Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/FD43BAC2EC0B11EDAA1B3228C4F9AE02.roa
File: FD43BAC2EC0B11EDAA1B3228C4F9AE02.roa (raw, json)
Hash identifier: LOGdneXfk/pLIeCPuMhXm5FNvDA/EyVgSkzzxfbLQAY=
Subject key identifier: 80:3F:A3:96:63:D1:11:8D:9E:54:81:82:64:DC:C5:F2:F2:BA:8D:0C
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 61
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/FD43BAC2EC0B11EDAA1B3228C4F9AE02.roa
Signing time: Sat 06 May 2023 12:46:16 +0000
ROA not before: Sat 06 May 2023 12:46:16 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138346
IP address blocks: 103.38.54.0/24 maxlen: 24
103.38.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: May 6 12:46:16 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64564c17-1628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:56:a7:a7:cd:99:4b:1c:4a:7a:2c:d5:b3:
75:41:61:66:d9:1f:f5:aa:c0:fe:62:69:91:8f:50:
28:90:61:ed:52:e5:e2:d0:ab:70:1d:4d:a6:f0:7f:
d7:12:76:4f:f8:93:7d:33:b3:56:6e:36:e6:91:60:
42:5e:dd:ac:f2:15:5f:d6:e8:df:a4:e0:c2:f5:df:
f5:26:5c:a3:e0:99:f4:ac:a9:82:59:6e:58:02:51:
cf:0f:99:a1:0c:ea:d2:13:4e:fc:e6:72:b0:c5:94:
af:f4:dd:45:ab:2c:9e:3a:ee:e8:34:ae:a1:a8:2f:
5d:8c:9c:57:9c:b5:66:3b:8a:97:84:f4:2f:64:50:
4d:29:4a:1b:78:49:93:e2:e7:c6:e9:3f:5f:ac:6a:
4e:48:23:75:e4:9a:0f:46:cb:4d:58:41:5e:ae:d6:
64:79:aa:8c:0c:3e:0b:37:ac:a7:fd:aa:5a:0c:78:
d4:c1:eb:3d:a7:24:76:fa:4c:a7:7d:e4:af:4a:b3:
cf:a4:e7:23:86:9f:51:e2:2c:57:5e:f9:9f:c1:46:
ab:b0:33:17:f4:fb:aa:b4:53:ec:01:a6:57:d6:23:
8b:b2:72:ca:b3:3e:36:70:99:79:16:32:2f:c6:81:
c3:b6:01:e6:f6:2d:24:30:38:76:f7:65:31:dc:f1:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:A3:96:63:D1:11:8D:9E:54:81:82:64:DC:C5:F2:F2:BA:8D:0C
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/FD43BAC2EC0B11EDAA1B3228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:e2:91:ca:b0:c2:b6:e6:46:50:7a:2f:64:1c:3d:2a:d9:6c:
f0:e9:b6:3d:ad:bc:e2:b6:3b:85:4e:3c:67:ee:6e:df:04:a5:
ab:4f:92:0a:ca:2f:4a:e9:74:99:1f:e1:14:8e:03:d7:c8:2e:
e8:4d:fb:34:15:3a:19:8c:ff:b1:de:68:4b:09:0f:75:ca:08:
01:f6:7f:fb:d5:82:39:7c:82:cf:42:2c:4b:09:c8:b7:1f:f0:
7c:98:36:f3:ee:26:fc:9f:76:4a:8a:f0:71:20:a9:23:f8:a9:
c4:4d:24:12:9b:ff:03:5a:0f:bb:51:ef:4c:58:b3:07:1e:f9:
26:c8:d3:3a:cb:8f:69:e2:3d:43:da:bb:22:5f:63:81:48:fb:
de:ad:0e:55:2e:49:38:09:61:6d:b7:d4:80:61:f0:6c:0b:b0:
bd:9f:db:4e:da:c4:a4:0e:81:da:8c:22:34:cd:58:81:5d:96:
f8:7a:de:2e:3a:2f:53:7c:53:75:04:0d:63:0f:23:25:20:4e:
51:f6:22:06:8a:a4:80:c4:c3:ba:34:23:a8:62:6b:dc:04:f4:
40:a9:98:19:21:a0:fe:11:70:48:60:db:91:64:3a:8c:b8:25:
b2:08:d7:b4:46:f2:fb:63:ef:0d:e6:93:13:e9:98:20:86:0a:
a3:bb:be:4d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MENDNzExMC8GA1UEBRMoRTdDRTE5QTE3ODU1MjI4MTVEQUI2M0ZGNjZEQjZGODkw
M0ZDRjlGQTAeFw0yMzA1MDYxMjQ2MTZaFw0yNDAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NTY0YzE3LTE2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjRlanp82ZSxxKeizVs3VBYWbZH/WqwP5iaZGPUCiQYe1S5eLQq3AdTabwf9cS
dk/4k30zs1ZuNuaRYEJe3azyFV/W6N+k4ML13/UmXKPgmfSsqYJZblgCUc8PmaEM
6tITTvzmcrDFlK/03UWrLJ467ug0rqGoL12MnFectWY7ipeE9C9kUE0pSht4SZPi
58bpP1+sak5II3Xkmg9Gy01YQV6u1mR5qowMPgs3rKf9qloMeNTB6z2nJHb6TKd9
5K9Ks8+k5yOGn1HiLFde+Z/BRquwMxf0+6q0U+wBplfWI4uycsqzPjZwmXkWMi/G
gcO2Aeb2LSQwOHb3ZTHc8b7BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgD+jlmPR
EY2eVIGCZNzF8vK6jQwwHwYDVR0jBBgwFoAU584ZoXhVIoFdq2P/ZttviQP8+fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQ0M3LzAzNEZDNjFBNjQx
NTExRUQ5OEYyRTU1NEM0RjlBRTAyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1m
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNTg0Wm9YaFZJb0ZkcTJQX1p0dHZpUVA4LWZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi9GRDQzQkFDMkVD
MEIxMUVEQUExQjMyMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcmNjANBgkqhkiG9w0BAQsFAAOCAQEAOuKRyrDCtuZGUHov
ZBw9Ktls8Om2Pa284rY7hU48Z+5u3wSlq0+SCsovSul0mR/hFI4D18gu6E37NBU6
GYz/sd5oSwkPdcoIAfZ/+9WCOXyCz0IsSwnItx/wfJg28+4m/J92SorwcSCpI/ip
xE0kEpv/A1oPu1HvTFizBx75JsjTOsuPaeI9Q9q7Il9jgUj73q0OVS5JOAlhbbfU
gGHwbAuwvZ/bTtrEpA6B2owiNM1YgV2W+HreLjovU3xTdQQNYw8jJSBOUfYiBoqk
gMTDujQjqGJr3AT0QKmYGSGg/hFwSGDbkWQ6jLglsgjXtEby+2PvDeaTE+mYIIYK
o7u+TQ==
-----END CERTIFICATE-----
Generated at Sun Dec 31 12:58:59 2023 by rpki-client on console-fra.rpki-client.org