Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/3F3140E4622211EEA2ED954DC4F9AE02.roa
File: 3F3140E4622211EEA2ED954DC4F9AE02.roa (raw, json)
Hash identifier: 35DwG7NuHbAZswz4xLKblfn3it1OJcDlByAxZLNztCM=
Subject key identifier: CA:6D:AA:81:40:AD:D0:16:F1:C7:A7:99:38:FD:CF:0A:2F:9F:7E:97
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 03FC
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/3F3140E4622211EEA2ED954DC4F9AE02.roa
Signing time: Tue 03 Oct 2023 19:41:28 +0000
ROA not before: Tue 03 Oct 2023 19:41:28 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 24499
IP address blocks: 103.123.112.0/24 maxlen: 24
103.123.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020 (0x3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Oct 3 19:41:28 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=651c6e68-79e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:67:e3:fe:a3:b3:12:02:28:8c:6a:13:95:
cd:e1:72:08:1a:59:c9:8b:2f:95:f5:b7:bd:98:ab:
fe:e3:88:0d:5d:c7:93:e5:72:34:a0:48:d9:72:cb:
2c:1a:2e:a8:1e:c3:23:a0:85:6e:9c:48:c8:01:68:
bd:0f:2c:59:4a:26:5b:8f:73:fb:d5:68:a3:1e:c0:
fc:ac:d1:f0:27:2a:16:79:3a:84:1e:a4:00:f0:43:
a4:f4:0e:b0:b2:34:41:04:74:7d:ed:bd:47:9d:ec:
2b:63:f5:05:97:4a:1f:2f:9f:4e:b5:f4:ed:9e:73:
12:4d:68:20:a7:45:5b:62:3c:52:b4:73:a8:80:54:
4e:24:b3:7a:aa:e6:d2:01:9e:0d:c1:a9:3e:95:51:
d5:53:dc:46:2d:e3:0d:9b:41:c7:fc:42:4d:77:9e:
ad:bf:65:7c:7c:29:48:53:27:e3:04:2f:be:1d:67:
37:88:5a:c3:6a:0e:2e:6e:83:4a:de:e5:11:5d:db:
1d:0c:7a:53:8e:d4:d7:45:81:fa:da:59:e8:e3:40:
dd:3e:f2:ea:72:b4:97:d2:cb:37:87:67:87:0f:be:
30:ad:2f:13:d2:11:07:c2:4c:cc:22:f6:d6:36:5f:
e1:eb:a5:2b:09:b3:b3:4e:1e:8b:46:81:02:06:c6:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:AA:81:40:AD:D0:16:F1:C7:A7:99:38:FD:CF:0A:2F:9F:7E:97
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/3F3140E4622211EEA2ED954DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.112.0/24
103.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:be:6b:cb:f4:ea:7e:81:99:50:02:24:11:4e:04:14:19:be:
02:80:e3:63:6c:31:6e:a1:95:dd:1e:ce:50:a3:be:67:22:bb:
b7:43:b9:dd:5d:9c:11:ec:00:49:1d:5f:ec:c7:3e:dd:da:2d:
65:85:05:4b:52:34:87:39:b7:9c:dc:cd:e7:ab:c6:5c:f9:d4:
da:22:83:11:a3:07:d1:3a:37:13:e9:3b:7e:a7:5f:5b:94:c8:
90:b6:ea:79:a4:a0:ed:77:45:c7:33:cf:d3:55:03:dd:1b:be:
b4:d9:40:12:8e:47:64:3a:38:c7:a8:37:46:f7:be:9d:cc:67:
ca:9c:0c:ef:fb:51:d7:06:b2:52:03:64:89:1a:47:d3:29:e7:
97:2f:8b:30:f3:b3:79:14:5f:4f:77:51:76:b4:c4:fb:78:f2:
6d:d6:3a:09:71:a2:53:c7:29:23:99:9d:ac:21:22:ac:1f:5e:
cb:54:48:44:69:c2:9c:dd:92:71:9c:a8:3f:f3:a2:9c:87:44:
92:d0:8b:93:2f:af:f4:70:5f:0d:1e:47:cf:33:e4:84:c0:7d:
91:43:85:a6:e7:4d:75:ad:e2:6e:ef:74:ae:86:62:7c:00:60:
a8:c2:09:15:fd:a5:06:bf:5e:73:f5:d8:e6:a0:61:c0:fe:fb:
9b:5f:24:5f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF
ODg1RDdDNTAwHhcNMjMxMDAzMTk0MTI4WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFjNmU2OC03OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWhn4/6jsxICKIxqE5XN4XIIGlnJiy+V9be9mKv+44gNXceT5XI0oEjZcsss
Gi6oHsMjoIVunEjIAWi9DyxZSiZbj3P71WijHsD8rNHwJyoWeTqEHqQA8EOk9A6w
sjRBBHR97b1HnewrY/UFl0ofL59OtfTtnnMSTWggp0VbYjxStHOogFROJLN6qubS
AZ4Nwak+lVHVU9xGLeMNm0HH/EJNd56tv2V8fClIUyfjBC++HWc3iFrDag4uboNK
3uURXdsdDHpTjtTXRYH62lno40DdPvLqcrSX0ss3h2eHD74wrS8T0hEHwkzMIvbW
Nl/h66UrCbOzTh6LRoECBsYvLQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMptqoFA
rdAW8cenmTj9zwovn36XMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1
OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0NFRTMvOUE3N0FBMkEwNTk0MTFFQzlGNjQ2ODU0QzRGOUFFMDIvM0YzMTQwRTQ2
MjIyMTFFRUEyRUQ5NTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABne3ADBABne3MwDQYJKoZIhvcNAQELBQADggEBALG+a8v0
6n6BmVACJBFOBBQZvgKA42NsMW6hld0ezlCjvmciu7dDud1dnBHsAEkdX+zHPt3a
LWWFBUtSNIc5t5zczeerxlz51NoigxGjB9E6NxPpO36nX1uUyJC26nmkoO13Rccz
z9NVA90bvrTZQBKOR2Q6OMeoN0b3vp3MZ8qcDO/7UdcGslIDZIkaR9Mp55cvizDz
s3kUX093UXa0xPt48m3WOglxolPHKSOZnawhIqwfXstUSERpwpzdknGcqD/zopyH
RJLQi5Mvr/RwXw0eR88z5ITAfZFDhabnTXWt4m7vdK6GYnwAYKjCCRX9pQa/XnP1
2OagYcD++5tfJF8=
-----END CERTIFICATE-----
Generated at Wed Oct 4 09:39:49 2023 by rpki-client on console-fra.rpki-client.org