Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/FFB55244691911EEAC1AC12FC4F9AE02.roa
File: FFB55244691911EEAC1AC12FC4F9AE02.roa (raw, json)
Hash identifier: V0H/Wv0axNnDJwzjEquuQ10zs/anL5ejWq5BVOar+IE=
Subject key identifier: 2E:BC:A5:DB:5B:34:56:4F:48:F7:B7:A2:6D:7D:60:66:6B:87:E4:FF
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 03FD
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/FFB55244691911EEAC1AC12FC4F9AE02.roa
Signing time: Thu 12 Oct 2023 16:11:28 +0000
ROA not before: Thu 12 Oct 2023 16:11:28 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 55714
IP address blocks: 103.173.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: Oct 12 16:11:28 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=65281ab0-5c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:ae:d7:76:fb:42:b7:9d:ee:ba:f1:a4:58:
b6:ee:df:37:2f:cd:61:ef:c5:91:bf:62:a7:1e:ea:
13:03:97:cd:1b:48:5a:99:5c:ee:23:c7:38:ec:a7:
30:a3:ad:3e:1a:01:22:bb:80:bc:25:16:84:24:20:
02:fa:5c:84:73:7a:bb:b5:cc:4f:55:f9:7e:d7:89:
d7:b2:a0:ef:4f:fa:1b:de:bc:67:35:4a:49:2a:71:
d2:3c:2c:7a:7a:cf:fb:a8:1f:48:a8:e8:26:47:6e:
79:4e:06:ef:45:85:09:d7:d9:6b:56:c3:12:67:36:
16:99:77:3c:45:ad:65:ba:85:61:82:89:4a:63:1b:
3b:24:5d:b6:1d:a7:57:ef:b4:d4:62:94:e9:97:97:
7e:6b:d1:99:df:19:35:b3:ed:5c:f1:9d:1d:00:77:
c1:c8:5e:e1:e5:9d:75:88:ad:9a:f1:ab:12:d4:aa:
99:86:e7:4b:32:a1:6e:9b:d4:cf:8d:50:f4:a4:43:
a4:04:d5:de:92:5c:a2:bc:2b:32:03:bb:01:f4:f0:
fd:93:54:12:fb:ee:f8:24:21:99:5c:28:eb:eb:57:
f9:4e:6c:29:8e:13:89:d6:84:9c:95:33:f7:81:8d:
46:a1:90:85:9c:f7:25:ea:32:e4:2c:2c:ec:1e:d9:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:A5:DB:5B:34:56:4F:48:F7:B7:A2:6D:7D:60:66:6B:87:E4:FF
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/FFB55244691911EEAC1AC12FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.7.0/24
Signature Algorithm: sha256WithRSAEncryption
35:06:c0:cc:d7:89:50:8d:8b:2f:86:c3:b5:dc:6f:82:c5:11:
71:83:7a:1c:1c:dc:51:2f:c4:62:36:94:e7:23:91:9f:2d:c2:
20:3c:2d:0a:c1:17:d7:a3:61:69:50:7c:be:22:b4:33:4d:75:
aa:bb:1f:fb:d2:2f:c3:15:50:a5:0a:8c:73:c4:54:8d:c6:54:
f7:db:41:6a:dc:9c:40:1f:a4:86:59:cd:e3:27:2c:1c:3f:4e:
9c:8c:29:ac:61:9a:35:29:bc:ef:84:8d:32:45:5c:b3:43:45:
75:86:ac:c2:d6:3e:f0:ea:9c:f4:5d:56:2a:1a:45:ee:db:73:
f3:1c:80:08:56:fc:39:34:8f:13:0f:a6:fb:47:fc:ba:91:a7:
8a:06:2b:aa:5b:a0:48:3c:79:9b:da:7d:e8:93:56:ad:d6:ae:
97:48:c0:aa:a1:cd:d1:94:49:33:b4:73:f7:1d:6c:a0:ff:1c:
9d:64:47:15:d9:ad:b9:84:1c:4d:c6:8e:46:c5:bf:67:12:16:
9a:4a:ed:bc:39:83:ca:a1:c4:e4:df:71:b4:89:f2:50:8c:2b:
e8:11:15:ca:e7:03:cd:df:f0:3a:c4:e3:b7:1e:9b:69:81:7e:
d3:6e:70:cb:f7:2c:5d:56:8f:85:43:c2:a2:20:b1:b6:2e:36:
6a:4b:59:9d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4
RUFFQTIzRjMwHhcNMjMxMDEyMTYxMTI4WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTI4MWFiMC01Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3p6u13b7Qred7rrxpFi27t83L81h78WRv2KnHuoTA5fNG0hamVzuI8c47Kcw
o60+GgEiu4C8JRaEJCAC+lyEc3q7tcxPVfl+14nXsqDvT/ob3rxnNUpJKnHSPCx6
es/7qB9IqOgmR255TgbvRYUJ19lrVsMSZzYWmXc8Ra1luoVhgolKYxs7JF22HadX
77TUYpTpl5d+a9GZ3xk1s+1c8Z0dAHfByF7h5Z11iK2a8asS1KqZhudLMqFum9TP
jVD0pEOkBNXeklyivCsyA7sB9PD9k1QS++74JCGZXCjr61f5TmwpjhOJ1oSclTP3
gY1GoZCFnPcl6jLkLCzsHtlsiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC68pdtb
NFZPSPe3om19YGZrh+T/MB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw
QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjUzNjIvRDlDQkY4MEExMEIzMTFFQ0EzMURGODJDQzRGOUFFMDIvRkZCNTUyNDQ2
OTE5MTFFRUFDMUFDMTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrQcwDQYJKoZIhvcNAQELBQADggEBADUGwMzXiVCNiy+G
w7Xcb4LFEXGDehwc3FEvxGI2lOcjkZ8twiA8LQrBF9ejYWlQfL4itDNNdaq7H/vS
L8MVUKUKjHPEVI3GVPfbQWrcnEAfpIZZzeMnLBw/TpyMKaxhmjUpvO+EjTJFXLND
RXWGrMLWPvDqnPRdVioaRe7bc/McgAhW/Dk0jxMPpvtH/LqRp4oGK6pboEg8eZva
feiTVq3WrpdIwKqhzdGUSTO0c/cdbKD/HJ1kRxXZrbmEHE3GjkbFv2cSFppK7bw5
g8qhxOTfcbSJ8lCMK+gRFcrnA83f8DrE47cem2mBftNucMv3LF1Wj4VDwqIgsbYu
NmpLWZ0=
-----END CERTIFICATE-----
Generated at Tue Oct 17 09:10:53 2023 by rpki-client on console-fra.rpki-client.org