Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6B8E5002CB2A11E9BE40CC3FC4F9AE02.roa
File: 6B8E5002CB2A11E9BE40CC3FC4F9AE02.roa (raw, json)
Hash identifier: DZuAmZRlpPH5rNPb0SoTucbHVNB5DuptaT8XuHGjicU=
Subject key identifier: F0:D8:62:11:3D:1C:D5:C1:77:42:72:D2:B5:92:38:0E:96:31:18:D1
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 261D
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6B8E5002CB2A11E9BE40CC3FC4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:12:41 +0000
ROA not before: Sun 06 Aug 2023 16:12:41 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 136557
IP address blocks: 103.217.254.0/24 maxlen: 24
2402:9e80:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9757 (0x261d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:12:41 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc679-845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:0d:0d:9e:2f:17:fe:de:3f:34:9b:a4:6d:
02:3c:fa:51:1b:44:28:cf:96:5f:df:81:a3:79:f8:
e2:1e:1e:26:80:82:7d:33:ed:16:41:e5:ac:e4:c3:
59:37:d2:9e:8d:3e:e0:3a:4c:f9:c8:01:38:1f:c6:
3d:54:8f:b3:fc:e7:f3:65:aa:03:e2:04:5c:24:39:
cd:16:e8:b8:6a:2f:f8:6b:8f:59:b9:72:c8:7a:02:
c3:49:91:41:89:85:d9:bb:47:cb:1e:7b:f9:51:f7:
a9:77:90:5a:3f:0a:e8:af:80:2e:0f:29:d3:78:98:
67:f9:db:bf:af:52:31:11:cc:d9:e3:58:9e:2e:b2:
2a:12:9e:b7:61:4e:cc:da:19:ac:ba:33:fe:ba:5a:
20:67:50:75:02:0c:b8:3a:6a:24:b5:9f:b6:a2:d5:
1b:1e:e4:a6:b3:a8:3b:78:fe:57:96:6b:f4:76:68:
63:cb:69:e8:7b:7d:6b:92:c0:df:19:32:5b:17:ae:
3f:ec:fc:46:50:83:cf:4b:91:34:96:a6:f0:fe:b5:
d6:1e:3e:47:bb:9f:46:9a:6a:9e:93:a6:41:98:75:
dc:ae:f5:22:bc:fc:b3:7e:3f:c7:52:05:9f:f8:72:
34:aa:dc:00:39:77:cb:4f:3b:f6:37:d0:d4:c7:94:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D8:62:11:3D:1C:D5:C1:77:42:72:D2:B5:92:38:0E:96:31:18:D1
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6B8E5002CB2A11E9BE40CC3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.254.0/24
IPv6:
2402:9e80:6::/48
Signature Algorithm: sha256WithRSAEncryption
c8:70:1d:e4:4e:8a:04:85:a2:ac:ea:42:00:50:e8:67:99:cb:
26:c4:66:2c:40:e7:e3:ab:e8:6c:6a:9c:c5:5b:c2:bd:5a:4f:
71:f4:1c:3b:fe:1f:49:43:9f:1f:52:1c:76:2f:b7:e0:53:5c:
ed:bc:5a:6e:f8:d5:56:80:f0:30:a9:20:80:3a:21:c0:d1:35:
48:96:2d:80:83:0a:be:0a:89:4d:e3:ce:5a:1b:72:c0:ef:ad:
76:c7:bf:a0:b2:d3:ea:17:de:75:3d:45:dd:51:00:ce:fd:84:
39:0b:78:a9:e1:de:87:37:2c:9f:b9:56:5b:df:d0:56:8c:08:
d1:60:50:a5:60:2b:35:c0:9e:c9:61:5b:8f:6d:74:78:05:91:
47:9b:76:00:7d:63:a8:78:17:bd:e2:64:00:79:cf:5b:9b:b6:
9c:f2:99:8f:5f:96:1b:7d:1b:95:1f:6c:10:40:37:a8:ab:d6:
05:a6:05:02:40:24:44:7f:da:06:ac:a0:48:f3:23:00:0a:84:
7d:68:6a:b3:34:93:cd:ef:3e:d6:93:e5:0e:47:e8:88:8f:c8:
9f:7c:e0:bc:be:ca:2d:4e:ef:63:92:9a:17:4e:3a:7d:44:e3:
33:3e:a6:d9:85:3c:34:ed:6b:7a:d9:6c:c4:40:14:ab:3a:ae:
1d:7d:3b:72
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICJh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjMwODA2MTYxMjQxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNmYzY3OS04NDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWINDZ4vF/7ePzSbpG0CPPpRG0Qoz5Zf34GjefjiHh4mgIJ9M+0WQeWs5MNZ
N9KejT7gOkz5yAE4H8Y9VI+z/OfzZaoD4gRcJDnNFui4ai/4a49ZuXLIegLDSZFB
iYXZu0fLHnv5Ufepd5BaPwror4AuDynTeJhn+du/r1IxEczZ41ieLrIqEp63YU7M
2hmsujP+ulogZ1B1Agy4OmoktZ+2otUbHuSms6g7eP5Xlmv0dmhjy2noe31rksDf
GTJbF64/7PxGUIPPS5E0lqbw/rXWHj5Hu59Gmmqek6ZBmHXcrvUivPyzfj/HUgWf
+HI0qtwAOXfLTzv2N9DUx5RsFQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPDYYhE9
HNXBd0Jy0rWSOA6WMRjRMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNkI4RTUwMDJD
QjJBMTFFOUJFNDBDQzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABn2f4wDwQCAAIwCQMHACQCnoAABjANBgkqhkiG9w0BAQsF
AAOCAQEAyHAd5E6KBIWirOpCAFDoZ5nLJsRmLEDn46vobGqcxVvCvVpPcfQcO/4f
SUOfH1Icdi+34FNc7bxabvjVVoDwMKkggDohwNE1SJYtgIMKvgqJTePOWhtywO+t
dse/oLLT6hfedT1F3VEAzv2EOQt4qeHehzcsn7lWW9/QVowI0WBQpWArNcCeyWFb
j210eAWRR5t2AH1jqHgXveJkAHnPW5u2nPKZj1+WG30blR9sEEA3qKvWBaYFAkAk
RH/aBqygSPMjAAqEfWhqszSTze8+1pPlDkfoiI/In3zgvL7KLU7vY5KaF046fUTj
Mz6m2YU8NO1retlsxEAUqzquHX07cg==
-----END CERTIFICATE-----
Generated at Thu Feb 22 15:54:48 2024 by rpki-client on console-ams.rpki-client.org