Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/FAF344B64BC611EE977A7E71C4F9AE02.roa
File: FAF344B64BC611EE977A7E71C4F9AE02.roa (raw, json)
Hash identifier: +T7XCYUe7tYxVLQW5rkMK89jrWTZY5RUsSdol4OMmEE=
Subject key identifier: 3A:B8:57:FF:6F:85:EE:77:97:F0:D2:3D:F7:40:FB:89:40:67:84:31
Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial: 07
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/FAF344B64BC611EE977A7E71C4F9AE02.roa
Signing time: Tue 05 Sep 2023 08:34:08 +0000
ROA not before: Tue 05 Sep 2023 08:34:08 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150288
IP address blocks: 103.126.142.0/23 maxlen: 23
103.126.142.0/24 maxlen: 24
103.126.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 09:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Validity
Not Before: Sep 5 08:34:08 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f6e800-56fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:a9:40:d9:9a:1f:64:54:2a:17:47:61:e1:
bd:20:0d:9c:b2:82:d7:f9:49:04:10:d9:bf:a4:eb:
63:b8:8d:dd:96:c6:00:d2:ac:bd:40:72:bb:53:1b:
b6:94:a8:49:b3:75:67:62:0b:53:14:46:99:68:2d:
59:b2:8b:44:92:b2:f1:82:c7:e8:cb:90:03:57:8c:
48:22:e9:9f:7d:d8:a4:54:1f:72:eb:83:76:96:51:
dd:ad:97:79:6c:ed:c5:94:d7:97:8b:68:43:f2:40:
d9:08:f4:01:45:ad:5b:35:87:b9:d3:d5:74:9d:14:
a7:c4:69:93:84:43:50:a9:39:6c:72:13:70:17:66:
ad:77:ca:26:d8:9c:9b:63:7f:b0:02:25:14:38:a8:
7a:de:5c:ac:dc:9f:bc:41:41:bc:07:ce:78:fc:c4:
a9:19:d5:2a:ec:52:1a:51:db:52:14:cb:20:6d:6e:
d3:27:3d:d5:6f:36:7b:b7:df:7c:5f:58:82:d1:91:
18:45:86:e5:d6:12:5b:c4:ba:7e:c7:50:2d:0b:4a:
ff:e6:57:c8:19:29:1e:0d:c7:a2:e8:6c:d4:a4:16:
00:36:fe:67:63:c2:ab:87:6c:d7:27:4d:e8:c2:08:
e1:67:cf:21:43:63:ef:4b:cf:e2:1d:80:a3:cb:97:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B8:57:FF:6F:85:EE:77:97:F0:D2:3D:F7:40:FB:89:40:67:84:31
X509v3 Authority Key Identifier:
keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/FAF344B64BC611EE977A7E71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.142.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:76:4c:a3:57:a4:97:8d:bd:13:74:fa:79:f0:5d:4d:d4:34:
63:07:ce:75:52:c5:1a:e3:d9:ef:05:4d:3b:c9:a9:99:62:30:
98:53:db:1c:d2:07:01:77:77:d4:90:b1:aa:4e:58:3b:29:94:
4b:06:2a:05:e7:29:19:1f:bd:4f:ca:2a:a3:6b:e5:86:68:25:
20:95:65:c1:9f:a0:9d:4e:9c:d7:d2:0d:38:01:71:c7:89:3d:
3d:aa:5b:02:d0:77:07:17:9b:02:6e:09:75:03:d9:a0:9d:fd:
bc:c3:3c:34:c5:9c:cb:bf:c8:28:b8:fe:e9:6d:bc:48:2d:bb:
57:d5:4a:ed:22:ec:2e:d5:43:61:74:43:53:db:47:78:03:fb:
47:37:c1:46:9e:cb:91:b1:9a:b2:41:9c:d8:76:3e:42:c6:80:
43:a8:32:c0:35:63:36:53:a6:bf:1f:5c:ab:41:59:e9:02:95:
86:51:18:fc:d5:03:d2:76:40:0c:7a:63:42:9c:4d:82:90:2f:
bd:ce:b7:2c:2f:8f:a5:78:1a:8b:97:88:5e:b2:b2:03:25:43:
dc:45:49:c4:86:06:41:da:36:85:f3:93:ce:83:b3:bd:4a:d4:
d8:59:e6:9f:9f:d0:8e:2a:f2:76:31:a0:86:65:ee:39:de:d1:
0a:3f:d1:ed
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
REQ4NTExMC8GA1UEBRMoOTQ0MzdFRERDQzhEMDY5ODlFMDk1MDA1NDNDOTFCREYw
RDNGNDhFNTAeFw0yMzA5MDUwODM0MDhaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZjZlODAwLTU2ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+lalA2ZofZFQqF0dh4b0gDZyygtf5SQQQ2b+k62O4jd2WxgDSrL1AcrtTG7aU
qEmzdWdiC1MURploLVmyi0SSsvGCx+jLkANXjEgi6Z992KRUH3Lrg3aWUd2tl3ls
7cWU15eLaEPyQNkI9AFFrVs1h7nT1XSdFKfEaZOEQ1CpOWxyE3AXZq13yibYnJtj
f7ACJRQ4qHreXKzcn7xBQbwHznj8xKkZ1SrsUhpR21IUyyBtbtMnPdVvNnu333xf
WILRkRhFhuXWElvEun7HUC0LSv/mV8gZKR4Nx6LobNSkFgA2/mdjwquHbNcnTejC
COFnzyFDY+9Lz+IdgKPLl15ZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOrhX/2+F
7neX8NI990D7iUBnhDEwHwYDVR0jBBgwFoAUlEN+3cyNBpieCVAFQ8kb3w0/SOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERDg1Lzg0NkY0QTY4NEJD
MzExRUU4QzY1NzMxOUM0RjlBRTAyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEVOLTNjeU5CcGllQ1ZBRlE4a2IzdzBfU09VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9GQUYzNDRCNjRC
QzYxMUVFOTc3QTdFNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWd+jjANBgkqhkiG9w0BAQsFAAOCAQEAt3ZMo1ekl429E3T6
efBdTdQ0YwfOdVLFGuPZ7wVNO8mpmWIwmFPbHNIHAXd31JCxqk5YOymUSwYqBecp
GR+9T8oqo2vlhmglIJVlwZ+gnU6c19INOAFxx4k9PapbAtB3BxebAm4JdQPZoJ39
vMM8NMWcy7/IKLj+6W28SC27V9VK7SLsLtVDYXRDU9tHeAP7RzfBRp7LkbGaskGc
2HY+QsaAQ6gywDVjNlOmvx9cq0FZ6QKVhlEY/NUD0nZADHpjQpxNgpAvvc63LC+P
pXgai5eIXrKyAyVD3EVJxIYGQdo2hfOTzoOzvUrU2Fnmn5/QjirydjGghmXuOd7R
Cj/R7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org