Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/6DA6F23E7A1511EDB9C9C817C4F9AE02.roa
File: 6DA6F23E7A1511EDB9C9C817C4F9AE02.roa (raw, json)
Hash identifier: URf4gIf9EeV7/w2g5ax5WUw16wRvCPF6Anx5T7HVY5U=
Subject key identifier: A8:7F:A9:E4:7B:60:EA:1C:D2:90:1E:1B:6F:14:5B:DE:FA:9B:2E:7E
Certificate issuer: /CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Certificate serial: 0A83
Authority key identifier: 70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/6DA6F23E7A1511EDB9C9C817C4F9AE02.roa
Signing time: Thu 16 Feb 2023 20:17:01 +0000
ROA not before: Thu 16 Feb 2023 20:17:01 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 138660
IP address blocks: 103.132.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136655/serialNumber=70579F7F5F1B21DFC9DE667C6B3C21F16F87D572
Validity
Not Before: Feb 16 20:17:01 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63ee8f3d-c961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:a0:76:ee:e6:a4:ab:b0:7f:d4:25:c8:3e:
47:f1:08:ff:2c:8b:cb:9d:b0:9a:ed:17:d4:fb:70:
76:31:ad:31:dc:2e:14:e9:30:85:56:5a:d9:23:1e:
f7:7a:df:88:5f:48:9d:5c:b9:5e:d4:36:df:a8:23:
54:72:92:d9:66:04:9e:09:23:a0:bc:36:28:ec:fb:
df:57:86:e6:96:df:63:96:79:aa:de:b8:39:44:8f:
96:55:0c:8e:60:3e:a7:58:1c:bb:0d:57:d6:cb:7c:
52:cd:f0:6e:38:44:d3:4b:45:d1:e1:23:75:6a:41:
ce:06:fb:a2:e8:24:4a:3b:59:ee:44:18:47:a5:62:
1f:6d:58:cd:ad:8e:b8:d3:7b:0b:05:f2:94:58:6c:
f0:b1:41:38:b1:5a:03:e9:8e:17:f9:45:81:69:c9:
86:eb:16:d3:9a:35:ed:a9:42:70:bd:d7:0e:b3:e5:
78:d3:65:8c:c0:30:ac:72:d4:29:43:a3:c6:ac:ee:
6b:bb:1d:ee:c6:0c:97:b2:06:55:17:37:0d:d9:bf:
bd:0a:69:2f:fa:78:a6:95:c4:34:fd:87:99:aa:e2:
ff:47:1a:2b:9f:a4:16:62:19:dd:96:16:7f:b1:be:
ef:82:a4:6e:65:bd:a7:63:84:31:6d:25:7a:a7:a9:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:A9:E4:7B:60:EA:1C:D2:90:1E:1B:6F:14:5B:DE:FA:9B:2E:7E
X509v3 Authority Key Identifier:
keyid:70:57:9F:7F:5F:1B:21:DF:C9:DE:66:7C:6B:3C:21:F1:6F:87:D5:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/cFeff18bId_J3mZ8azwh8W-H1XI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFeff18bId_J3mZ8azwh8W-H1XI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136655/F707F4640A9811EABDCAA17CC4F9AE02/6DA6F23E7A1511EDB9C9C817C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:31:fd:f1:cf:58:50:f9:9e:9f:cf:10:c4:dd:d2:5f:10:e6:
ea:c3:77:cf:5f:22:1e:d1:ae:10:46:0a:15:b4:b3:b0:20:53:
d7:9b:40:9f:cb:fc:3b:71:e7:9e:06:74:fb:97:7f:41:f1:ba:
cd:e9:48:1f:45:0e:3f:f1:26:6a:56:25:14:32:84:85:82:c4:
fb:ce:5d:f0:d7:2d:5f:71:75:cb:6d:03:71:ca:28:04:56:1d:
b4:8b:6c:ef:02:64:1b:17:3c:af:84:41:35:ce:4c:c2:9b:b5:
8c:ec:ce:3e:09:c4:ee:b2:37:5a:4c:02:7c:cc:af:57:35:08:
74:5e:29:b7:c8:c3:07:71:48:05:e9:4f:c5:d0:d4:67:c5:8a:
7e:5c:b6:84:bd:4a:94:21:d9:67:af:35:2c:6d:41:f4:09:34:
3d:b6:70:6f:45:b9:dc:cc:f4:b9:9e:73:eb:40:99:2c:63:fb:
c2:14:d7:93:3f:67:20:7a:53:56:21:1c:95:e5:b3:d8:15:18:
e6:43:9c:37:22:74:b2:12:8c:3a:f2:4e:2e:26:72:e0:7a:93:
b7:77:47:b5:b1:f7:f8:e8:85:61:69:da:d8:d4:34:fd:12:4e:
53:1c:73:2f:7b:b1:19:43:6e:f7:e0:be:a2:ed:f6:b0:28:5f:
68:91:94:05
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY2NTUxMTAvBgNVBAUTKDcwNTc5RjdGNUYxQjIxREZDOURFNjY3QzZCM0MyMUYx
NkY4N0Q1NzIwHhcNMjMwMjE2MjAxNzAxWhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2VlOGYzZC1jOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3EOgdu7mpKuwf9QlyD5H8Qj/LIvLnbCa7RfU+3B2Ma0x3C4U6TCFVlrZIx73
et+IX0idXLle1DbfqCNUcpLZZgSeCSOgvDYo7PvfV4bmlt9jlnmq3rg5RI+WVQyO
YD6nWBy7DVfWy3xSzfBuOETTS0XR4SN1akHOBvui6CRKO1nuRBhHpWIfbVjNrY64
03sLBfKUWGzwsUE4sVoD6Y4X+UWBacmG6xbTmjXtqUJwvdcOs+V402WMwDCsctQp
Q6PGrO5rux3uxgyXsgZVFzcN2b+9Cmkv+nimlcQ0/YeZquL/Rxorn6QWYhndlhZ/
sb7vgqRuZb2nY4QxbSV6p6m67QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKh/qeR7
YOoc0pAeG28UW976my5+MB8GA1UdIwQYMBaAFHBXn39fGyHfyd5mfGs8IfFvh9Vy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY1NS9GNzA3RjQ2NDBB
OTgxMUVBQkRDQUExN0NDNEY5QUUwMi9jRmVmZjE4YklkX0ozbVo4YXp3aDhXLUgx
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGZWZmMThiSWRfSjNtWjhhendoOFctSDFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzY2NTUvRjcwN0Y0NjQwQTk4MTFFQUJEQ0FBMTdDQzRGOUFFMDIvNkRBNkYyM0U3
QTE1MTFFREI5QzlDODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhLEwDQYJKoZIhvcNAQELBQADggEBAF4x/fHPWFD5np/P
EMTd0l8Q5urDd89fIh7RrhBGChW0s7AgU9ebQJ/L/Dtx554GdPuXf0Hxus3pSB9F
Dj/xJmpWJRQyhIWCxPvOXfDXLV9xdcttA3HKKARWHbSLbO8CZBsXPK+EQTXOTMKb
tYzszj4JxO6yN1pMAnzMr1c1CHReKbfIwwdxSAXpT8XQ1GfFin5ctoS9SpQh2Wev
NSxtQfQJND22cG9FudzM9Lmec+tAmSxj+8IU15M/ZyB6U1YhHJXls9gVGOZDnDci
dLISjDryTi4mcuB6k7d3R7Wx9/johWFp2tjUNP0STlMccy97sRlDbvfgvqLt9rAo
X2iRlAU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org