Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/B3173942ECF711ECB10B0928C4F9AE02.roa
File: B3173942ECF711ECB10B0928C4F9AE02.roa (raw, json)
Hash identifier: 66CSfgrulwjL1iyoIrlNIZ3M3oX3AOQCDkm9qaejwmY=
Subject key identifier: B2:2A:7D:7B:44:AB:2A:DA:03:FF:EE:B2:20:48:B1:81:C3:E3:49:4B
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 033D
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/B3173942ECF711ECB10B0928C4F9AE02.roa
Signing time: Sun 02 Oct 2022 03:22:28 +0000
ROA not before: Sun 02 Oct 2022 03:22:28 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 38264
IP address blocks: 103.123.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Oct 2 03:22:28 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=633903f4-7abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:0f:98:33:14:bf:b0:40:a5:0b:04:db:80:
a6:fb:fb:c2:d9:44:da:86:cf:bb:ab:49:ad:63:6f:
35:ff:cb:f2:8f:11:84:32:a3:f5:c9:d1:a4:26:9f:
69:54:3e:f5:20:f2:56:ab:6d:df:d8:20:e7:0d:a0:
04:ee:10:b1:b0:70:09:30:c4:00:92:81:80:0e:98:
8d:da:99:2b:68:dd:48:06:79:df:6e:54:19:4d:34:
21:bf:76:12:8e:77:3f:92:c6:ab:d5:bb:ff:79:60:
5d:a5:96:d6:87:4f:a4:15:1e:92:3f:fc:d3:4e:f5:
30:ec:f5:66:2a:8b:c1:80:ef:b7:73:07:c7:fd:6d:
d2:b5:bb:13:e6:7c:3c:02:ba:45:28:cf:80:af:34:
bd:3c:5d:22:40:8f:60:09:ec:87:28:13:9f:bb:79:
c4:68:d6:b2:e7:54:fe:e7:68:e1:b9:6a:45:21:bb:
4f:c4:fd:0d:57:4a:8a:d5:17:3b:93:16:bf:a3:09:
57:8f:d8:7c:d0:0e:6a:ef:c5:dd:9b:0d:1b:00:e8:
88:8f:d0:03:b4:42:ac:a2:55:68:77:de:92:c9:b4:
23:c4:76:b6:c7:42:0a:32:6d:a9:e9:d0:0a:f7:67:
77:c8:4e:6b:cc:0f:dd:c3:32:0e:4f:e4:f3:f8:06:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:7D:7B:44:AB:2A:DA:03:FF:EE:B2:20:48:B1:81:C3:E3:49:4B
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/B3173942ECF711ECB10B0928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b2:6b:eb:1c:d0:5e:7c:81:ff:58:04:d1:74:f8:76:48:9e:
21:fe:67:7f:5f:3e:88:ad:39:f1:d4:12:cf:6b:01:90:3f:5c:
29:cc:3e:9e:c3:ef:58:80:35:19:56:12:78:e5:17:31:ae:f9:
36:74:69:b4:d8:54:b7:6b:86:09:d8:9c:e6:7b:15:f2:59:13:
af:37:57:2e:f0:3c:6f:ad:a8:65:ab:f2:8a:a2:29:fb:28:62:
ec:8c:15:90:c1:fc:f0:c5:77:0c:8a:2e:56:f9:d1:e4:f4:3d:
05:15:01:00:c1:25:d5:1e:39:b0:79:8a:63:41:fe:05:6a:70:
36:54:1e:4b:84:75:4d:e1:94:d8:b8:27:dc:38:d8:bf:80:46:
0b:c0:1f:5e:a1:41:f2:13:1b:98:28:c6:15:70:f6:3c:7c:47:
cb:1d:fd:35:aa:7b:3d:aa:59:81:e3:8a:0e:8a:19:c8:d9:f7:
a0:60:de:82:42:ac:2d:cd:a0:e9:01:e1:7d:6b:11:72:1a:1f:
b6:71:d2:03:b2:67:b8:bc:0b:21:07:2e:55:58:c1:c6:0e:63:
04:42:14:d2:e2:ea:fd:39:f3:e3:d0:60:34:9c:ae:c7:11:e9:
2f:af:e9:54:81:33:e7:11:64:f4:f6:92:58:3a:85:b3:5f:b8:
aa:36:b2:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF
ODg1RDdDNTAwHhcNMjIxMDAyMDMyMjI4WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzM5MDNmNC03YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjMPmDMUv7BApQsE24Cm+/vC2UTahs+7q0mtY281/8vyjxGEMqP1ydGkJp9p
VD71IPJWq23f2CDnDaAE7hCxsHAJMMQAkoGADpiN2pkraN1IBnnfblQZTTQhv3YS
jnc/ksar1bv/eWBdpZbWh0+kFR6SP/zTTvUw7PVmKovBgO+3cwfH/W3StbsT5nw8
ArpFKM+ArzS9PF0iQI9gCeyHKBOfu3nEaNay51T+52jhuWpFIbtPxP0NV0qK1Rc7
kxa/owlXj9h80A5q78Xdmw0bAOiIj9ADtEKsolVod96SybQjxHa2x0IKMm2p6dAK
92d3yE5rzA/dwzIOT+Tz+Abg7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLIqfXtE
qyraA//usiBIsYHD40lLMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1
OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0NFRTMvOUE3N0FBMkEwNTk0MTFFQzlGNjQ2ODU0QzRGOUFFMDIvQjMxNzM5NDJF
Q0Y3MTFFQ0IxMEIwOTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABne3MwDQYJKoZIhvcNAQELBQADggEBAD6ya+sc0F58gf9Y
BNF0+HZIniH+Z39fPoitOfHUEs9rAZA/XCnMPp7D71iANRlWEnjlFzGu+TZ0abTY
VLdrhgnYnOZ7FfJZE683Vy7wPG+tqGWr8oqiKfsoYuyMFZDB/PDFdwyKLlb50eT0
PQUVAQDBJdUeObB5imNB/gVqcDZUHkuEdU3hlNi4J9w42L+ARgvAH16hQfITG5go
xhVw9jx8R8sd/TWqez2qWYHjig6KGcjZ96Bg3oJCrC3NoOkB4X1rEXIaH7Zx0gOy
Z7i8CyEHLlVYwcYOYwRCFNLi6v058+PQYDScrscR6S+v6VSBM+cRZPT2klg6hbNf
uKo2sgA=
-----END CERTIFICATE-----
Generated at Tue Oct 3 19:51:04 2023 by rpki-client on console-fra.rpki-client.org