Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/DC1822D4175E11ED8FFF3B38C4F9AE02.roa
File: DC1822D4175E11ED8FFF3B38C4F9AE02.roa (raw, json)
Hash identifier: 21RT5SlCh68nzfPVnOAyE8E9b3gDSuqwwVc4reOHtYs=
Subject key identifier: 6D:E4:1D:E4:B5:2A:C5:F1:F9:69:C8:F7:54:C9:41:20:2C:DF:C5:EC
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: B3
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/DC1822D4175E11ED8FFF3B38C4F9AE02.roa
Signing time: Mon 08 Aug 2022 21:12:51 +0000
ROA not before: Mon 08 Aug 2022 21:12:51 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 139673
IP address blocks: 103.187.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Aug 8 21:12:51 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62f17c52-646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:c3:21:3c:84:7d:2a:5e:4b:d1:2b:49:f8:
b3:d1:af:9c:02:23:0b:0d:5b:27:76:09:4b:25:c7:
3b:a5:9f:29:d7:28:a6:2c:c5:1a:4b:d0:88:55:a3:
be:1f:4c:1f:23:bf:24:d9:ea:f7:bb:fd:39:7c:ec:
45:f5:5f:c7:38:f7:32:82:c2:cf:8a:61:32:d1:3c:
e7:94:73:61:97:77:90:a5:a5:3a:d7:ec:6b:92:89:
83:7e:f4:12:91:a3:fd:61:42:2b:74:bb:b0:ec:08:
de:c9:42:43:91:4c:ba:b2:1f:f3:b9:77:a2:2d:a2:
2b:ed:fa:92:32:ac:b2:7e:cc:28:e8:63:2f:ed:81:
74:f0:e1:1a:41:4c:38:c1:fd:d4:0c:4b:32:85:93:
d6:06:fa:fa:aa:37:b4:a1:2b:7a:57:06:84:fa:69:
f4:3d:da:81:ae:cf:3f:c3:63:40:28:11:53:a7:cb:
7f:3d:ab:71:0b:cd:e9:14:4d:dc:a1:59:74:72:b3:
c7:92:f0:52:ea:78:ad:ff:e0:71:60:b4:f5:bc:7f:
a9:b7:6c:28:3b:9a:ba:5d:df:8b:06:64:e0:9c:33:
f3:c7:0e:1d:5f:4a:f5:91:d5:05:e7:38:ba:a4:7b:
7b:74:5f:01:d8:5c:50:4e:e3:a8:bf:f8:8a:db:22:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E4:1D:E4:B5:2A:C5:F1:F9:69:C8:F7:54:C9:41:20:2C:DF:C5:EC
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/DC1822D4175E11ED8FFF3B38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c6:0e:95:3b:d5:f8:b3:1b:b3:0d:b0:26:3f:3a:20:60:00:
7a:7f:78:c5:02:4b:4f:21:d2:5b:82:9b:ce:0b:f0:bc:6c:52:
59:a8:8c:30:78:41:07:99:9a:e4:c7:9c:3b:40:a0:a9:36:4c:
89:a3:31:6b:2e:0f:97:98:36:1f:fd:7a:fc:cf:b7:f3:fb:43:
39:28:00:bb:7a:83:d2:57:e6:05:af:86:3f:e9:c7:33:ea:9a:
cf:4b:54:ce:f4:d8:ae:2e:48:76:dc:96:9e:81:01:34:82:4c:
f8:33:c5:39:a6:a1:03:9c:b5:db:32:8b:a2:f1:01:8c:0a:b6:
7e:f6:bb:71:f8:cb:c6:6c:01:aa:5d:00:85:7c:ce:b8:10:75:
4c:fa:25:31:1b:6b:f2:7c:19:84:35:ed:d0:96:4a:25:27:ef:
bd:78:ac:11:32:8f:24:60:da:7e:5e:0b:8a:0e:a7:bf:66:3f:
63:2f:fa:05:e1:b2:a8:8d:8e:b3:9d:d7:c5:4b:c0:57:9e:a1:
21:27:1f:88:7c:9a:71:f4:30:03:3a:c7:fc:68:bf:5e:a6:9f:
cb:a0:06:b4:de:49:46:44:95:f6:76:37:4b:be:6a:6e:7b:01:
06:02:9a:17:99:2d:cc:ae:dd:9c:c4:9a:25:4e:3e:c7:03:01:
d2:be:22:29
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1
NkMwOEEyQjYwHhcNMjIwODA4MjExMjUxWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmYxN2M1Mi02NDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyTDITyEfSpeS9ErSfiz0a+cAiMLDVsndglLJcc7pZ8p1yimLMUaS9CIVaO+
H0wfI78k2er3u/05fOxF9V/HOPcygsLPimEy0TznlHNhl3eQpaU61+xrkomDfvQS
kaP9YUIrdLuw7AjeyUJDkUy6sh/zuXeiLaIr7fqSMqyyfswo6GMv7YF08OEaQUw4
wf3UDEsyhZPWBvr6qje0oSt6VwaE+mn0PdqBrs8/w2NAKBFTp8t/PatxC83pFE3c
oVl0crPHkvBS6nit/+BxYLT1vH+pt2woO5q6Xd+LBmTgnDPzxw4dX0r1kdUF5zi6
pHt7dF8B2FxQTuOov/iK2yLUpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG3kHeS1
KsXx+WnI91TJQSAs38XsMB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3
RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI1QjEvRUQ2MjlGMENEN0U4MTFFQzkyQTk0RjRDQzRGOUFFMDIvREMxODIyRDQx
NzVFMTFFRDhGRkYzQjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnu/UwDQYJKoZIhvcNAQELBQADggEBALPGDpU71fizG7MN
sCY/OiBgAHp/eMUCS08h0luCm84L8LxsUlmojDB4QQeZmuTHnDtAoKk2TImjMWsu
D5eYNh/9evzPt/P7QzkoALt6g9JX5gWvhj/pxzPqms9LVM702K4uSHbclp6BATSC
TPgzxTmmoQOctdsyi6LxAYwKtn72u3H4y8ZsAapdAIV8zrgQdUz6JTEba/J8GYQ1
7dCWSiUn7714rBEyjyRg2n5eC4oOp79mP2Mv+gXhsqiNjrOd18VLwFeeoSEnH4h8
mnH0MAM6x/xov16mn8ugBrTeSUZElfZ2N0u+am57AQYCmheZLcyu3ZzEmiVOPscD
AdK+Iik=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org