Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/02F4C2F6AC4011ED80AECB5EC4F9AE02.roa
File: 02F4C2F6AC4011ED80AECB5EC4F9AE02.roa (raw, json)
Hash identifier: HyRGOWu658IlmcXkjo4zHyNnVgfIa+FgGctOgWHW/Dw=
Subject key identifier: DC:11:43:09:42:F1:7C:95:76:94:6A:EC:03:E5:3E:48:83:9D:B9:07
Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial: 02
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/02F4C2F6AC4011ED80AECB5EC4F9AE02.roa
Signing time: Tue 14 Feb 2023 08:17:25 +0000
ROA not before: Tue 14 Feb 2023 08:17:25 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 141421
IP address blocks: 103.84.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Validity
Not Before: Feb 14 08:17:25 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63eb4394-ced6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:27:fd:46:cd:ca:b8:54:47:cd:1a:3c:e1:
df:a2:1c:94:d3:18:f0:85:6f:32:12:7a:0e:1d:98:
3d:47:62:c3:43:c0:4d:15:80:d6:7e:a9:0b:ba:69:
71:eb:c4:7f:2e:aa:de:7c:2f:01:af:ef:70:51:1b:
5b:6a:81:f1:c5:39:6f:48:d2:f9:c0:0a:c5:83:96:
0a:92:44:58:1e:92:ef:1a:41:b4:46:36:ad:9d:fc:
7e:36:9e:86:80:1e:18:b5:fc:5a:57:2e:9b:16:82:
03:26:43:65:65:03:96:e0:1a:fc:20:f2:3a:35:3e:
13:e1:32:e9:e6:18:2e:7a:37:0c:5a:fc:a0:ce:e8:
5d:eb:5a:02:df:72:92:62:8f:dd:55:da:4f:74:f1:
47:38:3e:67:5e:06:e0:e4:ac:16:cc:50:92:44:bc:
ad:c6:f2:96:b9:f2:0d:ce:45:56:20:12:55:12:2d:
9b:33:78:62:d6:54:45:a7:4f:d9:c3:8e:aa:53:d5:
f3:d0:c5:df:dc:a9:47:79:f4:a8:31:b5:ba:c4:ba:
fd:1a:f0:34:a4:2c:6a:f9:ff:b6:09:ef:fd:ea:9e:
78:d6:bd:08:f1:25:ce:a0:6c:8b:2d:91:2b:21:69:
ae:df:46:2b:b3:c2:5e:be:9a:47:bf:5d:23:9f:90:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:43:09:42:F1:7C:95:76:94:6A:EC:03:E5:3E:48:83:9D:B9:07
X509v3 Authority Key Identifier:
keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/02F4C2F6AC4011ED80AECB5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.56.0/23
Signature Algorithm: sha256WithRSAEncryption
85:81:ba:37:45:79:9a:9b:b4:e6:db:b2:78:7c:81:de:f7:af:
ea:19:66:a3:e9:b3:bd:ba:b7:d1:8f:2d:2b:69:82:b4:43:ab:
ee:8b:ee:c2:af:8c:c5:45:ff:cf:36:17:cd:5d:ac:cc:a5:49:
c8:fa:68:8a:6b:fc:03:4d:23:00:cb:ad:bf:17:b5:6b:7d:2f:
06:f2:db:b5:8f:77:dd:2e:87:14:77:40:bb:3e:e0:1a:d7:5f:
ed:b2:a3:e2:77:5a:31:bd:f5:23:f9:22:bc:4a:a5:7a:63:27:
2e:d6:f0:7e:4e:9c:a1:52:f8:2c:ef:08:88:7e:5c:84:cc:6d:
47:78:2f:f2:f8:f6:db:ef:4e:01:7b:87:2e:0e:39:4b:1e:37:
b6:a8:f7:df:83:16:64:1a:f6:14:2d:f5:82:8e:97:51:4e:3a:
69:1a:87:0b:21:e4:0d:3f:a1:58:78:7b:00:6a:f3:2f:72:9b:
28:bd:fb:36:c5:98:eb:f3:6d:ea:15:84:46:5b:38:bf:87:ed:
97:a3:e9:15:61:ef:f0:e9:7a:13:e0:0a:1d:4c:d2:da:bf:d3:
32:6b:65:9a:95:30:9e:88:ad:42:84:30:e7:65:d6:95:cd:af:
17:3b:1c:f5:10:2c:7d:3f:ea:ac:7f:16:d8:30:4e:6f:75:97:
e6:58:8f:b5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTA1RDExMC8GA1UEBRMoMjA0MUE1NDgyMTZGRjAxNDg5NEI3OUNDOUZENzczMTFC
QzdDQTMxNzAeFw0yMzAyMTQwODE3MjVaFw0yNDA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzZWI0Mzk0LWNlZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtNSf9Rs3KuFRHzRo84d+iHJTTGPCFbzISeg4dmD1HYsNDwE0VgNZ+qQu6aXHr
xH8uqt58LwGv73BRG1tqgfHFOW9I0vnACsWDlgqSRFgeku8aQbRGNq2d/H42noaA
Hhi1/FpXLpsWggMmQ2VlA5bgGvwg8jo1PhPhMunmGC56Nwxa/KDO6F3rWgLfcpJi
j91V2k908Uc4PmdeBuDkrBbMUJJEvK3G8pa58g3ORVYgElUSLZszeGLWVEWnT9nD
jqpT1fPQxd/cqUd59KgxtbrEuv0a8DSkLGr5/7YJ7/3qnnjWvQjxJc6gbIstkSsh
aa7fRiuzwl6+mke/XSOfkGW7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU3BFDCULx
fJV2lGrsA+U+SIOduQcwHwYDVR0jBBgwFoAUIEGlSCFv8BSJS3nMn9dzEbx8oxcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MDVELzM0QkY5OTA4QUMz
RDExRURCRDREMTM1RUM0RjlBRTAyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSUVHbFNDRnY4QlNKUzNuTW45ZHpFYng4b3hjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi8wMkY0QzJGNkFD
NDAxMUVEODBBRUNCNUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdUODANBgkqhkiG9w0BAQsFAAOCAQEAhYG6N0V5mpu05tuy
eHyB3vev6hlmo+mzvbq30Y8tK2mCtEOr7ovuwq+MxUX/zzYXzV2szKVJyPpoimv8
A00jAMutvxe1a30vBvLbtY933S6HFHdAuz7gGtdf7bKj4ndaMb31I/kivEqlemMn
Ltbwfk6coVL4LO8IiH5chMxtR3gv8vj22+9OAXuHLg45Sx43tqj334MWZBr2FC31
go6XUU46aRqHCyHkDT+hWHh7AGrzL3KbKL37NsWY6/Nt6hWERls4v4ftl6PpFWHv
8Ol6E+AKHUzS2r/TMmtlmpUwnoitQoQw52XWlc2vFzsc9RAsfT/qrH8W2DBOb3WX
5liPtQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org