Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/C8EBE7107D5511EDBBAB4363C4F9AE02.roa
File: C8EBE7107D5511EDBBAB4363C4F9AE02.roa (raw, json)
Hash identifier: e0UJaMPR+p8Gl7BmIz1RusYqcnP23vb9qVvdqqumrbs=
Subject key identifier: AA:11:4D:3F:9F:AB:DE:EE:A9:AF:75:5A:35:11:16:28:22:32:60:A8
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 9F
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/C8EBE7107D5511EDBBAB4363C4F9AE02.roa
Signing time: Tue 29 Aug 2023 04:24:17 +0000
ROA not before: Tue 29 Aug 2023 04:24:17 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 211432
IP address blocks: 103.230.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 01:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Aug 29 04:24:17 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64ed72f0-ce99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:07:7f:2a:93:dc:44:d0:fb:b9:e8:eb:0b:
1f:3e:c9:ab:f5:3d:cb:1b:da:90:46:f0:e5:16:1e:
8d:57:76:d9:28:ce:64:b6:cd:11:d2:8e:ff:f3:e7:
5d:13:64:08:14:41:f8:b9:e3:f6:0f:38:c4:de:15:
7e:39:d2:33:3f:9b:2f:78:34:88:88:c5:49:0e:57:
4c:52:40:9e:de:ad:6a:81:e6:f6:f4:4b:5f:3b:35:
ca:58:cd:9c:d8:43:8d:c5:57:5c:7e:14:38:ed:a5:
21:de:ef:6d:8d:a4:7f:5d:39:0f:60:e5:73:24:b8:
80:8c:63:f5:87:8b:54:6c:d9:a4:06:77:69:24:40:
8e:51:1c:88:d0:42:2e:e4:d6:1c:78:0d:24:97:a9:
fb:e4:c2:7d:86:e9:a9:3e:ad:91:21:9b:6d:79:a3:
a7:00:60:3f:9e:a5:f4:1a:12:a9:ac:52:da:9c:86:
a7:35:e8:30:79:bb:4e:35:79:9d:bb:2c:ec:27:7e:
4e:b4:93:30:80:c4:f7:10:81:d0:97:ed:17:61:36:
37:76:07:96:1f:8f:f7:20:67:87:64:a7:5f:81:0c:
f9:6c:db:2e:d8:af:6f:77:55:e8:c1:b0:41:1b:bc:
26:44:01:31:66:f4:ed:84:dc:3d:be:56:1a:ce:7c:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:4D:3F:9F:AB:DE:EE:A9:AF:75:5A:35:11:16:28:22:32:60:A8
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/C8EBE7107D5511EDBBAB4363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.11.0/24
Signature Algorithm: sha256WithRSAEncryption
30:33:36:80:da:3c:03:ae:c3:48:2c:43:90:28:83:7c:6f:bf:
e8:9e:57:6a:fb:08:95:bc:94:e2:7f:11:4b:d9:77:70:ad:b5:
f4:b4:9e:06:21:05:7e:73:f9:fa:a3:03:30:cd:63:1e:04:5e:
3b:74:23:4d:82:1d:af:ab:e2:ad:6d:bd:77:26:72:54:f0:8b:
01:52:1e:a3:60:37:5d:20:13:3e:4d:7e:26:e4:a2:c7:f6:6a:
60:c2:0c:04:3b:66:c2:94:49:5f:af:89:d6:fe:7c:ff:26:8b:
f8:a0:2a:19:be:59:bf:29:c1:bf:43:66:78:7a:1b:f8:ef:f2:
96:71:0b:42:c8:97:52:53:1a:b9:ad:fd:19:07:1b:cf:e7:03:
e4:e0:32:3b:6c:b7:4f:cf:d3:52:9a:9f:dd:cb:e8:dd:99:52:
0b:7b:34:a8:5d:15:fa:8d:2e:77:a7:26:a9:a9:83:e6:79:a6:
2b:2f:e5:b3:3d:7b:d6:4a:fe:ac:51:7c:06:8e:4e:0c:57:af:
0e:3a:5e:ec:4b:d0:b6:02:b7:21:1a:cd:ce:ee:6c:70:a6:d7:
c8:0d:d0:23:52:eb:70:da:ed:ba:ef:ff:52:12:8d:ba:ee:5d:
24:56:ec:53:49:c9:f8:7a:5d:71:b4:df:96:f3:a0:2a:2c:df:
d0:1f:e6:3b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjMwODI5MDQyNDE3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVkNzJmMC1jZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWAHfyqT3ETQ+7no6wsfPsmr9T3LG9qQRvDlFh6NV3bZKM5kts0R0o7/8+dd
E2QIFEH4ueP2DzjE3hV+OdIzP5sveDSIiMVJDldMUkCe3q1qgeb29EtfOzXKWM2c
2EONxVdcfhQ47aUh3u9tjaR/XTkPYOVzJLiAjGP1h4tUbNmkBndpJECOURyI0EIu
5NYceA0kl6n75MJ9humpPq2RIZtteaOnAGA/nqX0GhKprFLanIanNegwebtONXmd
uyzsJ35OtJMwgMT3EIHQl+0XYTY3dgeWH4/3IGeHZKdfgQz5bNsu2K9vd1XowbBB
G7wmRAExZvTthNw9vlYaznw2oQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKoRTT+f
q97uqa91WjURFigiMmCoMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvQzhFQkU3MTA3
RDU1MTFFREJCQUI0MzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn5gswDQYJKoZIhvcNAQELBQADggEBADAzNoDaPAOuw0gs
Q5Aog3xvv+ieV2r7CJW8lOJ/EUvZd3CttfS0ngYhBX5z+fqjAzDNYx4EXjt0I02C
Ha+r4q1tvXcmclTwiwFSHqNgN10gEz5Nfibkosf2amDCDAQ7ZsKUSV+vidb+fP8m
i/igKhm+Wb8pwb9DZnh6G/jv8pZxC0LIl1JTGrmt/RkHG8/nA+TgMjtst0/P01Ka
n93L6N2ZUgt7NKhdFfqNLnenJqmpg+Z5pisv5bM9e9ZK/qxRfAaOTgxXrw46XuxL
0LYCtyEazc7ubHCm18gN0CNS63Da7brv/1ISjbruXSRW7FNJyfh6XXG035bzoCos
39Af5js=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org