Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/07BBE412207711EEB743A619C4F9AE02.roa
File: 07BBE412207711EEB743A619C4F9AE02.roa (raw, json)
Hash identifier: HC94yx/m2wYrtnYesd82cKkr7hG+QtSdkwOfW+1Jbhs=
Subject key identifier: 9C:C1:BF:83:77:A6:65:BA:38:27:56:6F:75:84:11:BD:53:E8:0C:96
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 7F
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/07BBE412207711EEB743A619C4F9AE02.roa
Signing time: Wed 12 Jul 2023 05:43:30 +0000
ROA not before: Wed 12 Jul 2023 05:43:30 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 17941
IP address blocks: 103.230.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Jul 12 05:43:30 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64ae3d82-592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:7d:1b:f0:c4:18:df:9b:95:d7:84:2c:b5:
c1:16:bc:1e:17:7e:75:ac:c4:7a:e7:f1:9a:29:7a:
f0:a3:81:42:74:b0:57:8a:d0:a4:22:96:70:75:15:
b5:36:ae:86:a6:99:9c:ea:0c:27:2b:b5:75:e7:27:
0a:b2:d9:6c:15:17:b9:61:ee:a9:20:78:59:59:d2:
3c:3a:90:97:a1:a9:7f:af:24:fe:46:d7:fd:4d:51:
97:f3:db:d9:3d:f3:5c:52:8e:30:2f:67:a2:30:a3:
fc:bd:88:07:5e:33:8a:77:61:9b:5f:e2:21:1f:61:
d9:0e:aa:de:8b:46:bf:83:63:bc:fb:86:22:cc:0e:
f2:af:aa:bd:3e:8f:ae:6f:bb:ec:5d:b5:58:53:4c:
35:8b:08:92:44:93:a7:8d:01:b3:ba:14:4e:da:db:
74:7a:ac:29:61:91:b2:24:d6:a3:55:f1:df:5b:42:
6c:c5:af:b7:1b:c5:d8:6b:b8:7b:23:09:7b:56:4e:
3c:3d:aa:f9:8e:f1:07:1f:8d:65:fc:15:6e:a9:d8:
9d:82:24:d1:07:3b:5c:e4:30:e1:01:c3:44:8e:26:
42:35:6c:71:70:0f:1b:b0:99:a0:1e:58:d4:8c:d8:
29:0a:df:79:ed:df:6e:01:d4:78:22:dd:da:02:13:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:BF:83:77:A6:65:BA:38:27:56:6F:75:84:11:BD:53:E8:0C:96
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/07BBE412207711EEB743A619C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a5:44:02:88:05:74:53:f2:9b:3f:92:c3:f3:ef:37:20:84:
00:a4:84:01:5a:8a:44:94:02:2c:6c:55:ce:8d:0b:e0:26:15:
3a:c3:29:ec:2f:00:86:24:4f:da:e3:7c:d9:06:c8:07:59:7c:
53:7b:36:df:64:16:4c:00:3c:f2:b8:3a:df:fe:cf:f7:03:12:
2e:04:a4:93:53:65:b8:4f:36:3f:e9:ac:d4:25:d7:b5:39:5a:
4d:8c:bf:ed:f1:08:27:29:c5:b1:d0:de:59:69:cd:15:af:6a:
c6:c6:88:ef:ca:d4:25:d4:03:81:a2:bf:43:18:be:2b:9b:6a:
da:58:dd:8b:fc:f0:12:85:ce:6e:14:d2:f0:01:44:73:a2:9b:
5b:21:fd:68:da:2f:02:66:e6:e7:77:a7:b8:44:66:b7:f2:ce:
b4:06:62:8e:39:67:a3:f8:84:12:60:ef:4d:4b:62:5d:0e:2b:
39:25:21:4a:b0:96:c4:92:d5:d7:1d:c9:b7:28:10:8f:fa:29:
26:83:46:d8:4f:4a:17:bf:26:31:8b:2a:4e:94:de:5a:2e:22:
3d:cd:f6:2a:28:83:a7:b7:4c:10:d1:02:84:d4:5a:9b:f2:98:
b4:c8:67:e6:61:03:2c:3c:4d:90:45:c1:2d:96:a5:b0:14:c3:
f5:1c:a4:75
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTgxNDExMC8GA1UEBRMoNUMwNTZCODA2MUE4NjIyQzJDMDZCQjg1Nzg2RTlEQzYx
MzYxNEJDQTAeFw0yMzA3MTIwNTQzMzBaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YWUzZDgyLTU5MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/mn0b8MQY35uV14QstcEWvB4XfnWsxHrn8ZopevCjgUJ0sFeK0KQilnB1FbU2
roammZzqDCcrtXXnJwqy2WwVF7lh7qkgeFlZ0jw6kJehqX+vJP5G1/1NUZfz29k9
81xSjjAvZ6Iwo/y9iAdeM4p3YZtf4iEfYdkOqt6LRr+DY7z7hiLMDvKvqr0+j65v
u+xdtVhTTDWLCJJEk6eNAbO6FE7a23R6rClhkbIk1qNV8d9bQmzFr7cbxdhruHsj
CXtWTjw9qvmO8QcfjWX8FW6p2J2CJNEHO1zkMOEBw0SOJkI1bHFwDxuwmaAeWNSM
2CkK33nt324B1Hgi3doCExsdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnMG/g3em
Zbo4J1ZvdYQRvVPoDJYwHwYDVR0jBBgwFoAUXAVrgGGoYiwsBruFeG6dxhNhS8ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBODE0L0QzOEExOTEyNzQ1
RTExRURCQTY4ODUxNEM0RjlBRTAyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWEFWcmdHR29ZaXdzQnJ1RmVHNmR4aE5oUzhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi8wN0JCRTQxMjIw
NzcxMUVFQjc0M0E2MTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfmCDANBgkqhkiG9w0BAQsFAAOCAQEAoaVEAogFdFPymz+S
w/PvNyCEAKSEAVqKRJQCLGxVzo0L4CYVOsMp7C8AhiRP2uN82QbIB1l8U3s232QW
TAA88rg63/7P9wMSLgSkk1NluE82P+ms1CXXtTlaTYy/7fEIJynFsdDeWWnNFa9q
xsaI78rUJdQDgaK/Qxi+K5tq2ljdi/zwEoXObhTS8AFEc6KbWyH9aNovAmbm53en
uERmt/LOtAZijjlno/iEEmDvTUtiXQ4rOSUhSrCWxJLV1x3JtygQj/opJoNG2E9K
F78mMYsqTpTeWi4iPc32KiiDp7dMENEChNRam/KYtMhn5mEDLDxNkEXBLZalsBTD
9RykdQ==
-----END CERTIFICATE-----
Generated at Thu Aug 17 06:56:55 2023 by rpki-client on console-fra.rpki-client.org