Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/1F781CC08AD411EE95AE1C29C4F9AE02.roa
File: 1F781CC08AD411EE95AE1C29C4F9AE02.roa (raw, json)
Hash identifier: +IgArUMSOD3mV+4tBvT/q5/ER+Au/exOYnGddafYwrY=
Subject key identifier: 6C:8A:25:C3:EE:36:08:B4:36:D0:77:0A:F3:C4:5A:6D:72:C0:87:3C
Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial: 1B22
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/1F781CC08AD411EE95AE1C29C4F9AE02.roa
Signing time: Fri 24 Nov 2023 14:16:56 +0000
ROA not before: Fri 24 Nov 2023 14:16:56 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 834
IP address blocks: 43.228.146.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6946 (0x1b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Validity
Not Before: Nov 24 14:16:56 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6560b058-83cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:01:74:89:b7:8f:f0:7c:c2:b2:3f:8a:c0:
46:34:86:99:a9:61:12:62:ff:ac:8c:be:48:6b:b5:
da:00:27:9f:2c:1b:e0:9b:b6:75:25:ea:5b:10:d4:
f2:a6:2f:99:62:a1:40:07:2b:fe:dc:11:c8:1c:12:
d9:42:8e:dc:28:45:a8:9a:13:42:02:46:be:c5:46:
a0:7b:6c:d5:51:60:e6:01:fb:73:89:a7:a1:d0:84:
9a:07:a8:cf:ce:75:ac:3c:df:2e:a3:82:31:f8:96:
ae:ff:a5:1d:10:eb:cb:33:ad:db:d9:07:6d:69:92:
07:72:a7:fc:a2:93:ce:58:db:21:a8:1b:15:c3:df:
62:f2:fa:e1:74:48:4c:4f:18:02:b1:75:d7:6a:83:
cc:92:06:dc:5b:ae:80:4e:8a:9b:94:a8:df:e4:28:
4b:b0:54:53:c2:65:10:8b:dc:9a:e1:6c:97:8b:cb:
75:b3:f3:cc:25:bf:09:8b:92:6d:77:c4:11:1f:6a:
69:5d:15:96:3c:81:a7:93:3a:76:ca:91:9b:a4:4d:
07:5a:d2:11:04:25:d7:f4:2e:68:7e:12:12:dc:b7:
3c:7e:a0:c6:6c:91:1e:cb:a0:0d:e4:28:1b:48:a3:
b1:dc:e6:38:c5:04:fc:ac:bc:4b:68:9a:9e:3a:d7:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:25:C3:EE:36:08:B4:36:D0:77:0A:F3:C4:5A:6D:72:C0:87:3C
X509v3 Authority Key Identifier:
keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/1F781CC08AD411EE95AE1C29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.146.0/23
Signature Algorithm: sha256WithRSAEncryption
de:1b:f1:80:62:03:f3:a6:1e:9c:cc:76:1c:50:b7:55:cf:3c:
2f:d2:ee:64:d9:86:df:29:08:82:36:96:38:2c:d2:b5:f9:69:
74:eb:4b:aa:9a:6b:33:46:cc:5c:b6:5f:ec:34:1f:3d:dc:bc:
02:a6:da:5f:e3:dd:84:fc:79:9a:5f:1d:51:78:13:c6:a2:bc:
f1:85:e5:4b:11:b5:6f:3c:d6:1c:d7:cd:09:1f:58:47:1d:c2:
96:3c:a6:b8:11:ca:71:3d:24:cf:ba:71:b2:37:22:af:5d:c0:
4b:f2:46:10:5f:9c:12:ba:aa:e4:7f:e4:72:53:3d:ae:4c:bd:
0f:da:f1:79:85:c7:bb:21:9c:fd:4b:88:f6:f1:99:90:7d:35:
2d:c3:e7:57:c5:12:81:de:62:ac:5b:29:03:78:0d:28:c8:bf:
06:b4:8d:82:24:94:49:9f:52:eb:9d:95:f2:d2:4a:20:9a:85:
aa:46:b0:6c:b1:b5:74:40:1c:da:fa:ec:62:c6:d9:b5:d7:78:
e8:d8:da:7c:c0:74:0a:c1:c0:51:bd:d4:29:ef:b2:f7:6b:f3:
20:70:65:19:74:6b:04:0f:e3:87:6e:17:d1:cc:85:0e:fd:82:
50:67:5f:9d:40:2b:5d:41:10:f2:a6:a0:b0:1d:20:b6:19:fd:
ab:fb:ce:5c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5
NkRBODcxQzQwHhcNMjMxMTI0MTQxNjU2WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTYwYjA1OC04M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2NcBdIm3j/B8wrI/isBGNIaZqWESYv+sjL5Ia7XaACefLBvgm7Z1JepbENTy
pi+ZYqFAByv+3BHIHBLZQo7cKEWomhNCAka+xUage2zVUWDmAftziaeh0ISaB6jP
znWsPN8uo4Ix+Jau/6UdEOvLM63b2QdtaZIHcqf8opPOWNshqBsVw99i8vrhdEhM
TxgCsXXXaoPMkgbcW66AToqblKjf5ChLsFRTwmUQi9ya4WyXi8t1s/PMJb8Ji5Jt
d8QRH2ppXRWWPIGnkzp2ypGbpE0HWtIRBCXX9C5ofhIS3Lc8fqDGbJEey6AN5Cgb
SKOx3OY4xQT8rLxLaJqeOtfbRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGyKJcPu
Ngi0NtB3CvPEWm1ywIc8MB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5
MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI5NzgvRkM0QTJBMjBFOTAxMTFFNjhDMkNEMzExQzRGOUFFMDIvMUY3ODFDQzA4
QUQ0MTFFRTk1QUUxQzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEr5JIwDQYJKoZIhvcNAQELBQADggEBAN4b8YBiA/OmHpzM
dhxQt1XPPC/S7mTZht8pCII2ljgs0rX5aXTrS6qaazNGzFy2X+w0Hz3cvAKm2l/j
3YT8eZpfHVF4E8aivPGF5UsRtW881hzXzQkfWEcdwpY8prgRynE9JM+6cbI3Iq9d
wEvyRhBfnBK6quR/5HJTPa5MvQ/a8XmFx7shnP1LiPbxmZB9NS3D51fFEoHeYqxb
KQN4DSjIvwa0jYIklEmfUuudlfLSSiCahapGsGyxtXRAHNr67GLG2bXXeOjY2nzA
dArBwFG91Cnvsvdr8yBwZRl0awQP44duF9HMhQ79glBnX51AK11BEPKmoLAdILYZ
/av7zlw=
-----END CERTIFICATE-----
Generated at Wed Dec 20 08:57:50 2023 by rpki-client on console-ams.rpki-client.org