Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/43A05118BDC911EDBBA78034C4F9AE02.roa
File: 43A05118BDC911EDBBA78034C4F9AE02.roa (raw, json)
Hash identifier: TyoyjsQrzH5k9hLq/0mEDZN/q3ivK8BnR5hJ/k2Sx2w=
Subject key identifier: 65:D5:EC:DA:CF:08:6C:A5:3A:1A:BF:42:0E:42:E3:79:8F:1A:42:95
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 033F
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/43A05118BDC911EDBBA78034C4F9AE02.roa
Signing time: Wed 22 Mar 2023 21:13:47 +0000
ROA not before: Wed 22 Mar 2023 21:13:47 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 136258
IP address blocks: 103.75.118.0/24 maxlen: 24
103.97.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Mar 22 21:13:47 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=641b6f8b-ab54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:97:17:b1:21:8f:7f:f9:21:5d:27:eb:21:
b5:6c:b6:03:b1:c4:07:aa:35:2a:62:28:5c:85:0f:
0b:21:a2:33:9c:91:0f:c6:f1:f7:b4:ca:8d:68:26:
4b:aa:a2:78:d8:78:27:b5:06:45:a7:20:de:0d:ba:
e5:08:74:c2:c5:f9:e3:16:29:15:16:7e:29:1a:86:
b9:df:3a:5b:f4:4f:40:27:26:14:2b:e5:47:a9:1d:
e4:f9:73:ef:26:40:16:25:73:d0:eb:c1:7c:2e:85:
7b:43:73:03:a6:2e:58:ca:a0:61:f2:15:71:30:68:
91:eb:4f:0d:51:ac:c3:4a:5b:32:b0:df:58:c2:b8:
01:82:1f:86:f5:16:2e:58:3e:0b:b8:72:fb:ea:5d:
95:c8:ff:79:00:c7:8e:ce:9c:0c:ab:db:d4:f4:d9:
43:b4:9e:3a:9b:06:5c:b9:6f:43:fb:ce:94:31:06:
30:60:fb:8e:e7:32:50:82:e4:1f:7d:e9:64:05:74:
a7:b4:a8:8f:f8:06:5d:75:51:fe:8a:09:e7:1a:dd:
6c:41:2a:0e:3f:fb:42:48:84:f6:9a:b0:d8:bf:a2:
05:23:86:43:6c:0f:8a:dc:55:58:a4:cf:a8:84:5d:
da:2f:85:26:5a:08:ef:ce:dc:b3:9a:d9:93:e4:b0:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:EC:DA:CF:08:6C:A5:3A:1A:BF:42:0E:42:E3:79:8F:1A:42:95
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/43A05118BDC911EDBBA78034C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.118.0/24
103.97.203.0/24
Signature Algorithm: sha256WithRSAEncryption
86:12:f2:96:5c:08:97:bb:db:cf:93:3c:c0:17:cc:58:b5:00:
e7:02:0d:bc:26:00:a4:88:ac:28:96:e4:3f:1c:9b:34:27:88:
22:91:c0:1d:71:90:19:11:e8:b9:68:82:27:8d:67:d3:7f:96:
5d:81:27:39:fa:b1:5d:e4:ee:38:33:21:ae:6d:51:12:95:62:
38:24:50:7c:bf:18:5a:08:5f:31:95:e7:af:09:c7:46:8f:dd:
b7:2b:a7:e9:89:20:a6:8f:7b:e1:28:bc:5a:20:33:33:32:bd:
38:bd:d5:68:c0:2f:47:ad:ef:1c:67:d6:35:a8:8f:ff:bc:5e:
f8:c3:e0:80:22:89:8c:0a:78:24:ad:c6:26:43:04:1f:1e:8c:
9b:e5:e3:e2:37:16:6c:3c:04:36:84:e5:0c:ea:22:58:00:13:
47:81:b3:ef:28:2f:cc:f5:c6:b6:e5:a6:2b:cb:ca:a3:63:a6:
f2:17:20:77:99:e1:b9:5b:79:98:46:99:10:b1:52:03:9a:94:
e2:cd:04:53:fd:d8:40:68:57:b5:57:72:c6:52:58:79:35:5e:
e2:b2:08:95:6c:f0:a4:de:56:85:d2:30:03:93:ee:ce:2d:32:
88:c1:73:c5:a8:a0:48:fc:41:9b:e6:6c:63:17:0c:21:98:b0:
e0:1a:eb:68
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3
OTI5Mzc2N0EwHhcNMjMwMzIyMjExMzQ3WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDFiNmY4Yi1hYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwXOXF7Ehj3/5IV0n6yG1bLYDscQHqjUqYihchQ8LIaIznJEPxvH3tMqNaCZL
qqJ42HgntQZFpyDeDbrlCHTCxfnjFikVFn4pGoa53zpb9E9AJyYUK+VHqR3k+XPv
JkAWJXPQ68F8LoV7Q3MDpi5YyqBh8hVxMGiR608NUazDSlsysN9YwrgBgh+G9RYu
WD4LuHL76l2VyP95AMeOzpwMq9vU9NlDtJ46mwZcuW9D+86UMQYwYPuO5zJQguQf
felkBXSntKiP+AZddVH+ignnGt1sQSoOP/tCSIT2mrDYv6IFI4ZDbA+K3FVYpM+o
hF3aL4UmWgjvztyzmtmT5LDxqQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGXV7NrP
CGylOhq/Qg5C43mPGkKVMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx
MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTJFNzAvQkVDNUNBNzIyMTFCMTFFQ0I0NUZENDJGQzRGOUFFMDIvNDNBMDUxMThC
REM5MTFFREJCQTc4MDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnS3YDBABnYcswDQYJKoZIhvcNAQELBQADggEBAIYS8pZc
CJe728+TPMAXzFi1AOcCDbwmAKSIrCiW5D8cmzQniCKRwB1xkBkR6LlogieNZ9N/
ll2BJzn6sV3k7jgzIa5tURKVYjgkUHy/GFoIXzGV568Jx0aP3bcrp+mJIKaPe+Eo
vFogMzMyvTi91WjAL0et7xxn1jWoj/+8XvjD4IAiiYwKeCStxiZDBB8ejJvl4+I3
Fmw8BDaE5QzqIlgAE0eBs+8oL8z1xrblpivLyqNjpvIXIHeZ4blbeZhGmRCxUgOa
lOLNBFP92EBoV7VXcsZSWHk1XuKyCJVs8KTeVoXSMAOT7s4tMojBc8WooEj8QZvm
bGMXDCGYsOAa62g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org