Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/BCB96D96BBC711EC92440077C4F9AE02.roa
File: BCB96D96BBC711EC92440077C4F9AE02.roa (raw, json)
Hash identifier: VIpVEN53sflWFMPudyvauwx0X0SzLEPjtr/gvQOS95A=
Subject key identifier: 62:80:F4:79:27:5D:63:EB:35:8E:CD:52:0D:1A:21:13:16:EB:3A:B4
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 044A
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/BCB96D96BBC711EC92440077C4F9AE02.roa
Signing time: Thu 23 Mar 2023 06:12:54 +0000
ROA not before: Thu 23 Mar 2023 06:12:54 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 40065
IP address blocks: 43.229.153.0/24 maxlen: 24
43.229.154.0/24 maxlen: 24
103.20.222.0/24 maxlen: 24
103.20.223.0/24 maxlen: 24
103.225.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Mar 23 06:12:54 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=641bede6-e0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:7c:39:3c:fd:33:da:88:eb:ac:31:24:75:
7a:d0:13:cf:ae:62:86:cd:d9:d7:7f:e7:b1:68:58:
e9:c5:89:6b:df:0c:f0:59:fd:d0:fd:77:1f:ab:1b:
12:16:3d:e3:e0:5c:b6:20:06:73:0e:40:7a:24:62:
d8:20:8e:6e:dd:5d:b2:2d:2c:c6:56:c2:a3:15:bf:
05:a2:89:6c:88:bb:db:82:c3:b3:cc:02:0a:0d:66:
46:8d:52:14:25:c1:91:34:46:79:ff:28:d6:59:76:
26:b4:58:b1:42:2e:19:7a:4c:4f:b8:64:23:01:6e:
65:3d:cd:6e:1a:a3:c3:b5:3d:69:48:64:ee:65:2e:
8f:42:83:9d:5d:11:d2:6c:92:3f:26:78:25:a8:27:
b3:f9:32:ef:5b:3d:2b:99:55:5b:9a:9b:f6:88:c1:
7e:4c:0c:00:97:40:ad:fe:7f:b6:be:3c:24:2e:a4:
ac:8a:31:f0:11:c4:c3:d9:ac:45:b0:1a:0c:2f:94:
3d:29:28:39:91:7c:48:aa:23:4f:59:4e:b6:0e:69:
4f:7e:fc:3d:77:06:3d:46:f4:9f:7c:e7:ae:cf:c6:
ee:e6:24:cf:32:bb:dc:72:15:5f:bc:41:ca:c6:22:
40:c0:58:97:88:9c:8b:75:21:ec:43:1c:53:09:8a:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:F4:79:27:5D:63:EB:35:8E:CD:52:0D:1A:21:13:16:EB:3A:B4
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/BCB96D96BBC711EC92440077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.153.0-43.229.154.255
103.20.222.0/23
103.225.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:21:b9:b2:24:5a:6b:52:23:90:da:50:ea:46:eb:64:0c:b3:
04:9e:dd:cf:c0:a6:01:01:9d:c8:d7:1a:73:64:64:b6:be:a7:
dd:ca:80:6d:09:87:23:4f:58:4d:ed:83:c8:85:8a:43:40:30:
97:13:30:30:da:0f:ad:9c:21:f1:3a:09:d0:19:fc:33:3f:ce:
ea:02:2f:c1:67:04:b6:b4:61:c5:ed:c0:27:a3:a5:f2:88:f5:
6c:a8:34:06:d8:7d:31:6d:a6:f4:6f:f3:4b:0c:67:9a:15:2d:
8f:b5:d8:31:a8:83:61:71:4b:2c:97:31:6d:5c:1e:3e:5a:42:
4f:bb:e1:cf:d1:e2:1e:b8:cf:7f:47:99:2b:dc:56:11:5d:24:
f6:fa:47:27:e8:b2:45:cd:c5:d7:87:a6:8c:a1:e4:ff:cd:eb:
7f:83:0e:eb:49:45:3a:0b:5b:41:04:db:02:3b:9f:09:af:07:
bc:94:6e:c9:26:0f:11:f9:d3:85:e0:d8:51:c0:6a:43:9c:5f:
98:61:51:b8:47:67:79:e3:88:84:f8:85:e1:93:fc:80:3f:14:
90:58:ae:c7:15:06:40:05:6a:cf:63:73:41:f3:d7:e9:38:ec:
97:9d:5c:ea:da:7b:90:30:87:90:40:e2:b3:61:6c:b9:a7:60:
4a:23:60:ad
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3
RDgwQjA5MzQwHhcNMjMwMzIzMDYxMjU0WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDFiZWRlNi1lMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtF8OTz9M9qI66wxJHV60BPPrmKGzdnXf+exaFjpxYlr3wzwWf3Q/XcfqxsS
Fj3j4Fy2IAZzDkB6JGLYII5u3V2yLSzGVsKjFb8FoolsiLvbgsOzzAIKDWZGjVIU
JcGRNEZ5/yjWWXYmtFixQi4ZekxPuGQjAW5lPc1uGqPDtT1pSGTuZS6PQoOdXRHS
bJI/JnglqCez+TLvWz0rmVVbmpv2iMF+TAwAl0Ct/n+2vjwkLqSsijHwEcTD2axF
sBoML5Q9KSg5kXxIqiNPWU62DmlPfvw9dwY9RvSffOeuz8bu5iTPMrvcchVfvEHK
xiJAwFiXiJyLdSHsQxxTCYpbtQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFGKA9Hkn
XWPrNY7NUg0aIRMW6zq0MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy
RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQkNCOTZEOTZC
QkM3MTFFQzkyNDQwMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBowDAMEACvlmQMEACvlmgMEAWcU3gMEAGfhxzANBgkqhkiG9w0B
AQsFAAOCAQEAHSG5siRaa1IjkNpQ6kbrZAyzBJ7dz8CmAQGdyNcac2Rktr6n3cqA
bQmHI09YTe2DyIWKQ0AwlxMwMNoPrZwh8ToJ0Bn8Mz/O6gIvwWcEtrRhxe3AJ6Ol
8oj1bKg0Bth9MW2m9G/zSwxnmhUtj7XYMaiDYXFLLJcxbVwePlpCT7vhz9HiHrjP
f0eZK9xWEV0k9vpHJ+iyRc3F14emjKHk/83rf4MO60lFOgtbQQTbAjufCa8HvJRu
ySYPEfnTheDYUcBqQ5xfmGFRuEdneeOIhPiF4ZP8gD8UkFiuxxUGQAVqz2NzQfPX
6Tjsl51c6tp7kDCHkEDis2FsuadgSiNgrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org