Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/85A0BC3C270811EC8E7E427CC4F9AE02.roa
File: 85A0BC3C270811EC8E7E427CC4F9AE02.roa (raw, json)
Hash identifier: pUD8GeCWySG971Lb87bxYc3USHPzctEfEuw3QVxHxvE=
Subject key identifier: 92:35:AB:72:90:2D:E3:CC:1E:69:EC:EE:13:54:7A:AD:59:79:C7:31
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 0323
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/85A0BC3C270811EC8E7E427CC4F9AE02.roa
Signing time: Sun 29 Jan 2023 22:12:18 +0000
ROA not before: Sun 29 Jan 2023 22:12:18 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 134711
IP address blocks: 103.12.188.0/22 maxlen: 22
103.46.220.0/22 maxlen: 22
103.197.144.0/22 maxlen: 22
220.158.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Jan 29 22:12:18 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63d6ef41-07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:5c:1e:a9:6a:62:34:a4:86:d6:b0:f5:ea:
72:42:b5:a5:d9:09:49:82:bb:38:30:fa:76:3b:2b:
d0:c4:d7:f1:5b:90:f7:ac:81:45:6d:2b:f5:4f:dd:
f6:94:51:01:25:42:dd:bc:fd:61:66:80:c9:61:1b:
23:a6:64:8c:68:f5:19:eb:74:19:78:40:fd:65:13:
cc:c5:be:33:8f:74:da:1b:58:5b:37:ea:a8:ad:65:
d7:df:04:4a:85:76:1d:df:36:6d:48:c9:90:64:71:
8a:58:25:17:aa:a3:ab:f1:3a:2f:59:78:05:f3:1c:
ca:2d:72:32:bd:bf:9b:06:9b:d8:8b:9d:dc:15:ee:
5e:27:f5:13:11:6f:27:6a:20:70:35:63:98:e1:da:
e4:c4:00:a9:e9:5a:fe:d4:c9:d1:98:2b:e0:05:02:
7e:35:10:89:c3:54:66:09:ec:d4:56:99:24:10:16:
e3:66:72:34:f5:98:04:aa:90:96:2b:5c:97:07:d4:
49:f3:3e:ec:08:32:63:41:48:49:71:2f:0c:25:d2:
a8:e2:cd:36:ac:11:19:ac:2c:9b:cd:2e:2c:81:4e:
ec:dc:7e:63:d3:eb:bd:96:94:a2:7a:8d:31:f7:d0:
6a:3b:ed:ad:59:c1:03:65:89:5e:9a:b0:0d:3b:b6:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:35:AB:72:90:2D:E3:CC:1E:69:EC:EE:13:54:7A:AD:59:79:C7:31
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/85A0BC3C270811EC8E7E427CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.188.0/22
103.46.220.0/22
103.197.144.0/22
220.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:83:68:6d:e5:b5:de:62:46:09:93:cd:d3:3c:9f:0f:56:23:
e5:bf:61:41:4a:b4:bc:be:8b:50:02:90:b2:1a:85:2e:3c:c4:
fe:28:fb:ce:6d:a8:41:33:4d:7e:28:c4:a4:4d:b2:63:03:7f:
cf:33:e7:17:55:61:00:d0:1a:04:f7:42:13:ee:ee:9c:d8:c6:
67:1d:87:6a:df:97:aa:9d:9e:36:30:c7:30:b0:9e:7a:9c:ec:
2b:ba:ca:b2:47:a3:94:73:e5:47:5d:b5:96:2a:12:d2:f6:ee:
18:f2:0b:8e:fe:71:67:69:f6:3e:38:16:d1:92:0e:38:b5:55:
17:3c:d0:6c:b8:e3:10:bb:33:f6:1e:5d:5c:31:11:06:d7:43:
01:b4:70:8b:a6:c5:eb:fe:5c:1b:1c:bb:62:0e:cb:e7:2e:52:
36:40:05:0a:a0:e1:91:a9:18:9d:df:d4:8f:e8:7c:e0:59:3b:
6f:eb:9b:a8:c0:cd:0b:61:d7:a3:2a:22:10:a5:4b:f5:ee:ff:
38:9a:db:53:e3:fa:ca:40:a6:e0:4d:a1:1d:8f:28:0e:d2:83:
e0:d6:eb:9f:52:58:f3:88:05:28:e3:d3:04:84:77:d6:ca:e4:
f5:8f:a5:a4:f0:fb:20:7d:b7:50:3c:87:31:de:60:a3:4a:71:
7a:25:2b:70
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE
OTU0MDFGN0YwHhcNMjMwMTI5MjIxMjE4WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2Q2ZWY0MS0wN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkFcHqlqYjSkhtaw9epyQrWl2QlJgrs4MPp2OyvQxNfxW5D3rIFFbSv1T932
lFEBJULdvP1hZoDJYRsjpmSMaPUZ63QZeED9ZRPMxb4zj3TaG1hbN+qorWXX3wRK
hXYd3zZtSMmQZHGKWCUXqqOr8TovWXgF8xzKLXIyvb+bBpvYi53cFe5eJ/UTEW8n
aiBwNWOY4drkxACp6Vr+1MnRmCvgBQJ+NRCJw1RmCezUVpkkEBbjZnI09ZgEqpCW
K1yXB9RJ8z7sCDJjQUhJcS8MJdKo4s02rBEZrCybzS4sgU7s3H5j0+u9lpSieo0x
99BqO+2tWcEDZYlemrANO7ZAZQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJI1q3KQ
LePMHmns7hNUeq1ZeccxMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2
RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0FFMTMvODkzNjM1NzgyNkZCMTFFQ0E3MTM1RDczQzRGOUFFMDIvODVBMEJDM0My
NzA4MTFFQzhFN0U0MjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAJnDLwDBAJnLtwDBAJnxZADBALcnrwwDQYJKoZIhvcNAQEL
BQADggEBAA6DaG3ltd5iRgmTzdM8nw9WI+W/YUFKtLy+i1ACkLIahS48xP4o+85t
qEEzTX4oxKRNsmMDf88z5xdVYQDQGgT3QhPu7pzYxmcdh2rfl6qdnjYwxzCwnnqc
7Cu6yrJHo5Rz5UddtZYqEtL27hjyC47+cWdp9j44FtGSDji1VRc80Gy44xC7M/Ye
XVwxEQbXQwG0cIumxev+XBscu2IOy+cuUjZABQqg4ZGpGJ3f1I/ofOBZO2/rm6jA
zQth16MqIhClS/Xu/zia21Pj+spApuBNoR2PKA7Sg+DW659SWPOIBSjj0wSEd9bK
5PWPpaTw+yB9t1A8hzHeYKNKcXolK3A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org