Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/26B3357A3CC711EEA5A9E833C4F9AE02.roa
File: 26B3357A3CC711EEA5A9E833C4F9AE02.roa (raw, json)
Hash identifier: wVS+XeuULaaOfcnlh49e4mrxm8sZbYUbV0nBU1QuPcQ=
Subject key identifier: 1C:63:00:72:EA:38:B2:4D:2F:BA:9A:87:1C:EE:63:4D:BA:EF:B1:28
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 9E
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/26B3357A3CC711EEA5A9E833C4F9AE02.roa
Signing time: Tue 29 Aug 2023 04:24:16 +0000
ROA not before: Tue 29 Aug 2023 04:24:16 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 21082
IP address blocks: 103.230.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Aug 29 04:24:16 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64ed72f0-6d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:67:e4:70:85:e1:f2:47:69:47:1e:08:22:
68:68:8a:f2:ad:5b:59:a7:a1:48:3d:a6:a7:9a:78:
84:57:5f:15:be:b9:45:e6:a8:a8:24:00:66:37:e0:
00:d1:67:5a:0e:d4:d9:56:02:7e:93:a5:f8:66:31:
f2:5e:e9:96:59:00:d7:73:47:60:d9:93:0f:a4:dc:
c5:bc:d9:a5:49:6a:d7:5a:93:c9:ef:fa:d7:4d:be:
97:aa:8c:36:7d:9d:91:7b:f1:1e:39:f0:13:ed:4a:
a1:90:11:af:55:37:e4:9a:38:6f:36:ff:eb:bb:01:
88:10:6b:d1:ea:23:6f:65:cd:e6:07:a3:7b:ef:15:
85:21:84:f4:06:2a:f2:1f:5b:3c:d2:0e:80:73:ef:
b5:f4:36:ec:c0:dd:14:f9:0b:d0:15:04:30:d8:41:
a5:5d:e8:22:9b:e4:0b:0e:21:35:8e:d2:77:a4:f7:
2c:3c:4c:5b:8b:d3:40:d0:86:bc:50:fe:74:6b:1c:
65:93:b9:b9:09:c6:50:39:9b:7e:36:0d:79:00:40:
fc:cf:8c:e3:49:f2:37:e2:77:8e:c1:db:ea:e4:7f:
78:fa:f5:f4:70:9a:e1:e3:a8:16:d2:8f:5b:e9:ba:
f7:55:b5:2f:b4:53:9b:35:75:ae:76:f8:c3:cd:2a:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:00:72:EA:38:B2:4D:2F:BA:9A:87:1C:EE:63:4D:BA:EF:B1:28
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/26B3357A3CC711EEA5A9E833C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:59:5c:a2:7e:1e:5b:42:94:13:87:d0:ac:3b:b2:f2:b0:c4:
22:1a:7d:7a:b3:f6:d9:26:9d:5e:ae:0f:60:c3:b7:40:9a:09:
13:53:90:5e:90:a7:21:4f:69:ab:9a:7c:60:da:22:ed:21:30:
9c:aa:15:66:c7:34:2f:9e:a7:62:b0:c3:e3:3a:ef:37:c0:ed:
8a:cb:7c:8c:ab:d3:cf:07:6a:e0:d4:b5:c8:ee:53:c3:ec:1d:
e2:d6:6a:a0:ce:50:42:59:21:04:d9:98:d4:c8:6e:71:bf:14:
7d:e0:61:3c:8d:d3:b5:cb:7c:47:18:0d:2d:a9:60:bb:a4:f2:
56:40:40:a3:8f:cd:1d:b7:ce:29:e2:0c:26:ce:4a:4e:62:26:
8c:00:7a:37:ac:a8:92:74:13:f6:db:23:4f:9f:00:46:b6:b7:
86:50:06:66:fd:a3:b7:16:5c:7e:21:3a:e9:15:f3:27:39:6e:
ea:fa:a8:aa:81:c1:49:3e:f7:15:25:69:4f:4c:14:2d:69:50:
90:c1:09:ab:e3:c0:37:d9:7f:88:97:bf:47:f4:ab:fa:0e:b7:
ad:44:59:31:31:70:bc:87:e8:6f:7d:ea:37:07:01:bf:99:28:
d0:d8:ef:40:b9:4d:45:44:3d:70:90:ce:cf:d4:26:d5:ea:23:
94:fb:0c:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjMwODI5MDQyNDE2WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVkNzJmMC02ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Ppn5HCF4fJHaUceCCJoaIryrVtZp6FIPaanmniEV18VvrlF5qioJABmN+AA
0WdaDtTZVgJ+k6X4ZjHyXumWWQDXc0dg2ZMPpNzFvNmlSWrXWpPJ7/rXTb6Xqow2
fZ2Re/EeOfAT7UqhkBGvVTfkmjhvNv/ruwGIEGvR6iNvZc3mB6N77xWFIYT0Biry
H1s80g6Ac++19DbswN0U+QvQFQQw2EGlXegim+QLDiE1jtJ3pPcsPExbi9NA0Ia8
UP50axxlk7m5CcZQOZt+Ng15AED8z4zjSfI34neOwdvq5H94+vX0cJrh46gW0o9b
6br3VbUvtFObNXWudvjDzSo/FQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBxjAHLq
OLJNL7qahxzuY02677EoMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvMjZCMzM1N0Ez
Q0M3MTFFRUE1QTlFODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5gkwDQYJKoZIhvcNAQELBQADggEBAFpZXKJ+HltClBOH
0Kw7svKwxCIafXqz9tkmnV6uD2DDt0CaCRNTkF6QpyFPaauafGDaIu0hMJyqFWbH
NC+ep2Kww+M67zfA7YrLfIyr088HauDUtcjuU8PsHeLWaqDOUEJZIQTZmNTIbnG/
FH3gYTyN07XLfEcYDS2pYLuk8lZAQKOPzR23ziniDCbOSk5iJowAejesqJJ0E/bb
I0+fAEa2t4ZQBmb9o7cWXH4hOukV8yc5bur6qKqBwUk+9xUlaU9MFC1pUJDBCavj
wDfZf4iXv0f0q/oOt61EWTExcLyH6G996jcHAb+ZKNDY70C5TUVEPXCQzs/UJtXq
I5T7DDM=
-----END CERTIFICATE-----
Generated at Mon Sep 18 06:51:10 2023 by rpki-client on console-fra.rpki-client.org