Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/CBD060C2571C11EE9C2C9143C4F9AE02.roa
File: CBD060C2571C11EE9C2C9143C4F9AE02.roa (raw, json)
Hash identifier: 6N1MoeU/31hWj82bFtZgmHHBIzJa5/lCKodL3FoUc6M=
Subject key identifier: DE:63:4F:6E:6A:C2:DE:2F:BB:2D:A3:92:A8:DC:A5:AD:A4:5B:DC:64
Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial: 0A
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/CBD060C2571C11EE9C2C9143C4F9AE02.roa
Signing time: Sat 23 Sep 2023 05:46:31 +0000
ROA not before: Sat 23 Sep 2023 05:46:31 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 202662
IP address blocks: 103.158.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 06:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Validity
Not Before: Sep 23 05:46:31 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=650e7bb7-807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:c6:60:cd:83:7b:3d:54:7f:26:53:f8:c2:
7e:ff:d8:e7:a7:10:06:c1:60:0d:e8:7f:0b:2b:e8:
b1:3e:7b:41:35:24:33:05:04:b1:3e:15:50:c6:a4:
83:6b:68:b3:c3:3d:c1:89:12:b1:7c:83:78:75:e3:
4e:b4:12:52:a1:5b:a0:c6:70:95:9f:43:22:a8:97:
e3:d4:2d:52:0c:3d:6a:2f:2d:1f:89:b3:9e:48:a4:
e1:82:31:71:c2:60:cd:4c:3d:29:db:db:d7:cb:2f:
0b:7a:f5:40:01:06:48:73:56:6e:23:c5:7c:01:0a:
cf:c7:35:b8:33:9b:43:34:15:80:f4:37:26:82:6b:
4a:79:50:d3:2a:36:c5:df:5c:11:13:d9:2b:e5:6b:
52:b1:cf:29:bb:d8:3a:7c:26:cd:38:ab:67:d2:55:
ac:63:cc:c5:5a:fc:4b:c5:84:e8:98:68:c8:bf:e1:
20:b9:bb:7c:08:39:8d:c2:02:b5:62:01:02:26:a7:
8f:f9:83:1d:82:d4:4e:ac:82:a1:f8:5a:98:a5:91:
90:8f:fd:b3:0e:fb:93:93:95:65:5d:f1:53:ea:b2:
23:81:b0:89:7f:26:3e:6b:c7:48:4e:25:6b:cd:03:
37:76:3a:f4:2f:90:91:d7:e2:dc:83:7d:56:90:e4:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:4F:6E:6A:C2:DE:2F:BB:2D:A3:92:A8:DC:A5:AD:A4:5B:DC:64
X509v3 Authority Key Identifier:
keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/CBD060C2571C11EE9C2C9143C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:85:30:7e:15:4f:73:03:c7:6e:a1:fb:8b:f6:8c:43:5d:41:
9a:d9:c5:3a:09:f6:8b:bf:1e:21:54:15:31:72:9d:ea:ff:66:
72:f0:56:b2:55:5c:21:56:87:9d:94:35:d9:58:7b:e6:47:99:
7a:c0:07:b6:b6:3a:8a:94:7e:37:63:5f:d9:92:eb:05:59:a4:
f1:12:1b:46:4d:39:e2:36:1c:83:5c:ab:23:c7:d9:ca:ec:7e:
5d:cf:b7:51:df:51:fc:48:0f:9e:2f:19:43:cf:34:94:4f:e3:
5b:2f:85:3e:8d:e1:c6:45:b3:48:51:43:15:c9:f2:4d:2f:31:
9b:02:09:90:04:77:41:44:20:87:25:ac:59:7e:d6:7f:ec:28:
67:c8:8d:76:01:9d:69:a5:c1:7c:84:8e:bb:7a:0f:57:74:48:
8a:ed:ae:d9:42:34:ab:6a:d5:e6:11:c4:08:bd:2e:65:ae:b6:
86:05:78:82:61:84:e3:ef:70:61:70:ad:33:2b:da:fb:18:62:
e3:0b:d0:fc:43:eb:10:6f:51:a2:42:d5:b1:62:f3:f3:63:e3:
9d:99:9c:82:24:9a:88:4b:f4:3e:e8:81:23:be:e1:78:b0:6e:
2e:82:c7:94:d5:14:49:98:a9:7b:e0:6a:7a:70:f6:dc:12:4f:
b4:da:08:cd
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NkNCMzExMC8GA1UEBRMoQUI0NURCRkMzNTU3N0YyN0M5OUZDRjQwQTM5QjM4NkIz
MjM1MEFEQTAeFw0yMzA5MjMwNTQ2MzFaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MGU3YmI3LTgwN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyKMZgzYN7PVR/JlP4wn7/2OenEAbBYA3ofwsr6LE+e0E1JDMFBLE+FVDGpINr
aLPDPcGJErF8g3h14060ElKhW6DGcJWfQyKol+PULVIMPWovLR+Js55IpOGCMXHC
YM1MPSnb29fLLwt69UABBkhzVm4jxXwBCs/HNbgzm0M0FYD0NyaCa0p5UNMqNsXf
XBET2Svla1Kxzym72Dp8Js04q2fSVaxjzMVa/EvFhOiYaMi/4SC5u3wIOY3CArVi
AQImp4/5gx2C1E6sgqH4WpilkZCP/bMO+5OTlWVd8VPqsiOBsIl/Jj5rx0hOJWvN
Azd2OvQvkJHX4tyDfVaQ5E/5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU3mNPbmrC
3i+7LaOSqNylraRb3GQwHwYDVR0jBBgwFoAUq0Xb/DVXfyfJn89Ao5s4azI1Ctow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2Q0IzL0E1RkQ4NEYyNTcx
QjExRUVCNDE4QUIzRUM0RjlBRTAyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTBYYl9EVlhmeWZKbjg5QW81czRhekkxQ3RvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9DQkQwNjBDMjU3
MUMxMUVFOUMyQzkxNDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeeUzANBgkqhkiG9w0BAQsFAAOCAQEAS4UwfhVPcwPHbqH7
i/aMQ11BmtnFOgn2i78eIVQVMXKd6v9mcvBWslVcIVaHnZQ12Vh75keZesAHtrY6
ipR+N2Nf2ZLrBVmk8RIbRk054jYcg1yrI8fZyux+Xc+3Ud9R/EgPni8ZQ880lE/j
Wy+FPo3hxkWzSFFDFcnyTS8xmwIJkAR3QUQghyWsWX7Wf+woZ8iNdgGdaaXBfISO
u3oPV3RIiu2u2UI0q2rV5hHECL0uZa62hgV4gmGE4+9wYXCtMyva+xhi4wvQ/EPr
EG9RokLVsWLz82PjnZmcgiSaiEv0PuiBI77heLBuLoLHlNUUSZipe+BqenD23BJP
tNoIzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org