Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/E93BFD9C08AD11EDA6E00441C4F9AE02.roa
File: E93BFD9C08AD11EDA6E00441C4F9AE02.roa (raw, json)
Hash identifier: WNBQJ+qXqCEQSUdn4sGBZWWq3Cry3q5na6u/yHbz8EA=
Subject key identifier: 5B:65:99:30:54:6D:0A:66:28:AA:F4:83:32:68:07:3A:09:3C:31:63
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 0414
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/E93BFD9C08AD11EDA6E00441C4F9AE02.roa
Signing time: Tue 13 Sep 2022 10:01:18 +0000
ROA not before: Tue 13 Sep 2022 10:01:18 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 38296
IP address blocks: 203.185.129.0/24 maxlen: 24
203.185.130.0/23 maxlen: 23
203.185.130.0/24 maxlen: 24
203.185.131.0/24 maxlen: 24
203.185.132.0/22 maxlen: 22
203.185.132.0/23 maxlen: 23
203.185.132.0/24 maxlen: 24
203.185.133.0/24 maxlen: 24
203.185.134.0/23 maxlen: 23
203.185.134.0/24 maxlen: 24
203.185.135.0/24 maxlen: 24
203.185.136.0/24 maxlen: 24
203.185.137.0/24 maxlen: 24
203.185.138.0/24 maxlen: 24
203.185.139.0/24 maxlen: 24
203.185.140.0/24 maxlen: 24
203.185.141.0/24 maxlen: 24
203.185.142.0/24 maxlen: 24
203.185.143.0/24 maxlen: 24
203.185.144.0/23 maxlen: 23
203.185.144.0/24 maxlen: 24
203.185.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Sep 13 10:01:18 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=632054ee-b0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:ff:00:b8:a3:c9:f4:d1:b5:5a:1d:2c:ba:
5a:44:bd:69:9f:9c:d9:0f:50:b7:5f:13:68:44:be:
c0:5e:40:59:08:ca:84:26:61:61:f5:cd:5a:83:a9:
31:e7:dc:ff:30:42:35:36:dc:09:e7:9f:f8:9b:d1:
d0:53:b9:d4:0e:ff:83:d9:b9:ab:61:6a:8a:e7:05:
be:07:6f:12:9c:9a:e0:42:fa:20:44:54:4a:2e:f7:
b2:5f:61:52:e9:e8:18:7e:df:ed:9d:e2:4e:94:53:
4c:3c:bb:71:4c:df:26:83:af:6b:44:39:7e:0f:c8:
ac:13:02:61:f5:2b:e2:60:13:f2:44:92:60:34:02:
d8:30:63:b6:e5:f6:14:f7:88:a0:0f:29:65:5b:63:
6c:a7:e7:a9:d0:70:d6:b7:9a:ac:50:fe:07:d4:ab:
86:00:cb:e7:d7:50:3e:15:c5:0d:b0:cf:e3:0c:73:
8f:bc:88:8a:1d:5e:08:57:68:64:67:40:e8:54:1c:
03:76:30:23:45:af:6a:55:e5:0e:cb:bd:75:03:f5:
11:29:1f:0e:47:49:11:a7:54:56:a5:15:f4:97:cc:
d8:b2:01:a7:2e:28:d5:27:ec:81:37:72:e7:cc:87:
49:e0:76:b3:90:e6:5f:36:97:0f:58:fb:48:ce:ee:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:99:30:54:6D:0A:66:28:AA:F4:83:32:68:07:3A:09:3C:31:63
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/E93BFD9C08AD11EDA6E00441C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.185.129.0-203.185.145.255
Signature Algorithm: sha256WithRSAEncryption
26:1a:fd:7d:b3:ec:5e:f4:99:e4:bc:15:1e:3d:9e:a0:f5:bc:
d9:93:13:09:32:13:4a:a8:89:25:ae:75:eb:8b:e5:06:8b:7a:
69:74:d9:07:de:35:b2:bf:1d:80:9f:73:23:66:24:76:3c:09:
29:4f:0c:e7:df:b6:f1:e9:75:f1:57:fa:58:c7:ec:69:65:1a:
49:5d:eb:50:85:2f:f1:59:26:ce:73:4b:e1:93:68:12:52:c2:
79:bd:52:e8:c2:61:24:72:4a:65:17:29:c9:ff:42:05:03:9f:
23:fb:cc:15:4f:c7:89:ee:bb:10:05:1f:11:0a:6c:33:3b:53:
7b:22:af:fe:73:1e:db:b0:8c:70:c8:60:69:03:8d:f5:74:12:
21:81:e8:2a:7d:0c:22:9a:9f:22:26:a1:2a:ef:76:22:4a:07:
bb:c4:83:2f:85:51:48:9c:87:15:76:23:d7:bf:4c:4f:16:f3:
a5:a9:d6:9a:03:33:7e:d0:7e:1a:c1:5d:9d:b7:f9:5e:d2:7d:
b8:fb:2a:11:60:8d:35:7e:1f:13:20:22:65:36:3f:bd:2e:fb:
f3:00:98:f3:b0:68:36:79:23:d6:3e:24:06:9d:cf:63:59:e4:
0a:8c:41:ac:47:5e:99:c6:92:4f:7d:59:57:f1:e3:58:81:8d:
18:16:c4:4b
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjIwOTEzMTAwMTE4WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzIwNTRlZS1iMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwj/ALijyfTRtVodLLpaRL1pn5zZD1C3XxNoRL7AXkBZCMqEJmFh9c1ag6kx
59z/MEI1NtwJ55/4m9HQU7nUDv+D2bmrYWqK5wW+B28SnJrgQvogRFRKLveyX2FS
6egYft/tneJOlFNMPLtxTN8mg69rRDl+D8isEwJh9SviYBPyRJJgNALYMGO25fYU
94igDyllW2Nsp+ep0HDWt5qsUP4H1KuGAMvn11A+FcUNsM/jDHOPvIiKHV4IV2hk
Z0DoVBwDdjAjRa9qVeUOy711A/URKR8OR0kRp1RWpRX0l8zYsgGnLijVJ+yBN3Ln
zIdJ4HazkOZfNpcPWPtIzu53rQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFtlmTBU
bQpmKKr0gzJoBzoJPDFjMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwQTgvNzBDMkVCN0FBMTk2MTFFQjgyMDBDRjA5QzRGOUFFMDIvRTkzQkZEOUMw
OEFEMTFFREE2RTAwNDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAMu5gQMEAcu5kDANBgkqhkiG9w0BAQsFAAOCAQEAJhr9
fbPsXvSZ5LwVHj2eoPW82ZMTCTITSqiJJa5164vlBot6aXTZB941sr8dgJ9zI2Yk
djwJKU8M59+28el18Vf6WMfsaWUaSV3rUIUv8VkmznNL4ZNoElLCeb1S6MJhJHJK
ZRcpyf9CBQOfI/vMFU/Hie67EAUfEQpsMztTeyKv/nMe27CMcMhgaQON9XQSIYHo
Kn0MIpqfIiahKu92IkoHu8SDL4VRSJyHFXYj179MTxbzpanWmgMzftB+GsFdnbf5
XtJ9uPsqEWCNNX4fEyAiZTY/vS778wCY87BoNnkj1j4kBp3PY1nkCoxBrEdemcaS
T31ZV/HjWIGNGBbESw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org