Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/FA04EF5ACD5E11EDBB5F326AC4F9AE02.roa
File: FA04EF5ACD5E11EDBB5F326AC4F9AE02.roa (raw, json)
Hash identifier: uKmYMEQVrPlRNv6ZyfObi1LbCQ+kCYt5ftD2RGs44+Q=
Subject key identifier: 0D:65:9B:51:60:44:AB:6F:65:D9:3C:10:39:86:A1:4D:AA:60:BA:F7
Certificate issuer: /CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Certificate serial: 05F2
Authority key identifier: 80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/FA04EF5ACD5E11EDBB5F326AC4F9AE02.roa
Signing time: Mon 15 May 2023 00:47:10 +0000
ROA not before: Mon 15 May 2023 00:47:10 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 135339
IP address blocks: 103.85.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1522 (0x5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Validity
Not Before: May 15 00:47:10 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6461810e-b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:36:6c:e9:ac:ed:62:01:fb:f6:b5:66:12:
85:29:09:a1:d3:af:54:92:3c:d7:b9:d3:0e:65:40:
0a:54:92:c1:2f:77:c3:f6:5a:66:2e:fd:dc:e6:8d:
16:2d:04:bf:a0:42:81:90:e0:06:82:67:85:eb:f2:
f8:69:ef:c9:1d:bf:5b:d5:aa:59:f2:d2:ff:a8:49:
29:b7:83:c5:07:e8:e2:80:95:d0:4b:85:0e:0d:a6:
08:7f:97:ca:6e:d8:36:d2:3b:ad:2c:78:58:ab:69:
b8:7a:aa:d5:36:d3:8b:b8:ba:7c:fd:4c:78:dd:a5:
a4:03:a6:49:3f:e3:1d:c5:39:08:76:78:b3:e9:9f:
ad:29:a7:87:79:43:eb:39:cd:c3:c5:8b:52:92:cb:
32:21:dd:44:05:95:70:ef:09:84:b6:c2:ee:b2:65:
d1:8c:e0:8d:05:25:a6:6d:e6:62:16:4c:ec:8d:e2:
59:e1:cc:7c:9a:68:b5:d2:70:52:d1:9c:50:64:38:
30:ef:19:e1:96:f9:2a:48:64:36:6f:6a:79:45:0e:
bd:c1:81:f8:30:60:fb:b5:c8:f5:ea:48:73:3b:36:
8a:bb:fa:18:86:00:3c:07:8a:65:bc:5c:f9:54:89:
2a:43:bb:34:f7:37:21:7d:5a:8a:1d:ea:5f:3c:46:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:9B:51:60:44:AB:6F:65:D9:3C:10:39:86:A1:4D:AA:60:BA:F7
X509v3 Authority Key Identifier:
keyid:80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/FA04EF5ACD5E11EDBB5F326AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:50:46:f0:6f:1a:c0:dd:0b:c6:86:4e:fe:75:09:c4:5e:c1:
b5:06:88:f8:32:ed:f8:8d:43:a2:ef:6d:c1:ec:8a:22:de:c5:
99:53:42:b0:04:2b:7d:42:73:f9:7d:78:b3:26:30:f2:9a:8e:
91:85:d3:fa:2b:f4:79:ca:f3:11:db:a4:10:df:d3:18:4c:06:
c1:2e:e0:c0:9a:12:21:95:82:bf:1e:68:57:71:2b:7b:14:3f:
da:11:75:bd:5d:92:ee:87:b0:a4:d2:ae:b1:f4:ca:9d:bb:88:
5f:61:ab:62:b2:cd:a7:47:d4:d3:22:3d:47:10:60:1e:67:4a:
7d:1e:16:4c:14:56:e4:7e:48:09:c7:9d:c3:82:69:4c:60:73:
f3:02:3f:a9:07:db:b3:d5:22:45:9a:ad:6d:6d:c0:f3:99:1d:
37:54:7b:48:17:c0:a9:09:57:d9:7b:6d:fe:17:89:e1:3e:10:
0f:0a:a2:a2:9f:c0:49:2e:72:31:25:8c:52:62:d8:f3:b2:07:
2e:bc:0e:33:2c:64:da:56:ad:c5:72:85:d8:9a:28:87:48:37:
21:a2:db:26:ad:4c:37:8b:56:c9:82:6e:1e:ca:dc:05:d7:85:
df:a9:ae:cc:89:ac:f3:a2:e8:15:9d:30:a6:96:ae:ed:13:2c:
c8:b8:cb:e4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4RTIxMTAvBgNVBAUTKDgwNjA1MDU2MzM5MzRFNEFDOTA3MTdCMjMwOTRERjk4
NDU2QUJFOTUwHhcNMjMwNTE1MDA0NzEwWhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYxODEwZS1iOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwSs2bOms7WIB+/a1ZhKFKQmh069UkjzXudMOZUAKVJLBL3fD9lpmLv3c5o0W
LQS/oEKBkOAGgmeF6/L4ae/JHb9b1apZ8tL/qEkpt4PFB+jigJXQS4UODaYIf5fK
btg20jutLHhYq2m4eqrVNtOLuLp8/Ux43aWkA6ZJP+MdxTkIdniz6Z+tKaeHeUPr
Oc3DxYtSkssyId1EBZVw7wmEtsLusmXRjOCNBSWmbeZiFkzsjeJZ4cx8mmi10nBS
0ZxQZDgw7xnhlvkqSGQ2b2p5RQ69wYH4MGD7tcj16khzOzaKu/oYhgA8B4plvFz5
VIkqQ7s09zchfVqKHepfPEauzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA1lm1Fg
RKtvZdk8EDmGoU2qYLr3MB8GA1UdIwQYMBaAFIBgUFYzk05KyQcXsjCU35hFar6V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE
RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9nR0JRVmpPVFRrckpCeGV5TUpUZm1FVnF2
cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dHQlFWak9UVGtySkJ4ZXlNSlRmbUVWcXZwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ4RTIvQzA5MkIxMDYxREVGMTFFQjgzNUUxNTdBQzRGOUFFMDIvRkEwNEVGNUFD
RDVFMTFFREJCNUYzMjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnVXIwDQYJKoZIhvcNAQELBQADggEBAG5QRvBvGsDdC8aG
Tv51CcRewbUGiPgy7fiNQ6LvbcHsiiLexZlTQrAEK31Cc/l9eLMmMPKajpGF0/or
9HnK8xHbpBDf0xhMBsEu4MCaEiGVgr8eaFdxK3sUP9oRdb1dku6HsKTSrrH0yp27
iF9hq2KyzadH1NMiPUcQYB5nSn0eFkwUVuR+SAnHncOCaUxgc/MCP6kH27PVIkWa
rW1twPOZHTdUe0gXwKkJV9l7bf4XieE+EA8KoqKfwEkucjEljFJi2POyBy68DjMs
ZNpWrcVyhdiaKIdINyGi2yatTDeLVsmCbh7K3AXXhd+prsyJrPOi6BWdMKaWru0T
LMi4y+Q=
-----END CERTIFICATE-----
Generated at Mon Dec 11 02:37:18 2023 by rpki-client on console-ams.rpki-client.org