Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/BAA2B2A83D9611EA916B582DC4F9AE02.roa
File: BAA2B2A83D9611EA916B582DC4F9AE02.roa (raw, json)
Hash identifier: hrw9I317xbyiaARzveTD/6FExMIFjTT9axzHYhvr61M=
Subject key identifier: 92:76:CD:86:53:08:0F:17:D9:A3:C4:D8:3D:1A:E0:6F:40:20:06:7D
Certificate issuer: /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial: 09F1
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/BAA2B2A83D9611EA916B582DC4F9AE02.roa
Signing time: Tue 12 Sep 2023 19:57:41 +0000
ROA not before: Tue 12 Sep 2023 19:57:41 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 10084
IP address blocks: 43.250.232.0/23 maxlen: 24
43.250.234.0/24 maxlen: 24
103.2.116.0/24 maxlen: 24
103.2.117.0/24 maxlen: 24
103.2.118.0/24 maxlen: 24
103.2.119.0/24 maxlen: 24
103.79.72.0/24 maxlen: 24
218.100.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 04:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545 (0x9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Validity
Not Before: Sep 12 19:57:41 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6500c2b5-ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:39:52:e9:6c:c3:5c:2f:3c:e2:5a:ea:e7:
45:a7:58:8e:f7:b1:9f:73:71:4a:42:a6:a8:bc:b2:
56:06:23:23:ba:31:bd:23:3e:ad:f3:4f:af:75:22:
94:87:0e:03:9d:9d:f5:09:25:bc:c5:4f:8c:5b:71:
3e:50:57:91:2a:5e:aa:77:ad:70:f8:0a:91:66:38:
b9:16:7d:33:d5:14:93:b9:7f:5a:db:72:34:70:a3:
ac:4b:57:57:7c:58:99:ee:4a:46:09:ed:16:20:02:
e0:dd:83:0e:4a:a2:68:b5:19:ea:d3:d2:96:b6:1a:
44:ba:2f:f1:18:f7:38:fa:58:9b:cd:52:d8:83:55:
74:25:9a:92:67:24:54:cc:78:c1:d3:d3:1a:20:7e:
8a:85:dd:7e:1f:bc:97:66:db:25:96:88:ec:e5:1d:
cb:e0:f9:20:ad:bd:35:a1:e5:bc:f7:16:45:04:38:
1b:53:9a:63:f1:31:8a:23:2d:d9:2f:11:63:ae:0d:
31:b1:23:ef:6d:51:80:1d:4d:a9:11:ad:60:4b:d9:
f6:5b:8e:79:f3:6c:3d:32:80:b8:a3:16:6a:09:b6:
73:35:da:ff:88:2c:86:6e:a4:35:c6:c3:2b:b0:ea:
df:28:36:da:47:ae:06:73:b7:03:08:03:f1:36:b2:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:76:CD:86:53:08:0F:17:D9:A3:C4:D8:3D:1A:E0:6F:40:20:06:7D
X509v3 Authority Key Identifier:
keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/BAA2B2A83D9611EA916B582DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.232.0-43.250.234.255
103.2.116.0/22
103.79.72.0/24
218.100.43.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0a:6d:4d:88:2c:4b:1e:0b:83:b4:28:93:be:52:3e:cb:30:
87:80:6b:ef:f7:89:f5:33:40:9a:ea:f5:d8:2e:14:1d:f0:55:
c0:99:05:4d:7a:20:f5:69:7f:ce:2d:d3:4d:75:fd:a3:d5:1a:
d4:36:7c:1a:1c:2c:5a:05:8b:79:a8:7f:a3:6d:9c:48:ff:34:
5e:7b:20:45:36:09:50:1c:2c:31:20:9a:a1:99:65:f0:60:bb:
b0:fa:fb:f4:b6:c2:2f:af:57:14:d5:83:96:66:2c:aa:5a:37:
c7:cd:e7:b0:7f:c6:98:f3:50:44:38:cc:3f:36:92:c5:af:46:
e8:e6:67:a1:5c:26:26:2c:70:0c:8f:cb:71:35:78:4a:3a:08:
96:16:78:09:a7:00:3f:ac:2a:ae:ad:17:69:d2:15:db:af:b5:
67:76:a0:0b:7f:8c:7e:94:50:f1:aa:f4:c3:86:b3:66:10:8b:
40:e2:9d:ff:85:85:d5:2a:89:95:d4:24:19:57:42:d2:ae:82:
7d:ba:0d:21:9e:93:2d:7d:35:14:43:91:c0:08:d7:f4:a7:de:
b6:b0:fe:13:c1:75:00:2f:90:3a:87:b7:95:3a:c6:e1:84:ec:
90:fb:9f:8d:7b:33:15:98:77:1c:0d:c5:c1:82:94:c6:b7:c1:
51:62:6a:a6
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx
RjI2NUQ0MTcwHhcNMjMwOTEyMTk1NzQxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTAwYzJiNS1lYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzaQ5Uulsw1wvPOJa6udFp1iO97Gfc3FKQqaovLJWBiMjujG9Iz6t80+vdSKU
hw4DnZ31CSW8xU+MW3E+UFeRKl6qd61w+AqRZji5Fn0z1RSTuX9a23I0cKOsS1dX
fFiZ7kpGCe0WIALg3YMOSqJotRnq09KWthpEui/xGPc4+libzVLYg1V0JZqSZyRU
zHjB09MaIH6Khd1+H7yXZtsllojs5R3L4Pkgrb01oeW89xZFBDgbU5pj8TGKIy3Z
LxFjrg0xsSPvbVGAHU2pEa1gS9n2W45582w9MoC4oxZqCbZzNdr/iCyGbqQ1xsMr
sOrfKDbaR64Gc7cDCAPxNrK5kQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFJJ2zYZT
CA8X2aPE2D0a4G9AIAZ9MB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVGNTEvQTg4M0U4MUMzRDgyMTFFQTlGMjY3MzcwQzRGOUFFMDIvQkFBMkIyQTgz
RDk2MTFFQTkxNkI1ODJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMCYEAgABMCAwDAMEAyv66AMEACv66gMEAmcCdAMEAGdPSAMEANpkKzANBgkq
hkiG9w0BAQsFAAOCAQEAdAptTYgsSx4Lg7Qok75SPsswh4Br7/eJ9TNAmur12C4U
HfBVwJkFTXog9Wl/zi3TTXX9o9Ua1DZ8GhwsWgWLeah/o22cSP80XnsgRTYJUBws
MSCaoZll8GC7sPr79LbCL69XFNWDlmYsqlo3x83nsH/GmPNQRDjMPzaSxa9G6OZn
oVwmJixwDI/LcTV4SjoIlhZ4CacAP6wqrq0XadIV26+1Z3agC3+MfpRQ8ar0w4az
ZhCLQOKd/4WF1SqJldQkGVdC0q6CfboNIZ6TLX01FEORwAjX9KfetrD+E8F1AC+Q
Ooe3lTrG4YTskPufjXszFZh3HA3FwYKUxrfBUWJqpg==
-----END CERTIFICATE-----
Generated at Wed Aug 21 08:03:27 2024 by rpki-client on console-fra.rpki-client.org