Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09288AC2301711EDADAA5037C4F9AE02.roa
File: 09288AC2301711EDADAA5037C4F9AE02.roa (raw, json)
Hash identifier: HfrL0UDCxcPA8d9PoAfwxp0WznmRQ3wLfjHf2ISUElk=
Subject key identifier: 05:42:61:28:49:03:F8:DE:D1:71:7C:0E:AF:1B:5E:15:A7:A2:67:53
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6C21
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09288AC2301711EDADAA5037C4F9AE02.roa
Signing time: Wed 10 May 2023 16:23:03 +0000
ROA not before: Wed 10 May 2023 16:23:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135836
IP address blocks: 103.133.248.0/22 maxlen: 22
103.133.248.0/24 maxlen: 24
103.133.249.0/24 maxlen: 24
103.133.250.0/24 maxlen: 24
103.133.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27681 (0x6c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:23:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc4e6-8890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:67:f7:5e:de:ea:7b:d6:35:17:21:d4:47:
43:77:69:af:5a:39:9f:4c:b4:04:1d:78:48:35:54:
dc:6a:c9:1b:17:ab:25:e6:67:c3:90:e7:a6:01:fa:
d0:ce:28:88:3c:b2:eb:d1:b8:33:6d:05:f5:c3:32:
cc:12:59:59:cb:50:a4:34:f4:d3:24:b6:ad:31:4c:
0e:b3:b6:0d:49:a7:0a:1c:6a:e4:4f:4e:df:06:63:
49:83:0b:e0:cb:d5:44:e8:66:f2:61:04:4a:0e:7d:
53:9c:75:b4:f4:cf:3a:8b:ff:ff:6a:c2:c5:fd:42:
a5:0c:e0:cb:2f:3d:41:50:5d:79:a6:b7:84:5b:43:
ad:62:79:96:19:aa:6e:52:c4:47:0f:84:75:49:d3:
91:0d:69:b3:06:f7:a3:8c:60:3e:d0:1d:00:0d:ae:
a6:07:95:48:5b:df:d7:c8:77:fe:51:95:09:5d:9b:
10:37:4d:d4:93:27:db:f9:1d:15:a4:02:5c:7e:d8:
3a:96:06:12:89:68:03:71:d4:ec:d5:33:b8:d9:ee:
a2:f4:31:fa:c7:d9:7f:87:82:cd:fa:b8:a9:dc:b1:
0c:f3:05:8b:f5:d3:46:58:7f:55:fd:80:15:c2:bd:
c4:83:ab:4f:1b:0c:c7:11:c9:b6:54:b2:fd:fe:30:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:61:28:49:03:F8:DE:D1:71:7C:0E:AF:1B:5E:15:A7:A2:67:53
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09288AC2301711EDADAA5037C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c3:1b:ff:8e:9c:66:71:1a:81:fe:51:93:02:1a:f1:34:de:
1f:ff:c9:31:ad:f6:e1:79:12:03:07:aa:83:8b:c0:b4:21:71:
a5:a8:06:90:0e:86:f7:c8:e3:64:bb:2f:a6:fe:8d:a9:9b:80:
36:6a:04:f9:1f:ae:27:94:ff:e1:3e:b4:3f:ab:cd:5c:30:1d:
52:41:3c:36:aa:43:e2:0c:2f:8d:4e:65:8e:8d:54:25:62:9a:
76:9b:6e:0d:51:ac:0c:7a:68:62:93:46:23:5c:04:0a:2f:1e:
0e:97:68:77:dd:37:df:40:25:62:c9:7e:81:f4:af:b0:ac:3e:
5a:1f:f2:76:ac:bb:d0:cf:32:bb:3e:e7:b4:73:b4:2c:55:01:
c8:83:da:e1:87:c5:c6:a7:a7:6b:d9:02:b1:34:de:e8:d4:30:
2e:de:a2:0c:ea:b2:01:8a:3f:9a:1a:7f:8a:5d:76:0b:b3:f2:
6b:8d:b8:37:ff:f2:71:20:af:41:5c:76:f7:cc:78:32:70:7d:
94:6b:9a:b6:bd:d3:a4:df:74:a2:38:b9:f9:a2:6a:ec:b6:af:
97:f6:8d:58:f8:b1:cd:c6:99:fe:fa:f6:cf:9b:aa:6a:f6:cc:
c3:15:7d:1f:1d:ab:67:7f:e8:8d:35:4f:5d:a1:50:c7:e0:ae:
03:a0:85:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICbCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYyMzAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzRlNi04ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnqZn917e6nvWNRch1EdDd2mvWjmfTLQEHXhINVTcaskbF6sl5mfDkOemAfrQ
ziiIPLLr0bgzbQX1wzLMEllZy1CkNPTTJLatMUwOs7YNSacKHGrkT07fBmNJgwvg
y9VE6GbyYQRKDn1TnHW09M86i///asLF/UKlDODLLz1BUF15preEW0OtYnmWGapu
UsRHD4R1SdORDWmzBvejjGA+0B0ADa6mB5VIW9/XyHf+UZUJXZsQN03Ukyfb+R0V
pAJcftg6lgYSiWgDcdTs1TO42e6i9DH6x9l/h4LN+rip3LEM8wWL9dNGWH9V/YAV
wr3Eg6tPGwzHEcm2VLL9/jBv7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAVCYShJ
A/je0XF8Dq8bXhWnomdTMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDkyODhBQzIz
MDE3MTFFREFEQUE1MDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhfgwDQYJKoZIhvcNAQELBQADggEBAGzDG/+OnGZxGoH+
UZMCGvE03h//yTGt9uF5EgMHqoOLwLQhcaWoBpAOhvfI42S7L6b+jambgDZqBPkf
rieU/+E+tD+rzVwwHVJBPDaqQ+IML41OZY6NVCVimnabbg1RrAx6aGKTRiNcBAov
Hg6XaHfdN99AJWLJfoH0r7CsPlof8nasu9DPMrs+57RztCxVAciD2uGHxcanp2vZ
ArE03ujUMC7eogzqsgGKP5oaf4pddguz8muNuDf/8nEgr0FcdvfMeDJwfZRrmra9
06TfdKI4ufmiauy2r5f2jVj4sc3Gmf769s+bqmr2zMMVfR8dq2d/6I01T12hUMfg
rgOghc4=
-----END CERTIFICATE-----
Generated at Thu Jul 27 09:25:56 2023 by rpki-client on console-fra.rpki-client.org