Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B2B08756CD6111ED9BB1B571C4F9AE02.roa
File: B2B08756CD6111ED9BB1B571C4F9AE02.roa (raw, json)
Hash identifier: J+feVYylz3vY8PARKP5hz/9Uf3wu2ZNjhgYpJdo+m04=
Subject key identifier: 50:2C:67:60:36:AE:4F:48:68:45:03:FD:76:5F:07:19:BC:5F:F4:F2
Certificate issuer: /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Certificate serial: 06B4
Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B2B08756CD6111ED9BB1B571C4F9AE02.roa
Signing time: Tue 28 Mar 2023 12:11:41 +0000
ROA not before: Tue 28 Mar 2023 12:11:41 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 135339
IP address blocks: 103.129.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716 (0x6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Validity
Not Before: Mar 28 12:11:41 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6422d97d-74df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:b1:95:dd:4a:90:c0:ae:48:6e:6c:26:5a:
33:bc:a8:f8:31:9b:37:41:40:72:1d:a9:24:82:93:
47:93:d5:8e:bc:10:05:53:4b:47:14:06:8c:9f:4e:
c7:ed:ea:1a:f9:8f:63:d8:a9:3b:bc:0e:4b:6e:00:
32:24:37:14:6c:33:34:3a:78:6a:06:3c:37:01:70:
18:04:c9:65:7f:e2:d9:5b:b5:8f:e2:58:70:1b:b8:
c0:5d:0a:f3:60:6c:6e:45:25:4b:46:5f:03:74:1e:
d3:2e:27:f2:a8:85:0b:32:b8:41:1c:e9:34:40:60:
51:98:2a:96:dd:c8:a1:51:97:fd:c5:c7:8e:39:ad:
ae:8b:4f:57:57:d9:c9:ff:a4:6c:c0:16:ae:47:bc:
3c:17:99:b6:9b:26:b8:4a:a1:0c:a0:18:61:4b:3a:
62:56:0d:6f:5f:b3:c3:bc:1c:41:49:6d:64:f8:94:
f0:40:ce:f0:b3:0f:03:84:f1:ba:17:4b:cc:d1:0d:
9c:7f:df:b2:76:42:b5:fc:78:97:85:aa:80:5b:08:
17:77:7b:55:5f:55:88:53:57:ae:8d:16:f0:d3:4d:
c8:3f:d1:6c:97:16:8d:0e:4a:49:b1:ae:d3:51:56:
b2:b9:2b:17:2d:79:c6:c0:86:ad:8e:a5:e4:71:5b:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2C:67:60:36:AE:4F:48:68:45:03:FD:76:5F:07:19:BC:5F:F4:F2
X509v3 Authority Key Identifier:
keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/B2B08756CD6111ED9BB1B571C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.34.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fd:bd:e8:c0:b5:0a:c2:96:d1:9f:9f:19:98:71:d8:ab:3b:
c7:c2:1b:61:1e:42:a0:96:1b:18:42:74:ec:d4:d7:bd:99:4f:
65:de:17:5e:df:64:50:d5:58:fd:6f:f7:39:57:aa:f0:72:1d:
2c:53:44:d4:30:8b:3f:f6:7d:95:94:e8:34:62:7e:5c:b8:66:
93:28:c1:87:c1:69:eb:a5:ce:38:24:29:3b:0b:cd:74:c4:15:
ca:20:3b:69:f0:27:e0:a2:d2:89:ea:09:3c:ec:01:64:40:43:
34:18:a9:0a:e9:50:78:3b:05:b6:75:8c:e9:f0:9d:ee:60:74:
29:0f:d8:a5:44:97:5e:16:43:a2:21:dd:7c:87:fc:01:ad:26:
20:35:52:c1:4b:26:b0:70:72:07:35:6a:cb:5c:c8:c1:47:a5:
e2:c3:f2:00:78:9b:3e:27:97:a5:28:77:26:41:9a:19:68:50:
13:af:8b:73:9e:3d:10:5c:56:bb:d4:36:ab:8e:52:f2:db:7b:
96:4e:66:e2:20:c7:4b:98:89:21:b6:0d:b2:ca:4c:5f:94:c4:
1b:05:0c:d1:80:ac:35:42:9b:fd:c5:5d:77:ee:8a:8a:d6:3c:
91:05:55:25:e4:64:e6:5b:fa:94:db:0f:e3:d2:d2:ea:c5:63:
25:17:87:1a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZFMDUxMTAvBgNVBAUTKDdGRkJEQzNGNzc5QThGOTk2NTMwNUU3REVFNTFFNkE2
QzUzNUZGQjgwHhcNMjMwMzI4MTIxMTQxWhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDIyZDk3ZC03NGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2dGxld1KkMCuSG5sJlozvKj4MZs3QUByHakkgpNHk9WOvBAFU0tHFAaMn07H
7eoa+Y9j2Kk7vA5LbgAyJDcUbDM0OnhqBjw3AXAYBMllf+LZW7WP4lhwG7jAXQrz
YGxuRSVLRl8DdB7TLifyqIULMrhBHOk0QGBRmCqW3cihUZf9xceOOa2ui09XV9nJ
/6RswBauR7w8F5m2mya4SqEMoBhhSzpiVg1vX7PDvBxBSW1k+JTwQM7wsw8DhPG6
F0vM0Q2cf9+ydkK1/HiXhaqAWwgXd3tVX1WIU1eujRbw003IP9FslxaNDkpJsa7T
UVayuSsXLXnGwIatjqXkcVvJ8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFAsZ2A2
rk9IaEUD/XZfBxm8X/TyMB8GA1UdIwQYMBaAFH/73D93mo+ZZTBefe5R5qbFNf+4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkUwNS80Mjk1NTUxMENF
NTMxMUVBOEU4QzkyNENDNEY5QUUwMi9mX3ZjUDNlYWo1bGxNRjU5N2xIbXBzVTFf
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfdmNQM2VhajVsbE1GNTk3bEhtcHNVMV83Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZFMDUvNDI5NTU1MTBDRTUzMTFFQThFOEM5MjRDQzRGOUFFMDIvQjJCMDg3NTZD
RDYxMTFFRDlCQjFCNTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngSIwDQYJKoZIhvcNAQELBQADggEBACb9vejAtQrCltGf
nxmYcdirO8fCG2EeQqCWGxhCdOzU172ZT2XeF17fZFDVWP1v9zlXqvByHSxTRNQw
iz/2fZWU6DRifly4ZpMowYfBaeulzjgkKTsLzXTEFcogO2nwJ+Ci0onqCTzsAWRA
QzQYqQrpUHg7BbZ1jOnwne5gdCkP2KVEl14WQ6Ih3XyH/AGtJiA1UsFLJrBwcgc1
astcyMFHpeLD8gB4mz4nl6UodyZBmhloUBOvi3OePRBcVrvUNquOUvLbe5ZOZuIg
x0uYiSG2DbLKTF+UxBsFDNGArDVCm/3FXXfuiorWPJEFVSXkZOZb+pTbD+PS0urF
YyUXhxo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org