Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/4E926296A5EB11EDA5D2314CC4F9AE02.roa
File: 4E926296A5EB11EDA5D2314CC4F9AE02.roa (raw, json)
Hash identifier: 9D3cBTRs4JimZHVz2iuE/40FYDh35SYV+eXEEIuxfUQ=
Subject key identifier: 97:4D:E1:7E:EC:D0:B4:A3:77:E4:65:19:6A:87:A8:66:39:6D:6C:37
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 02
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/4E926296A5EB11EDA5D2314CC4F9AE02.roa
Signing time: Mon 06 Feb 2023 06:55:57 +0000
ROA not before: Mon 06 Feb 2023 06:55:57 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 136516
IP address blocks: 103.82.94.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Validity
Not Before: Feb 6 06:55:57 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63e0a47d-43c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:b3:80:53:82:65:64:dd:47:8e:7a:3f:3f:
35:0f:05:08:4c:8f:a2:95:8e:91:58:6a:95:58:93:
3a:6e:42:7f:57:a5:38:23:38:5d:a0:2c:70:b7:1c:
d4:b7:18:90:61:d4:21:a3:74:2d:a8:ed:44:9b:88:
d0:22:5e:b4:94:37:97:55:26:f3:da:b8:de:06:2c:
bc:14:db:2d:4e:09:26:cd:9d:5b:7f:99:9a:fc:59:
5b:f4:c8:89:ee:08:51:5b:75:21:2b:09:41:b6:85:
d3:81:8f:1f:ad:48:02:d4:6b:7a:a4:e5:d5:81:00:
64:d8:34:a5:9b:3c:f5:06:20:3c:05:06:64:a2:7e:
ff:54:0e:22:a3:5a:60:6e:a0:7c:ce:60:df:c2:4f:
5f:e1:e7:e3:d6:78:fc:51:2a:f9:89:99:f3:03:71:
1a:b8:29:67:8a:e9:2a:73:69:42:06:4a:12:fe:c9:
17:81:19:7c:99:63:83:c4:08:88:9c:44:e4:4a:ba:
e0:42:df:bf:59:82:ec:cc:86:23:00:18:f8:33:74:
56:cf:1d:89:31:b4:04:2b:32:b3:3a:4f:e7:ed:8c:
8a:c4:c9:e5:b2:ec:e3:f9:75:12:7c:1c:f1:5f:a6:
49:28:56:56:91:13:57:ec:14:c2:b9:20:3d:9b:f1:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4D:E1:7E:EC:D0:B4:A3:77:E4:65:19:6A:87:A8:66:39:6D:6C:37
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/4E926296A5EB11EDA5D2314CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.94.0/23
Signature Algorithm: sha256WithRSAEncryption
28:d6:9f:6a:2c:56:69:90:de:b6:06:15:13:d9:91:4e:5f:cf:
e0:e6:5a:3d:58:40:dc:28:e5:57:d0:41:63:db:8b:ac:8a:78:
69:57:65:49:c3:3d:dd:75:07:3f:2c:77:a2:53:65:30:12:3c:
b7:1d:73:98:26:8b:40:23:58:1a:5b:7a:e4:8b:ab:b1:3d:89:
1f:62:c2:4f:8b:db:e2:31:0b:19:cf:c0:44:37:e4:9e:d0:d0:
54:54:50:31:08:1f:41:af:f2:51:a8:de:db:84:72:7c:81:da:
4d:ee:49:ee:36:ed:69:99:71:79:79:15:27:f6:1d:97:28:57:
b5:42:92:05:e2:c9:f9:a5:be:43:a5:48:50:8d:ce:20:e0:55:
27:5a:99:8d:b2:5b:92:c6:15:7f:ff:aa:f0:16:66:48:65:bd:
fa:34:e8:9d:3f:00:d1:49:91:bc:dc:0e:e7:46:16:58:ad:80:
be:2a:91:8a:9e:76:be:b6:96:68:09:ad:0f:4f:6c:e4:ec:29:
24:6a:0e:9d:74:18:1a:84:31:5a:0c:ca:14:f6:b2:17:d7:8d:
00:c1:7c:70:9e:7f:83:58:96:29:52:86:d2:33:62:72:d6:11:
6b:bf:bc:27:df:1e:a8:77:f6:31:e4:72:89:99:d5:50:66:5e:
a3:86:ca:73
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RDY1QjExMC8GA1UEBRMoNTgxMzMyRjVEM0VCODgyQTVDMjUyRkRGRDk4MEI2MEEx
QTM3OEU0MTAeFw0yMzAyMDYwNjU1NTdaFw0yNDAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzZTBhNDdkLTQzYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLS7OAU4JlZN1Hjno/PzUPBQhMj6KVjpFYapVYkzpuQn9XpTgjOF2gLHC3HNS3
GJBh1CGjdC2o7USbiNAiXrSUN5dVJvPauN4GLLwU2y1OCSbNnVt/mZr8WVv0yInu
CFFbdSErCUG2hdOBjx+tSALUa3qk5dWBAGTYNKWbPPUGIDwFBmSifv9UDiKjWmBu
oHzOYN/CT1/h5+PWePxRKvmJmfMDcRq4KWeK6SpzaUIGShL+yReBGXyZY4PECIic
RORKuuBC379ZguzMhiMAGPgzdFbPHYkxtAQrMrM6T+ftjIrEyeWy7OP5dRJ8HPFf
pkkoVlaRE1fsFMK5ID2b8eKPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUl03hfuzQ
tKN35GUZaoeoZjltbDcwHwYDVR0jBBgwFoAUWBMy9dPriCpcJS/f2YC2Cho3jkEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENjVCL0NGNENGMTNBQTVF
NjExRUQ4NzQzQTEyRkM0RjlBRTAyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2pr
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV0JNeTlkUHJpQ3BjSlNfZjJZQzJDaG8zamtFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi80RTkyNjI5NkE1
RUIxMUVEQTVEMjMxNENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdSXjANBgkqhkiG9w0BAQsFAAOCAQEAKNafaixWaZDetgYV
E9mRTl/P4OZaPVhA3CjlV9BBY9uLrIp4aVdlScM93XUHPyx3olNlMBI8tx1zmCaL
QCNYGlt65IursT2JH2LCT4vb4jELGc/ARDfkntDQVFRQMQgfQa/yUaje24RyfIHa
Te5J7jbtaZlxeXkVJ/YdlyhXtUKSBeLJ+aW+Q6VIUI3OIOBVJ1qZjbJbksYVf/+q
8BZmSGW9+jTonT8A0UmRvNwO50YWWK2AviqRip52vraWaAmtD09s5OwpJGoOnXQY
GoQxWgzKFPayF9eNAMF8cJ5/g1iWKVKG0jNictYRa7+8J98eqHf2MeRyiZnVUGZe
o4bKcw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org