Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D424D0C2633E11EEAAC1DD41C4F9AE02.roa
File: D424D0C2633E11EEAAC1DD41C4F9AE02.roa (raw, json)
Hash identifier: kHoqoY1JnOUrEBtLkOTjRQVDkKScrrNbpCe4cfNeeoA=
Subject key identifier: 1F:6B:0E:53:24:13:8E:69:A9:99:98:70:E4:5E:EC:FB:FF:D0:23:C3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7B3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D424D0C2633E11EEAAC1DD41C4F9AE02.roa
Signing time: Thu 05 Oct 2023 05:19:59 +0000
ROA not before: Thu 05 Oct 2023 05:19:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137138
IP address blocks: 103.85.118.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31547 (0x7b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 5 05:19:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=651e477f-b03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:87:1d:d2:db:17:83:32:07:fc:86:c4:f8:
19:99:21:c8:d8:88:11:5b:84:40:d0:93:9b:08:e3:
61:5d:5e:20:9a:18:45:fe:39:61:97:f8:0e:80:4b:
55:68:fa:68:a4:01:bb:79:65:2f:8f:ed:43:b4:6d:
c3:56:9f:53:4f:c0:48:1a:c3:ad:14:42:b6:f1:d2:
3c:c3:21:72:5d:95:8d:cb:4b:1c:56:a5:ed:39:aa:
8a:76:1f:94:ce:ae:6d:5b:5c:66:ec:37:3e:45:b8:
52:73:8b:a8:e7:9a:48:c0:53:19:50:c4:1b:d4:54:
18:9c:cd:c8:a9:11:b9:fe:cd:1f:a7:42:bd:ca:23:
f4:19:38:57:02:c5:55:ce:23:aa:66:14:b0:db:7b:
36:c4:4b:d1:b1:b1:45:91:1a:76:98:f5:bd:b3:04:
38:6a:fb:5c:17:b3:5f:94:76:4d:3c:2b:50:11:ff:
12:4e:fd:c0:0c:59:1d:d4:5c:ba:94:07:e3:9e:b7:
6a:9d:94:c7:7a:b2:8c:a1:0b:d9:74:c8:55:0e:01:
79:8f:ee:9b:ca:d9:1a:2d:24:f9:46:29:3a:59:b1:
9e:d2:4f:6a:60:d0:23:81:f8:c4:fd:46:2e:cd:2c:
b0:d5:00:ee:74:7c:7e:0f:51:ef:95:24:27:79:6d:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:0E:53:24:13:8E:69:A9:99:98:70:E4:5E:EC:FB:FF:D0:23:C3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D424D0C2633E11EEAAC1DD41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.118.0/23
Signature Algorithm: sha256WithRSAEncryption
66:cd:ca:a8:db:17:0c:8b:4b:15:64:59:9f:f7:b1:f5:fc:8f:
b5:50:c1:f3:28:49:d0:64:2c:9f:29:df:6b:f3:cc:9e:ea:cd:
36:e1:c1:80:03:62:7d:c9:2b:df:9a:a8:e7:5b:51:c8:f8:df:
8b:83:91:a3:2e:29:a7:e0:03:a2:a2:05:97:1d:86:f7:42:f5:
65:25:27:b6:0f:e9:ca:e8:b9:17:5d:28:a0:f3:d4:4d:ef:7d:
e3:88:6a:4e:73:ee:ea:af:53:e1:bb:bb:52:0b:9c:ef:eb:26:
a2:b8:94:d4:cf:77:9f:a9:fa:6c:14:3c:6d:e8:45:44:b7:d0:
ef:e5:45:ca:84:05:2d:01:d1:89:7d:b6:09:9e:e7:17:1b:09:
fc:2b:86:6f:fd:1f:c2:a5:b0:0b:a1:8b:ca:11:4b:7b:19:e7:
a4:a2:f6:9a:2e:f2:5f:47:8c:9c:57:c6:88:18:a9:0a:b7:ae:
f7:b5:ba:44:6f:98:15:06:bb:d8:72:84:32:8e:a1:dc:25:a9:
d8:b4:54:38:8f:ba:fd:c7:2c:70:ad:dd:83:14:85:7f:6e:aa:
bf:4b:ae:0d:bf:8a:91:51:68:de:77:9b:e9:6d:a7:4e:85:0c:
20:8d:2a:3f:3a:b2:92:80:9a:75:b6:35:e8:05:7f:5b:78:fc:
25:13:50:19
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICezswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMDA1MDUxOTU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFlNDc3Zi1iMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3eqHHdLbF4MyB/yGxPgZmSHI2IgRW4RA0JObCONhXV4gmhhF/jlhl/gOgEtV
aPpopAG7eWUvj+1DtG3DVp9TT8BIGsOtFEK28dI8wyFyXZWNy0scVqXtOaqKdh+U
zq5tW1xm7Dc+RbhSc4uo55pIwFMZUMQb1FQYnM3IqRG5/s0fp0K9yiP0GThXAsVV
ziOqZhSw23s2xEvRsbFFkRp2mPW9swQ4avtcF7NflHZNPCtQEf8STv3ADFkd1Fy6
lAfjnrdqnZTHerKMoQvZdMhVDgF5j+6bytkaLST5Rik6WbGe0k9qYNAjgfjE/UYu
zSyw1QDudHx+D1HvlSQneW3ttwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9rDlMk
E45pqZmYcORe7Pv/0CPDMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDQyNEQwQzI2
MzNFMTFFRUFBQzFERDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnVXYwDQYJKoZIhvcNAQELBQADggEBAGbNyqjbFwyLSxVk
WZ/3sfX8j7VQwfMoSdBkLJ8p32vzzJ7qzTbhwYADYn3JK9+aqOdbUcj434uDkaMu
KafgA6KiBZcdhvdC9WUlJ7YP6crouRddKKDz1E3vfeOIak5z7uqvU+G7u1ILnO/r
JqK4lNTPd5+p+mwUPG3oRUS30O/lRcqEBS0B0Yl9tgme5xcbCfwrhm/9H8KlsAuh
i8oRS3sZ56Si9pou8l9HjJxXxogYqQq3rve1ukRvmBUGu9hyhDKOodwlqdi0VDiP
uv3HLHCt3YMUhX9uqr9Lrg2/ipFRaN53m+ltp06FDCCNKj86spKAmnW2NegFf1t4
/CUTUBk=
-----END CERTIFICATE-----
Generated at Wed Nov 22 09:53:48 2023 by rpki-client on console-ams.rpki-client.org