Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/2CA4C5F0911411EF8E30F854C4F9AE02.roa
File: 2CA4C5F0911411EF8E30F854C4F9AE02.roa (raw, json)
Hash identifier: u/xY5xXitllLaGuyMO57gu78ljqR5txYYedJJIHoDcM=
Subject key identifier: 8D:EE:2B:2B:6E:B7:9C:3E:1A:B5:A6:38:B9:99:4E:B3:07:07:EB:BF
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0ACA
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/2CA4C5F0911411EF8E30F854C4F9AE02.roa
Signing time: Wed 23 Oct 2024 07:55:31 +0000
ROA not before: Wed 23 Oct 2024 07:55:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55967
IP address blocks: 103.84.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2762 (0xaca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Oct 23 07:55:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6718abf2-b1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1a:23:13:96:12:6d:ac:9d:d6:f8:be:fb:8c:
1c:ca:bd:65:6b:bb:47:79:bf:c1:0d:fb:f4:ed:7d:
0f:24:20:87:2d:14:8f:19:f6:69:1c:5c:3c:37:5d:
fa:8c:d2:3f:da:32:a3:4f:5f:c1:0a:1b:6f:ea:c3:
f6:d2:18:55:a2:36:85:ac:81:c1:14:74:8b:01:62:
a9:a1:7d:a2:68:d7:73:76:9f:31:f6:5c:31:bd:ff:
fb:ef:18:af:37:8d:27:0c:d9:16:24:61:f1:38:00:
55:94:9c:21:89:9f:dc:4f:d8:38:4c:83:28:8d:d2:
b4:17:31:f6:94:ac:7c:ad:be:0a:b4:c3:2f:54:d3:
bb:3a:61:7e:65:8d:aa:b2:8d:e5:97:5e:25:47:86:
93:8b:d3:b1:f2:c3:c9:c0:63:c0:b9:10:18:fc:a4:
29:34:36:9b:1c:c5:86:61:5c:76:65:61:37:6b:34:
fb:25:ee:b9:94:98:92:fe:bb:da:12:19:37:96:3d:
2d:5b:f4:74:fb:3a:d0:a0:fb:85:9c:1a:51:f8:0f:
ff:b2:9d:49:30:4f:88:16:08:66:e7:30:54:23:28:
bd:d8:32:b0:9c:df:c6:e9:3f:5d:01:6f:52:38:e0:
5f:11:f5:b8:30:90:88:44:a7:d0:aa:b0:a8:57:de:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:2B:2B:6E:B7:9C:3E:1A:B5:A6:38:B9:99:4E:B3:07:07:EB:BF
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/2CA4C5F0911411EF8E30F854C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.110.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c2:d7:3d:4b:e6:5c:78:c3:29:f6:53:c0:a8:8a:6e:1a:e1:
70:7f:e9:73:97:3a:28:1f:6a:3d:6f:60:ee:f4:f6:b4:b9:52:
79:95:f4:6b:c6:ce:d1:79:c9:fc:21:f3:c4:51:9c:94:46:4b:
b5:4f:fb:a9:43:56:8f:8b:10:6a:bb:bb:51:27:88:32:0c:b0:
61:64:f4:19:80:63:33:e2:d0:16:a1:a6:65:5d:1b:96:0a:43:
34:88:1c:73:bf:25:3a:42:9a:f0:33:43:4d:f5:c4:9e:64:a1:
56:3e:8c:b8:c3:78:15:7f:a5:7c:92:3b:6c:df:d7:f4:b9:00:
13:a5:b4:7e:07:4e:75:f1:01:a3:d3:e7:f5:29:a2:30:ca:19:
17:49:a1:44:39:91:47:27:4e:05:92:d9:47:f5:39:11:d6:11:
25:6a:59:f6:22:16:da:8b:6b:03:e8:0a:6d:f7:06:64:51:2c:
ee:94:39:ac:ef:52:78:bb:39:61:a6:08:18:6c:15:45:c7:70:
b8:f3:0d:b2:cc:a4:63:e3:0a:02:18:6e:e7:eb:63:ce:65:2c:
73:54:bf:18:52:1c:45:c0:49:53:24:af:36:61:6b:fe:1a:e4:
b2:0a:ae:3f:e9:74:dc:d8:9d:11:21:76:0a:ca:d5:00:04:2d:
74:f0:11:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjQxMDIzMDc1NTMxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzE4YWJmMi1iMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6BojE5YSbayd1vi++4wcyr1la7tHeb/BDfv07X0PJCCHLRSPGfZpHFw8N136
jNI/2jKjT1/BChtv6sP20hhVojaFrIHBFHSLAWKpoX2iaNdzdp8x9lwxvf/77xiv
N40nDNkWJGHxOABVlJwhiZ/cT9g4TIMojdK0FzH2lKx8rb4KtMMvVNO7OmF+ZY2q
so3ll14lR4aTi9Ox8sPJwGPAuRAY/KQpNDabHMWGYVx2ZWE3azT7Je65lJiS/rva
Ehk3lj0tW/R0+zrQoPuFnBpR+A//sp1JME+IFghm5zBUIyi92DKwnN/G6T9dAW9S
OOBfEfW4MJCIRKfQqrCoV943zwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI3uKytu
t5w+GrWmOLmZTrMHB+u/MB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMkNBNEM1RjA5
MTE0MTFFRjhFMzBGODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnVG4wDQYJKoZIhvcNAQELBQADggEBAIjC1z1L5lx4wyn2
U8Coim4a4XB/6XOXOigfaj1vYO709rS5UnmV9GvGztF5yfwh88RRnJRGS7VP+6lD
Vo+LEGq7u1EniDIMsGFk9BmAYzPi0BahpmVdG5YKQzSIHHO/JTpCmvAzQ031xJ5k
oVY+jLjDeBV/pXySO2zf1/S5ABOltH4HTnXxAaPT5/UpojDKGRdJoUQ5kUcnTgWS
2Uf1ORHWESVqWfYiFtqLawPoCm33BmRRLO6UOazvUni7OWGmCBhsFUXHcLjzDbLM
pGPjCgIYbufrY85lLHNUvxhSHEXASVMkrzZha/4a5LIKrj/pdNzYnREhdgrK1QAE
LXTwES8=
-----END CERTIFICATE-----
Generated at Thu Nov 7 08:10:30 2024 by rpki-client on console-fra.rpki-client.org