Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B23458E4D53A11EDB199211BC4F9AE02.roa
File: B23458E4D53A11EDB199211BC4F9AE02.roa (raw, json)
Hash identifier: lir1ix6KRxpQIng16f+6q96hPqlOvk0xJ2yPITwJhu0=
Subject key identifier: 4F:FA:EE:A9:F4:66:52:2C:0C:AA:8A:F2:16:11:AE:36:4C:6B:63:58
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2647
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B23458E4D53A11EDB199211BC4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:13:19 +0000
ROA not before: Sun 06 Aug 2023 16:13:19 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 35913
IP address blocks: 103.192.179.0/24 maxlen: 24
103.196.20.0/24 maxlen: 24
103.196.21.0/24 maxlen: 24
103.217.253.0/24 maxlen: 24
103.217.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9799 (0x2647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:13:19 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc69f-44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:a4:66:78:ea:2c:c1:5b:15:ac:84:5d:6b:
3c:1e:b4:4b:c4:b2:c9:76:98:bb:8c:22:94:32:1c:
b5:80:eb:44:cf:52:c4:1e:0c:f0:50:28:14:60:0b:
b2:6b:d7:55:dc:f5:3c:b1:9d:40:18:df:79:bc:5b:
1a:ee:81:60:1d:00:9e:35:40:a8:47:b7:13:81:90:
69:0a:ee:ca:41:13:67:52:07:11:c2:9e:f7:ae:3f:
59:fa:da:05:fc:99:69:43:1c:bb:d3:4d:2a:5c:93:
31:0d:12:2e:e5:39:12:c9:21:c5:dd:5b:d2:cc:be:
93:2e:79:e1:ea:06:e8:a5:98:01:93:e0:ea:ba:96:
73:f6:3e:8b:ec:e6:35:ea:85:a2:cf:60:ba:ab:3f:
dc:6f:87:4b:db:4f:c4:26:d7:34:62:6a:68:1e:f7:
0d:b2:31:dc:62:05:ea:c9:e9:77:28:af:b3:4d:44:
9d:d4:e9:a9:4d:3a:af:13:65:3e:e6:e1:0d:bb:41:
4c:92:59:cd:af:de:23:c2:e9:3d:53:f3:8a:08:e6:
e9:31:60:a4:08:a3:b7:52:e8:47:9a:50:c8:46:11:
d8:e8:9f:0f:ff:eb:67:85:50:9d:69:07:77:c0:31:
91:88:d5:5d:fb:00:a9:e1:32:ad:a2:0d:11:d7:19:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:EE:A9:F4:66:52:2C:0C:AA:8A:F2:16:11:AE:36:4C:6B:63:58
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B23458E4D53A11EDB199211BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.192.179.0/24
103.196.20.0/23
103.217.253.0/24
103.217.255.0/24
Signature Algorithm: sha256WithRSAEncryption
83:57:b0:1c:a7:90:2c:a9:53:31:b8:61:3f:98:b9:04:fd:e6:
cf:f7:b8:03:1e:73:87:5a:64:69:e3:52:9a:84:eb:82:34:76:
c6:a4:d4:b0:d8:4d:7f:43:13:1b:d5:77:26:bc:3f:9d:06:a7:
fb:e4:ed:60:64:b1:57:ad:88:08:52:71:1b:6a:7b:67:57:54:
6e:ce:91:76:5c:c2:81:2c:62:37:68:f6:03:43:85:9c:0c:81:
b3:dd:3c:68:ab:be:c2:b1:34:79:32:7a:57:8b:fb:c9:4f:f4:
d7:9c:d6:85:0f:33:11:98:4e:31:89:14:21:6a:43:2d:3f:28:
9c:b8:62:9a:c0:83:cc:09:9b:10:6c:ca:9f:f2:cc:f9:64:0e:
a6:b2:89:43:a5:21:96:ac:d4:ee:5b:30:32:51:0f:2b:7f:5e:
1b:df:9d:dc:b7:c6:73:d4:23:8a:87:12:0b:39:9d:a0:9a:6f:
57:9e:32:35:fd:aa:2e:d6:98:05:bf:fb:05:55:7c:de:66:3d:
15:d6:5e:39:7a:71:9b:10:50:c6:49:15:0b:c3:fa:ad:84:03:
28:cf:36:e8:78:5a:14:ba:f9:31:53:92:6a:ed:19:d6:40:f9:
4f:97:b4:cb:e1:ef:86:16:ea:9d:b2:03:5a:ad:17:7a:a8:6b:
4a:92:48:fa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjMwODA2MTYxMzE5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNmYzY5Zi00NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu72kZnjqLMFbFayEXWs8HrRLxLLJdpi7jCKUMhy1gOtEz1LEHgzwUCgUYAuy
a9dV3PU8sZ1AGN95vFsa7oFgHQCeNUCoR7cTgZBpCu7KQRNnUgcRwp73rj9Z+toF
/JlpQxy7000qXJMxDRIu5TkSySHF3VvSzL6TLnnh6gbopZgBk+DqupZz9j6L7OY1
6oWiz2C6qz/cb4dL20/EJtc0YmpoHvcNsjHcYgXqyel3KK+zTUSd1OmpTTqvE2U+
5uENu0FMklnNr94jwuk9U/OKCObpMWCkCKO3UuhHmlDIRhHY6J8P/+tnhVCdaQd3
wDGRiNVd+wCp4TKtog0R1xnaJwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFE/67qn0
ZlIsDKqK8hYRrjZMa2NYMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQjIzNDU4RTRE
NTNBMTFFREIxOTkyMTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABnwLMDBAFnxBQDBABn2f0DBABn2f8wDQYJKoZIhvcNAQEL
BQADggEBAINXsBynkCypUzG4YT+YuQT95s/3uAMec4daZGnjUpqE64I0dsak1LDY
TX9DExvVdya8P50Gp/vk7WBksVetiAhScRtqe2dXVG7OkXZcwoEsYjdo9gNDhZwM
gbPdPGirvsKxNHkyeleL+8lP9Nec1oUPMxGYTjGJFCFqQy0/KJy4YprAg8wJmxBs
yp/yzPlkDqayiUOlIZas1O5bMDJRDyt/Xhvfndy3xnPUI4qHEgs5naCab1eeMjX9
qi7WmAW/+wVVfN5mPRXWXjl6cZsQUMZJFQvD+q2EAyjPNuh4WhS6+TFTkmrtGdZA
+U+XtMvh74YW6p2yA1qtF3qoa0qSSPo=
-----END CERTIFICATE-----
Generated at Wed Sep 6 18:07:01 2023 by rpki-client on console-ams.rpki-client.org