Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1FCD204C3AD911EBB5A5874BC4F9AE02.roa
File: 1FCD204C3AD911EBB5A5874BC4F9AE02.roa (raw, json)
Hash identifier: E1EMymmaWpolUuHdAQFIfK9tW5BZbZMaceaBZaFkOtI=
Subject key identifier: A9:DA:A6:B3:F5:AD:11:C8:3E:AF:F5:1B:7F:20:07:0C:11:58:AF:93
Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial: 0596
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1FCD204C3AD911EBB5A5874BC4F9AE02.roa
Signing time: Thu 27 Apr 2023 00:41:11 +0000
ROA not before: Thu 27 Apr 2023 00:41:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140546
IP address blocks: 103.150.48.0/23 maxlen: 23
103.150.48.0/24 maxlen: 24
103.150.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1430 (0x596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Validity
Not Before: Apr 27 00:41:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6449c4a7-6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:99:51:2b:80:67:fc:23:a1:95:37:e8:45:
84:38:5a:d8:d5:1d:8c:e8:30:7f:bd:e2:80:8f:cf:
39:c2:0c:c8:f3:c7:10:8b:d9:0c:f0:98:e1:55:16:
af:7e:e1:9a:2f:00:36:dc:5b:08:80:48:a7:0c:e5:
f3:05:5f:b1:65:b8:b5:5d:ee:60:e9:90:5c:78:4c:
e9:1c:de:46:c0:50:99:f8:1d:ad:2e:8e:25:95:97:
4a:b2:6f:1d:98:e7:23:3a:e2:1c:9a:17:e7:a5:f9:
83:4b:66:49:77:65:9e:e6:99:7c:d5:a3:ae:6f:2d:
a1:10:50:b8:23:cb:aa:25:72:3e:7d:01:0b:bf:85:
c4:ff:3f:91:10:40:94:1d:9e:46:1c:d1:07:c0:b3:
d9:5b:05:6c:29:98:32:19:f4:11:af:4e:1e:d3:9a:
04:62:c1:49:2a:e3:72:b3:c3:3b:91:e2:b0:e7:d5:
f0:c3:6f:2a:d7:2b:08:6c:d8:dc:bc:26:49:bc:72:
bb:19:e2:af:4d:7b:f0:a6:ba:6d:3b:60:c7:3c:61:
ff:07:f2:9e:f2:c6:03:1c:05:92:92:f8:ee:af:93:
11:66:17:f8:57:85:0e:2f:ae:19:90:8e:19:92:c9:
27:02:66:b5:86:79:28:de:bc:5b:a7:a6:e5:2c:20:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:A6:B3:F5:AD:11:C8:3E:AF:F5:1B:7F:20:07:0C:11:58:AF:93
X509v3 Authority Key Identifier:
keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/1FCD204C3AD911EBB5A5874BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.48.0/23
Signature Algorithm: sha256WithRSAEncryption
79:70:23:6d:b3:92:b8:ce:40:f7:82:17:94:d9:79:7f:7a:08:
b5:fe:e4:16:3c:84:cb:61:c5:de:d6:a0:f5:ed:10:fa:cc:42:
b5:5a:4b:94:bf:89:a3:17:54:b4:32:9d:27:91:28:7d:cc:a5:
ec:ca:e0:41:c1:55:4e:64:d7:d2:fe:c4:08:8f:9e:e4:a0:81:
3a:9b:3f:24:2a:04:b5:89:61:46:ef:67:cf:de:f9:be:88:1e:
ec:09:eb:bc:01:b3:b5:fd:01:64:a0:78:f5:ad:8d:73:df:dc:
9a:cd:7c:3a:1f:eb:f2:48:dd:5e:59:52:47:b5:f3:5c:51:84:
61:3a:cf:9a:b4:04:9c:7b:33:3d:31:12:dc:43:bb:68:76:1c:
a0:6c:bb:ff:b6:22:05:36:f1:07:24:dd:15:b6:fd:c3:df:40:
f5:26:06:a9:47:cf:fc:0a:bd:f9:12:c4:90:cd:e8:20:77:62:
5a:00:e6:2d:c3:85:3d:4a:bd:e2:9c:5b:a7:d6:c4:58:10:a9:
ff:a0:cd:a8:7f:13:11:62:e1:4a:de:ff:d7:14:55:56:50:bb:
f6:d2:68:9f:fa:66:45:be:b4:69:f5:af:78:13:f9:7c:73:3d:
40:52:c0:e4:18:8c:2b:db:b8:c6:6e:4e:e1:4a:e7:b5:05:3d:
51:83:fc:5b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx
RjcxNjVDREMwHhcNMjMwNDI3MDA0MTExWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDQ5YzRhNy02NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6AaZUSuAZ/wjoZU36EWEOFrY1R2M6DB/veKAj885wgzI88cQi9kM8JjhVRav
fuGaLwA23FsIgEinDOXzBV+xZbi1Xe5g6ZBceEzpHN5GwFCZ+B2tLo4llZdKsm8d
mOcjOuIcmhfnpfmDS2ZJd2We5pl81aOuby2hEFC4I8uqJXI+fQELv4XE/z+REECU
HZ5GHNEHwLPZWwVsKZgyGfQRr04e05oEYsFJKuNys8M7keKw59Xww28q1ysIbNjc
vCZJvHK7GeKvTXvwprptO2DHPGH/B/Ke8sYDHAWSkvjur5MRZhf4V4UOL64ZkI4Z
ksknAma1hnko3rxbp6blLCA4NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKnaprP1
rRHIPq/1G38gBwwRWK+TMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB
RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjgwNzcvOTgwQ0E4RkUzQUQ3MTFFQkEyOTIxQTRBQzRGOUFFMDIvMUZDRDIwNEMz
QUQ5MTFFQkI1QTU4NzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnljAwDQYJKoZIhvcNAQELBQADggEBAHlwI22zkrjOQPeC
F5TZeX96CLX+5BY8hMthxd7WoPXtEPrMQrVaS5S/iaMXVLQynSeRKH3MpezK4EHB
VU5k19L+xAiPnuSggTqbPyQqBLWJYUbvZ8/e+b6IHuwJ67wBs7X9AWSgePWtjXPf
3JrNfDof6/JI3V5ZUke181xRhGE6z5q0BJx7Mz0xEtxDu2h2HKBsu/+2IgU28Qck
3RW2/cPfQPUmBqlHz/wKvfkSxJDN6CB3YloA5i3DhT1KveKcW6fWxFgQqf+gzah/
ExFi4Ure/9cUVVZQu/bSaJ/6ZkW+tGn1r3gT+XxzPUBSwOQYjCvbuMZuTuFK57UF
PVGD/Fs=
-----END CERTIFICATE-----
Generated at Mon Aug 7 07:42:00 2023 by rpki-client on console-fra.rpki-client.org