Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/DA942700EE1311ED81AADE3BC4F9AE02.roa
File: DA942700EE1311ED81AADE3BC4F9AE02.roa (raw, json)
Hash identifier: cvB3LE+8g5GpxM78TmERSQAcHjVr68HQ+kw5GABoZW8=
Subject key identifier: A2:C3:39:19:7B:29:F8:F5:D3:C4:AB:90:C6:74:DD:B6:98:B0:91:A5
Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial: 02
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/DA942700EE1311ED81AADE3BC4F9AE02.roa
Signing time: Tue 09 May 2023 02:47:36 +0000
ROA not before: Tue 09 May 2023 02:47:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138680
IP address blocks: 103.136.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Validity
Not Before: May 9 02:47:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6459b448-0517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:6b:e2:ae:6f:df:fd:b9:13:29:07:b6:74:
32:8d:68:52:2e:d8:92:42:36:e1:e2:0b:5e:56:39:
b9:99:cb:b6:52:4b:8e:02:56:23:07:cd:74:88:f7:
40:10:1b:41:ab:e1:1e:7e:3b:76:6c:e2:bc:5e:1f:
fa:7d:6b:98:54:79:56:33:49:cb:f2:d7:3b:3b:37:
e2:ad:a3:db:23:f4:ac:3d:f6:e6:57:46:bd:ca:f0:
d1:f3:23:1e:c0:f4:96:2a:7e:80:72:19:e5:ca:42:
91:d5:9f:f9:3d:17:44:48:cf:46:b5:a1:7d:cc:8c:
df:a3:d4:8d:8e:df:fd:e0:b5:e0:56:20:39:57:44:
ab:7b:96:51:2e:e2:6f:da:60:7d:b5:24:ed:d1:e6:
30:4e:35:61:db:4c:29:84:61:aa:94:ad:b9:18:f6:
6e:28:7f:19:a0:3e:23:3b:98:0c:7f:33:12:39:28:
ea:35:60:84:99:d6:ee:8d:f1:cc:f5:11:c0:6b:1e:
a7:fb:27:a9:9a:1d:f4:07:5f:57:22:e6:f0:f9:bf:
88:8d:60:c3:cb:1b:4a:44:02:aa:e4:78:7c:7f:4a:
09:ea:a6:af:7f:2e:a7:81:fc:11:e4:7d:23:99:74:
2b:3d:44:82:81:d6:7a:65:2c:ec:90:3a:4d:c8:4d:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:39:19:7B:29:F8:F5:D3:C4:AB:90:C6:74:DD:B6:98:B0:91:A5
X509v3 Authority Key Identifier:
keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/DA942700EE1311ED81AADE3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:61:8d:61:97:55:bd:2a:3d:af:a5:f0:ab:00:5a:4e:5b:de:
bd:95:c0:9e:bf:79:b1:b7:20:2f:e6:5f:78:8f:9c:12:ad:13:
a9:6f:fa:fd:3b:ce:b7:73:ae:ac:99:c2:23:3e:5a:c4:e7:c8:
5a:08:02:65:e0:bf:76:12:8e:e0:55:10:b2:1b:7f:d3:4c:3e:
5b:e8:90:f1:4e:23:b0:5b:72:34:98:bb:68:de:2d:f6:96:9e:
a1:8f:d9:02:77:20:17:91:28:f0:51:9c:40:23:9b:f8:42:4b:
a5:35:35:d3:3a:b6:32:29:00:d1:a2:a2:b3:30:a6:55:08:f4:
38:06:3a:00:79:90:0f:4a:7a:73:13:13:5e:82:89:55:d7:99:
de:93:b1:b9:02:0a:84:3b:91:27:63:91:ad:13:ff:b7:6b:0b:
84:ed:d6:69:0e:41:6a:cf:96:1d:ba:02:66:ec:63:40:93:f1:
0c:6b:8f:0a:97:66:38:15:bc:32:17:da:d0:68:d2:02:35:5a:
33:6a:d3:f3:2c:b1:f5:35:c3:e8:10:4c:98:aa:51:d8:b1:32:
62:b7:7d:ad:ab:dc:d7:9a:a2:e3:3c:ab:80:9a:fd:5f:cb:f2:
66:15:cd:df:95:0b:61:19:5a:4c:1c:0c:62:2f:fd:ed:bb:06:
2d:d0:bb:ac
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MTkzODExMC8GA1UEBRMoNDVDOURFMjU0RTJFMDMwNUQ2NTBBNTBBNkJGMTkyNjg4
MDdFRjEwQTAeFw0yMzA1MDkwMjQ3MzZaFw0yNDA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NTliNDQ4LTA1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLEmvirm/f/bkTKQe2dDKNaFIu2JJCNuHiC15WObmZy7ZSS44CViMHzXSI90AQ
G0Gr4R5+O3Zs4rxeH/p9a5hUeVYzScvy1zs7N+Kto9sj9Kw99uZXRr3K8NHzIx7A
9JYqfoByGeXKQpHVn/k9F0RIz0a1oX3MjN+j1I2O3/3gteBWIDlXRKt7llEu4m/a
YH21JO3R5jBONWHbTCmEYaqUrbkY9m4ofxmgPiM7mAx/MxI5KOo1YISZ1u6N8cz1
EcBrHqf7J6maHfQHX1ci5vD5v4iNYMPLG0pEAqrkeHx/Sgnqpq9/LqeB/BHkfSOZ
dCs9RIKB1nplLOyQOk3ITSp1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUosM5GXsp
+PXTxKuQxnTdtpiwkaUwHwYDVR0jBBgwFoAURcneJU4uAwXWUKUKa/GSaIB+8Qow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExOTM4LzUyNjg0OTcyRUUx
MDExRUQ5MDY1NzQzNkM0RjlBRTAyL1JjbmVKVTR1QXdYV1VLVUthX0dTYUlCLThR
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUmNuZUpVNHVBd1hXVUtVS2FfR1NhSUItOFFvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTkzOC81MjY4NDk3MkVFMTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9EQTk0MjcwMEVF
MTMxMUVEODFBQURFM0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeIVjANBgkqhkiG9w0BAQsFAAOCAQEATGGNYZdVvSo9r6Xw
qwBaTlvevZXAnr95sbcgL+ZfeI+cEq0TqW/6/TvOt3OurJnCIz5axOfIWggCZeC/
dhKO4FUQsht/00w+W+iQ8U4jsFtyNJi7aN4t9paeoY/ZAncgF5Eo8FGcQCOb+EJL
pTU10zq2MikA0aKiszCmVQj0OAY6AHmQD0p6cxMTXoKJVdeZ3pOxuQIKhDuRJ2OR
rRP/t2sLhO3WaQ5Bas+WHboCZuxjQJPxDGuPCpdmOBW8Mhfa0GjSAjVaM2rT8yyx
9TXD6BBMmKpR2LEyYrd9ravc15qi4zyrgJr9X8vyZhXN35ULYRlaTBwMYi/97bsG
LdC7rA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-ams.rpki-client.org