Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8406B2F4D22511ED99FF3546C4F9AE02.roa
File: 8406B2F4D22511ED99FF3546C4F9AE02.roa (raw, json)
Hash identifier: D0k9WaK5oYrAkVFzQiJyxjav+2BiXxPz699LF+9zixA=
Subject key identifier: AB:0A:31:A2:BE:6B:7C:C4:49:1D:17:BF:EE:9F:A8:56:01:D1:13:EA
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 59
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8406B2F4D22511ED99FF3546C4F9AE02.roa
Signing time: Mon 08 May 2023 01:06:36 +0000
ROA not before: Mon 08 May 2023 01:06:36 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 17941
IP address blocks: 103.230.8.0/24 maxlen: 24
103.230.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: May 8 01:06:36 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64584b1c-972f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:82:7b:43:64:b3:e6:31:ba:68:56:80:5d:
e6:a0:8b:ee:64:b5:f2:d0:20:84:aa:0c:dc:99:68:
fa:3f:fd:a5:23:55:fc:de:ca:ac:d4:1e:9b:99:d9:
b0:e3:df:f3:c5:ab:58:4e:a3:74:05:99:18:3a:8b:
b2:81:d5:2c:fe:6b:fb:24:35:f6:4a:79:6e:61:86:
20:a8:56:d5:6f:46:70:61:cd:42:ab:a2:8c:69:64:
39:02:62:d4:bc:87:fa:a1:af:91:62:e3:4f:2b:ee:
b1:e2:0a:5a:34:14:4f:fa:17:59:6b:0c:6e:13:bd:
c3:78:f2:90:61:82:ce:bf:bd:59:4d:7e:1d:d8:4b:
73:d9:1c:3b:e1:f6:76:33:f1:45:57:79:3f:7f:6f:
5b:e8:c8:c1:8f:02:1f:c2:80:7e:82:7f:db:b1:18:
9e:81:9a:1a:fe:02:9b:62:f6:a9:82:30:64:08:7f:
1c:a6:35:93:c7:5e:be:5b:2f:a1:0d:50:0d:ae:3a:
72:cc:33:f6:b7:c3:a5:36:93:a4:17:f0:a5:cb:68:
64:c1:b6:cb:97:6e:d6:4a:82:14:c9:8a:98:54:fe:
66:16:91:2a:28:bd:bd:5e:22:d4:6f:ad:ee:ba:fa:
74:96:47:93:7e:07:ac:9e:16:a1:8c:d5:a1:be:c2:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:31:A2:BE:6B:7C:C4:49:1D:17:BF:EE:9F:A8:56:01:D1:13:EA
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/8406B2F4D22511ED99FF3546C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.8.0/24
103.230.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5d:15:e8:14:93:3b:8c:b7:b7:d1:27:2b:c9:41:22:cb:15:
34:05:09:0b:af:5c:2c:89:a5:d6:35:a2:33:b4:02:f1:02:d4:
7c:39:44:d3:b8:80:f8:a9:90:e1:b8:e4:22:9a:34:7c:c5:88:
db:92:30:cb:8d:41:3a:f0:a2:56:33:9a:12:0a:5c:f0:3b:6b:
d2:0b:99:64:44:7d:de:9b:7c:ba:c2:6f:d4:32:76:d5:b1:2e:
36:b2:5b:de:fc:5f:36:a9:de:0d:9c:52:28:b6:2c:7f:35:3e:
e3:ba:0b:2e:b9:8b:08:b8:73:b9:36:31:55:3f:1e:6d:fb:07:
7e:41:ec:cc:ac:22:12:5e:6d:b8:1a:33:cf:6f:93:6c:d0:73:
f5:d3:da:1a:b5:1d:2a:83:f9:39:0c:65:48:ff:eb:e2:e3:75:
9a:12:31:fd:9c:a8:a9:b4:e3:cf:26:11:a1:ea:97:48:c6:95:
7c:ac:75:2a:32:19:0e:d5:4b:21:16:35:fa:46:a0:e2:a0:fb:
8d:ca:8b:48:4b:8b:f5:1d:47:0d:69:76:fe:e8:ed:59:3f:34:
ae:78:56:69:69:45:5f:9d:e2:0e:d6:a2:c8:db:de:db:96:19:
c0:05:a2:5a:56:12:04:64:8f:5f:00:b1:08:1a:a9:bd:05:cc:
7a:be:ba:ba
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTgxNDExMC8GA1UEBRMoNUMwNTZCODA2MUE4NjIyQzJDMDZCQjg1Nzg2RTlEQzYx
MzYxNEJDQTAeFw0yMzA1MDgwMTA2MzZaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NTg0YjFjLTk3MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCk94J7Q2Sz5jG6aFaAXeagi+5ktfLQIISqDNyZaPo//aUjVfzeyqzUHpuZ2bDj
3/PFq1hOo3QFmRg6i7KB1Sz+a/skNfZKeW5hhiCoVtVvRnBhzUKrooxpZDkCYtS8
h/qhr5Fi408r7rHiClo0FE/6F1lrDG4TvcN48pBhgs6/vVlNfh3YS3PZHDvh9nYz
8UVXeT9/b1voyMGPAh/CgH6Cf9uxGJ6Bmhr+Apti9qmCMGQIfxymNZPHXr5bL6EN
UA2uOnLMM/a3w6U2k6QX8KXLaGTBtsuXbtZKghTJiphU/mYWkSoovb1eItRvre66
+nSWR5N+B6yeFqGM1aG+whdxAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUqwoxor5r
fMRJHRe/7p+oVgHRE+owHwYDVR0jBBgwFoAUXAVrgGGoYiwsBruFeG6dxhNhS8ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBODE0L0QzOEExOTEyNzQ1
RTExRURCQTY4ODUxNEM0RjlBRTAyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWEFWcmdHR29ZaXdzQnJ1RmVHNmR4aE5oUzhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi84NDA2QjJGNEQy
MjUxMUVEOTlGRjM1NDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGfmCAMEAGfmCjANBgkqhkiG9w0BAQsFAAOCAQEAtl0V6BST
O4y3t9EnK8lBIssVNAUJC69cLIml1jWiM7QC8QLUfDlE07iA+KmQ4bjkIpo0fMWI
25Iwy41BOvCiVjOaEgpc8Dtr0guZZER93pt8usJv1DJ21bEuNrJb3vxfNqneDZxS
KLYsfzU+47oLLrmLCLhzuTYxVT8ebfsHfkHszKwiEl5tuBozz2+TbNBz9dPaGrUd
KoP5OQxlSP/r4uN1mhIx/ZyoqbTjzyYRoeqXSMaVfKx1KjIZDtVLIRY1+kag4qD7
jcqLSEuL9R1HDWl2/ujtWT80rnhWaWlFX53iDtaiyNve25YZwAWiWlYSBGSPXwCx
CBqpvQXMer66ug==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org