Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/B58EA2B0646411EEB257BA27C4F9AE02.roa
File: B58EA2B0646411EEB257BA27C4F9AE02.roa (raw, json)
Hash identifier: 0Dc7tkdKiWXstJpyu3QaR6stqf0DyjgHGmqUCTvqXxk=
Subject key identifier: D2:C2:C9:E2:C2:61:97:C8:00:2C:D8:4E:34:63:8C:47:B3:8D:0D:7E
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 85
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/B58EA2B0646411EEB257BA27C4F9AE02.roa
Signing time: Fri 06 Oct 2023 16:23:40 +0000
ROA not before: Fri 06 Oct 2023 16:23:40 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137939
IP address blocks: 103.82.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Validity
Not Before: Oct 6 16:23:40 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6520348c-2b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:4b:b4:db:6d:b0:de:e7:94:33:2c:5b:ea:
b4:af:eb:a4:88:5b:bc:29:e2:5d:51:c2:be:48:48:
a5:36:6d:86:ba:87:05:c6:e1:9d:af:ec:60:2a:56:
d5:43:c6:91:54:c7:56:91:0e:a4:5a:50:22:51:be:
5d:5e:2b:23:d9:da:9d:30:dc:d8:d0:23:bb:bf:b7:
2e:96:36:48:92:6d:0d:47:0d:81:d4:41:a1:75:a9:
9e:7a:3e:8b:ea:f8:f4:9d:be:dc:fb:53:6e:29:a7:
8a:a0:ef:cc:37:79:24:ff:02:40:1f:75:c2:40:88:
45:42:d3:0d:ea:a5:da:9e:35:8d:fe:25:e4:fb:57:
60:1c:27:a0:b2:6c:5e:e1:4f:b3:3a:20:b3:d3:22:
19:08:c0:0c:19:c9:3e:69:ea:bd:da:e2:36:6c:5d:
b1:64:a8:7b:be:f7:e2:7f:88:28:6c:38:d3:a7:31:
2e:71:fa:f0:d1:da:ff:8c:ba:0e:45:ba:1b:c8:cb:
aa:d0:4a:10:cb:5d:33:0a:75:58:7c:91:a2:ad:50:
df:cc:8d:6c:5b:4a:1b:80:1f:50:4f:33:1e:db:eb:
bf:c1:f9:18:46:5a:5f:ea:3a:df:80:fc:e1:3c:5d:
e8:26:8f:f8:19:da:12:bd:74:3d:39:4c:7f:98:7a:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C2:C9:E2:C2:61:97:C8:00:2C:D8:4E:34:63:8C:47:B3:8D:0D:7E
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/B58EA2B0646411EEB257BA27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.95.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6e:00:37:93:61:27:55:d3:c3:d2:48:c0:5c:3f:28:b3:c1:
e2:f5:e9:f3:83:6b:d1:c1:5c:d3:15:03:37:a5:76:82:65:47:
cd:2a:11:9b:50:00:fe:92:b9:17:c1:00:67:e8:8f:21:ed:a4:
83:41:33:89:71:22:88:25:3b:62:73:32:c2:08:0f:c3:21:cb:
42:cc:1c:84:68:20:85:55:4d:d1:60:f0:c9:29:7f:13:c7:ea:
02:5f:10:1c:b4:de:35:18:c9:24:10:6b:5f:04:55:0e:01:84:
42:7e:2a:18:27:7d:5e:0c:4a:ce:b3:be:78:71:c8:58:a0:3a:
96:5c:ff:09:c7:f4:37:9c:7e:5f:e3:2a:6c:ff:e6:af:24:4d:
8d:71:c3:88:e3:57:60:83:72:a6:08:08:6c:4d:8f:30:5c:39:
c9:11:60:00:f3:c2:51:89:48:21:74:f5:1e:27:ba:69:f7:1c:
20:39:3f:fa:6b:e8:f0:c0:ec:16:ed:6f:97:b8:01:cf:a5:69:
d6:6b:f6:de:b1:4f:73:3e:3e:d6:64:fb:23:5e:1a:72:9d:6b:
5b:c6:b0:6a:92:81:14:37:4e:f8:70:5e:4d:c9:08:96:7c:8b:
4f:f4:74:81:57:3c:23:98:10:e8:38:9c:ba:bf:0b:56:47:8a:
94:2a:4f:fe
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB
MUEzNzhFNDEwHhcNMjMxMDA2MTYyMzQwWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTIwMzQ4Yy0yYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs3pLtNttsN7nlDMsW+q0r+ukiFu8KeJdUcK+SEilNm2GuocFxuGdr+xgKlbV
Q8aRVMdWkQ6kWlAiUb5dXisj2dqdMNzY0CO7v7culjZIkm0NRw2B1EGhdameej6L
6vj0nb7c+1NuKaeKoO/MN3kk/wJAH3XCQIhFQtMN6qXanjWN/iXk+1dgHCegsmxe
4U+zOiCz0yIZCMAMGck+aeq92uI2bF2xZKh7vvfif4gobDjTpzEucfrw0dr/jLoO
RbobyMuq0EoQy10zCnVYfJGirVDfzI1sW0obgB9QTzMe2+u/wfkYRlpf6jrfgPzh
PF3oJo/4GdoSvXQ9OUx/mHoEzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNLCyeLC
YZfIACzYTjRjjEezjQ1+MB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1
RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq
a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Q2NUIvQ0Y0Q0YxM0FBNUU2MTFFRDg3NDNBMTJGQzRGOUFFMDIvQjU4RUEyQjA2
NDY0MTFFRUIyNTdCQTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnUl8wDQYJKoZIhvcNAQELBQADggEBAARuADeTYSdV08PS
SMBcPyizweL16fODa9HBXNMVAzeldoJlR80qEZtQAP6SuRfBAGfojyHtpINBM4lx
IoglO2JzMsIID8Mhy0LMHIRoIIVVTdFg8MkpfxPH6gJfEBy03jUYySQQa18EVQ4B
hEJ+KhgnfV4MSs6zvnhxyFigOpZc/wnH9Decfl/jKmz/5q8kTY1xw4jjV2CDcqYI
CGxNjzBcOckRYADzwlGJSCF09R4numn3HCA5P/pr6PDA7Bbtb5e4Ac+ladZr9t6x
T3M+PtZk+yNeGnKda1vGsGqSgRQ3TvhwXk3JCJZ8i0/0dIFXPCOYEOg4nLq/C1ZH
ipQqT/4=
-----END CERTIFICATE-----
Generated at Sun Oct 8 16:20:17 2023 by rpki-client on console-ams.rpki-client.org