Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/B5EFCCB80E6E11ED88833034C4F9AE02.roa
File: B5EFCCB80E6E11ED88833034C4F9AE02.roa (raw, json)
Hash identifier: 2cdktTwb0NO1IdQLw2Kwg08eOrMY9NrPsB2VEgTWDDI=
Subject key identifier: 05:4E:AA:CA:65:19:81:0F:6D:39:2F:A3:88:7C:F6:31:09:26:3E:01
Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6
Certificate serial: 02
Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/B5EFCCB80E6E11ED88833034C4F9AE02.roa
Signing time: Thu 28 Jul 2022 12:13:38 +0000
ROA not before: Thu 28 Jul 2022 12:13:38 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 150142
IP address blocks: 103.191.240.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6
Validity
Not Before: Jul 28 12:13:38 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e27d72-ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:bf:4c:90:24:e8:c4:56:79:8c:6e:b0:b1:
27:07:5b:b5:bf:81:ec:11:95:8e:02:20:1b:0e:12:
93:a6:ae:22:ed:56:d7:51:53:de:22:a7:6d:15:b1:
95:c1:be:04:3d:94:e6:ca:17:99:e4:cb:f5:b7:74:
9a:f3:99:29:30:e9:e4:29:fb:53:b9:16:a8:d5:74:
7e:9f:e7:af:c5:fc:bf:d6:05:16:6e:ef:40:5c:56:
60:12:2c:1e:f2:0f:43:15:df:77:dd:29:23:9c:08:
6e:4f:d1:8a:25:6d:b6:37:da:bd:29:11:3f:40:b0:
9f:19:84:76:30:66:f5:aa:60:46:54:7b:6c:f3:e5:
df:23:07:61:9d:96:cc:4a:d9:67:8e:a7:a9:d7:3b:
33:33:f4:e5:67:2e:35:62:1e:04:f4:cc:5b:7b:90:
47:ad:98:60:74:54:b5:ed:c5:6e:b0:a4:b6:d0:ec:
2d:79:39:7e:70:59:ae:67:04:02:9f:01:c7:ea:af:
a1:d9:43:ff:87:82:3b:3b:2d:fd:dd:bb:ee:87:03:
43:7b:3a:76:fa:33:ee:86:73:10:a5:08:5c:b4:26:
38:1b:77:d8:e0:ed:eb:56:31:76:5a:79:ab:71:3c:
d5:17:ea:21:4c:e7:6d:47:7b:a0:b8:ee:d5:9c:69:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:AA:CA:65:19:81:0F:6D:39:2F:A3:88:7C:F6:31:09:26:3E:01
X509v3 Authority Key Identifier:
keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/B5EFCCB80E6E11ED88833034C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.240.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:9d:b1:9a:ea:ef:03:d9:0a:77:af:b3:de:6f:b6:05:87:f2:
bd:d0:89:0d:8c:67:40:2d:b1:79:8d:41:42:45:0f:b2:83:e0:
fa:44:6d:80:df:78:84:84:46:a2:0d:da:dc:a1:47:d6:39:8c:
10:40:19:12:d6:31:6b:5b:61:a0:02:65:50:bc:25:e5:25:a0:
11:47:f9:76:d6:08:a2:ce:1a:be:49:c3:d0:fd:7b:ea:98:35:
29:ae:2f:cb:a7:16:6a:d7:14:20:13:ab:1e:57:9d:1a:94:7c:
45:02:cc:8e:0f:2d:07:38:5d:2d:aa:10:f2:31:27:6c:83:e8:
0b:dc:eb:a1:a5:5f:b9:15:1d:ee:3b:f9:6c:a5:1b:88:97:5f:
54:40:3b:e9:6d:12:b8:76:d0:2d:5c:fd:0c:de:1e:dc:1c:f6:
e6:8a:e3:48:9f:20:a3:8f:37:35:27:a8:33:f1:09:cf:b1:df:
7c:ae:7d:2f:e3:89:e8:f6:41:3e:2d:5e:e3:50:73:5c:3c:bd:
ed:59:63:03:b4:16:35:52:c1:22:27:2f:cc:00:a3:9e:03:12:
23:70:0d:70:ae:97:94:79:04:84:10:ff:c9:8f:8a:1a:35:38:
0c:18:0e:e5:a8:d2:16:48:f0:16:1c:68:4f:22:31:00:26:6b:
be:ba:6c:d4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDgyQTExMC8GA1UEBRMoQzNCODJBMkY3NDUxRTY5NTZDM0ZBMzkzNDBEQzczMjJE
MEU3OENBNjAeFw0yMjA3MjgxMjEzMzhaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyZTI3ZDcyLWViYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4cb9MkCToxFZ5jG6wsScHW7W/gewRlY4CIBsOEpOmriLtVtdRU94ip20VsZXB
vgQ9lObKF5nky/W3dJrzmSkw6eQp+1O5FqjVdH6f56/F/L/WBRZu70BcVmASLB7y
D0MV33fdKSOcCG5P0YolbbY32r0pET9AsJ8ZhHYwZvWqYEZUe2zz5d8jB2GdlsxK
2WeOp6nXOzMz9OVnLjViHgT0zFt7kEetmGB0VLXtxW6wpLbQ7C15OX5wWa5nBAKf
Acfqr6HZQ/+Hgjs7Lf3du+6HA0N7Onb6M+6GcxClCFy0Jjgbd9jg7etWMXZaeatx
PNUX6iFM521He6C47tWcaet9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBU6qymUZ
gQ9tOS+jiHz2MQkmPgEwHwYDVR0jBBgwFoAUw7gqL3RR5pVsP6OTQNxzItDnjKYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwODJBLzI2REU2NEM4MEU2
QzExRUQ5NkM1QjAyRkM0RjlBRTAyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpL
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzdncUwzUlI1cFZzUDZPVFFOeHpJdERuaktZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi9CNUVGQ0NCODBF
NkUxMUVEODg4MzMwMzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe/8DANBgkqhkiG9w0BAQsFAAOCAQEAsZ2xmurvA9kKd6+z
3m+2BYfyvdCJDYxnQC2xeY1BQkUPsoPg+kRtgN94hIRGog3a3KFH1jmMEEAZEtYx
a1thoAJlULwl5SWgEUf5dtYIos4avknD0P176pg1Ka4vy6cWatcUIBOrHledGpR8
RQLMjg8tBzhdLaoQ8jEnbIPoC9zroaVfuRUd7jv5bKUbiJdfVEA76W0SuHbQLVz9
DN4e3Bz25orjSJ8go483NSeoM/EJz7HffK59L+OJ6PZBPi1e41BzXDy97VljA7QW
NVLBIicvzACjngMSI3ANcK6XlHkEhBD/yY+KGjU4DBgO5ajSFkjwFhxoTyIxACZr
vrps1A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org