Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/0FB1F9E0ECDD11EDBF51302FC4F9AE02.roa
File: 0FB1F9E0ECDD11EDBF51302FC4F9AE02.roa (raw, json)
Hash identifier: QOg19ibAgxhvyw025HKWm3S2TSUlTkG7vrJMM3NGsDU=
Subject key identifier: 95:8C:BF:06:BA:D4:C3:6F:B9:36:1B:46:03:E4:59:C4:D7:DC:C5:AD
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 047D
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/0FB1F9E0ECDD11EDBF51302FC4F9AE02.roa
Signing time: Sun 07 May 2023 13:42:51 +0000
ROA not before: Sun 07 May 2023 13:42:51 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 132422
IP address blocks: 43.229.152.0/24 maxlen: 24
103.48.169.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
150.107.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: May 7 13:42:51 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6457aadb-2fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:b7:26:51:6e:ea:cb:a3:28:44:a5:bf:05:
24:49:f1:7f:1f:da:dc:eb:55:b3:5c:90:7a:d6:28:
99:11:06:e5:27:8a:b0:4d:3b:71:c5:06:10:51:bb:
e2:5a:32:64:c8:47:4f:90:82:51:65:9f:fb:31:48:
53:f3:ee:09:c1:cf:80:31:b4:ac:d5:63:16:11:7c:
39:93:38:0b:52:6f:97:71:fa:d1:5c:10:07:85:1c:
d1:8a:33:95:47:05:d8:c2:5c:0c:4f:14:b4:76:49:
32:4c:73:da:6f:fb:99:47:36:9d:38:ee:aa:5b:f6:
65:62:f0:0b:eb:40:68:d4:b0:4c:36:d1:90:19:84:
04:9d:a4:15:06:13:6b:84:c9:1e:0b:25:cc:2f:29:
a1:49:ad:08:54:91:5b:9d:f4:76:48:f3:78:33:e0:
59:23:27:aa:b6:c3:00:0a:39:e9:14:01:73:78:c3:
4c:c5:a6:95:1a:89:5d:44:74:7b:9c:21:2d:7d:bf:
b0:cd:67:de:e7:c9:ac:d1:86:fb:d6:eb:12:38:a9:
7b:c0:a2:5a:36:a5:ac:7a:8d:94:d5:c5:25:7e:c1:
3c:c1:c2:63:84:05:df:34:a4:02:75:1b:f2:76:6e:
b9:44:ac:0a:32:a0:b1:66:99:b6:fa:9a:62:13:ea:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:BF:06:BA:D4:C3:6F:B9:36:1B:46:03:E4:59:C4:D7:DC:C5:AD
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/0FB1F9E0ECDD11EDBF51302FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
103.48.169.0/24
103.228.64.0/24
150.107.0.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0f:07:ea:73:4f:dd:82:7d:f9:8f:e6:b8:2f:2f:95:e4:eb:
7a:7c:1f:1e:3c:dc:53:86:ba:a0:31:2b:56:da:8f:43:02:6c:
03:8f:d5:7b:71:5b:5f:a3:97:8f:63:86:b2:3d:56:cb:e0:3c:
a1:71:6a:4d:92:b6:cc:70:3d:57:b4:df:d9:8b:09:86:74:b3:
dd:ae:cf:c5:a9:e4:fe:43:76:f9:e1:72:74:9f:14:a3:21:19:
b6:c7:d1:46:d7:27:bf:ad:d6:3c:92:97:ac:72:c4:09:65:36:
42:aa:fe:02:0f:33:ea:13:21:19:b8:ab:44:d1:79:67:23:02:
35:cd:78:b6:d8:18:4b:66:89:98:47:db:d2:23:a0:ce:e6:c3:
59:f3:c5:4a:02:e9:8c:9c:32:4a:81:20:38:1c:98:20:17:31:
8c:33:37:f8:bc:aa:10:78:3c:8c:8c:49:71:ed:6f:c8:56:b0:
1c:47:57:78:11:e5:4e:d9:96:b3:53:54:72:fd:29:71:94:95:
13:92:dd:98:ff:61:60:84:f6:6b:cc:55:97:d4:27:6a:af:9a:
2e:cd:72:4c:6f:c8:c8:c2:33:cc:cf:5e:fd:2f:f7:31:ec:73:
2e:36:db:f7:b7:32:6d:ae:c8:b8:ce:7e:09:3b:31:f3:54:02:
2b:94:4d:20
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjMwNTA3MTM0MjUxWhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDU3YWFkYi0yZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstW3JlFu6sujKESlvwUkSfF/H9rc61WzXJB61iiZEQblJ4qwTTtxxQYQUbvi
WjJkyEdPkIJRZZ/7MUhT8+4Jwc+AMbSs1WMWEXw5kzgLUm+XcfrRXBAHhRzRijOV
RwXYwlwMTxS0dkkyTHPab/uZRzadOO6qW/ZlYvAL60Bo1LBMNtGQGYQEnaQVBhNr
hMkeCyXMLymhSa0IVJFbnfR2SPN4M+BZIyeqtsMACjnpFAFzeMNMxaaVGoldRHR7
nCEtfb+wzWfe58ms0Yb71usSOKl7wKJaNqWseo2U1cUlfsE8wcJjhAXfNKQCdRvy
dm65RKwKMqCxZpm2+ppiE+r/1wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJWMvwa6
1MNvuTYbRgPkWcTX3MWtMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMEZCMUY5RTBF
Q0REMTFFREJGNTEzMDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAAr5ZgDBABnMKkDBABn5EADBACWawAwDQYJKoZIhvcNAQEL
BQADggEBAEQPB+pzT92CffmP5rgvL5Xk63p8Hx483FOGuqAxK1baj0MCbAOP1Xtx
W1+jl49jhrI9VsvgPKFxak2StsxwPVe039mLCYZ0s92uz8Wp5P5DdvnhcnSfFKMh
GbbH0UbXJ7+t1jySl6xyxAllNkKq/gIPM+oTIRm4q0TReWcjAjXNeLbYGEtmiZhH
29IjoM7mw1nzxUoC6YycMkqBIDgcmCAXMYwzN/i8qhB4PIyMSXHtb8hWsBxHV3gR
5U7ZlrNTVHL9KXGUlROS3Zj/YWCE9mvMVZfUJ2qvmi7NckxvyMjCM8zPXv0v9zHs
cy422/e3Mm2uyLjOfgk7MfNUAiuUTSA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org