6a:ef:36:29:b9:d6:66:8f:c0:
37:7f:4c:11:2c:cd:66:89:81:ea:a7:43:02:de:1a:
55:c0:cf:5d:03:c9:24:ad:f3:f0:d3:ba:d7:33:4f:
35:17:84:e6:64:98:be:63:20:1b:f6:20:33:04:a5:
48:f5:a1:04:61:12:c3:b7:26:4f:3a:c9:8f:0a:56:
64:9d:85:73:d1:b0:81:98:a9:2d:a2:2f:23:b7:c2:
34:ac:f8:e8:96:f2:e5:7e:28:98:a0:34:1a:67:dc:
b7:b8:bf:4a:c5:47:0d:80:f3:58:05:06:ed:08:61:
78:54:89:29:6d:c6:e4:ae:0a:09:1a:e5:ed:dd:a6:
f5:86:b8:75:fa:a3:8d:ce:48:fc:e5:32:68:c7:8a:
04:23:a1:ef:dd:82:05:2f:81:05:9f:61:ae:7e:77:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:59:1C:C5:15:6E:50:E3:55:48:C3:B8:6B:33:CC:8F:D9:1D:F8
X509v3 Authority Key Identifier:
keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.176.0/23
Signature Algorithm: sha256WithRSAEncryption
65:9b:d2:fb:db:eb:cc:e5:d0:a3:62:ad:26:1b:97:e1:b1:f3:
0e:75:10:6c:df:25:1d:8d:65:53:00:e8:a3:29:1f:52:0d:5a:
bd:5f:67:9c:2f:2a:c3:44:b1:fa:4d:0c:70:1a:45:0a:69:c3:
db:44:99:7a:cb:b2:62:23:d9:db:48:04:72:35:ae:8c:d9:c8:
83:40:d2:2e:eb:d7:db:8d:48:da:89:b1:f0:14:f7:3e:8b:8b:
69:d5:7d:dd:a4:65:ac:46:f8:eb:74:95:c4:8d:ce:e6:4e:2c:
5e:36:88:1f:47:09:d6:25:37:de:24:5d:11:2b:8b:ac:0a:74:
fc:3a:63:03:dd:23:b0:d2:b8:3d:33:88:e4:43:b9:d0:f5:87:
74:21:62:17:89:42:91:00:77:df:39:74:1f:9d:af:4c:08:fd:
e5:e2:e4:27:cc:41:4e:81:3b:61:df:4f:8a:e2:4c:dd:3a:1d:
fa:8f:f1:6f:fc:6d:83:cb:59:d5:c3:9b:55:55:c4:c3:dd:98:
dc:33:5f:4a:16:c9:8f:61:d4:10:4e:73:98:b5:ce:a0:3d:6b:
12:8c:91:ca:7c:cb:bb:17:8c:c9:76:24:92:ef:da:39:30:2b:
ed:61:45:4e:c8:17:b5:6c:7d:a4:94:8f:43:79:82:b0:b4:a3:
e9:b4:44:34
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QUM4NDExMC8GA1UEBRMoMkZFNkNDMEI5QTlEOTU1RTNFMkM1OUQ1RDlGOEVFOTE5
NzE4MDA2RjAeFw0yMzA4MjEwODU1MjhaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZTMyNjdmLWM1OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5gCleUagdnXhpTa0BIJ5LLn9MU4CPN9gzA/5bOSIaSEEQNCHJ5zVFg/IqFI/5
wdn+Gk9zRqJHi8w9asbyQhdlz1d0zKf8Rw60xJI+PU47RdU58Zfg9yxWHCDjVBx4
IWrvNim51maPwDd/TBEszWaJgeqnQwLeGlXAz10DySSt8/DTutczTzUXhOZkmL5j
IBv2IDMEpUj1oQRhEsO3Jk86yY8KVmSdhXPRsIGYqS2iLyO3wjSs+OiW8uV+KJig
NBpn3Le4v0rFRw2A81gFBu0IYXhUiSltxuSuCgka5e3dpvWGuHX6o43OSPzlMmjH
igQjoe/dggUvgQWfYa5+d9w1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMihZHMUV
blDjVUjDuGszzI/ZHfgwHwYDVR0jBBgwFoAUL+bMC5qdlV4+LFnV2fjukZcYAG8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQzg0L0RENUM5RUJDMkI4
NjExRUVBNjlGNEIxN0M0RjlBRTAyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFH
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTC1iTUM1cWRsVjQtTEZuVjJmanVrWmNZQUc4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi82Qzg5RjA1QTJC
OEYxMUVFOEJDRERDNkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWfpsDANBgkqhkiG9w0BAQsFAAOCAQEAZZvS+9vrzOXQo2Kt
JhuX4bHzDnUQbN8lHY1lUwDooykfUg1avV9nnC8qw0Sx+k0McBpFCmnD20SZesuy
YiPZ20gEcjWujNnIg0DSLuvX241I2omx8BT3PouLadV93aRlrEb463SVxI3O5k4s
XjaIH0cJ1iU33iRdESuLrAp0/DpjA90jsNK4PTOI5EO50PWHdCFiF4lCkQB33zl0
H52vTAj95eLkJ8xBToE7Yd9PiuJM3Tod+o/xb/xtg8tZ1cObVVXEw92Y3DNfShbJ
j2HUEE5zmLXOoD1rEoyRynzLuxeMyXYkku/aOTAr7WFFTsgXtWx9pJSPQ3mCsLSj
6bRENA==
-----END CERTIFICATE-----
Generated at Sun Sep 1 16:40:29 2024 by rpki-client on console-fra.rpki-client.org