Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/CF3F6AE8A5D711EC872DCD21C4F9AE02.roa
File: CF3F6AE8A5D711EC872DCD21C4F9AE02.roa (raw, json)
Hash identifier: HGX8WfArySgxaBXlfDM5pXt6vPxszoEra7zBWQv6j/k=
Subject key identifier: F0:1C:BA:7C:8B:77:EE:9E:D0:42:19:A9:9B:F5:34:A5:17:84:B1:3A
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 054E
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/CF3F6AE8A5D711EC872DCD21C4F9AE02.roa
Signing time: Mon 22 Aug 2022 00:19:47 +0000
ROA not before: Mon 22 Aug 2022 00:19:47 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 51358
IP address blocks: 103.238.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358 (0x54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Aug 22 00:19:47 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6302cba3-4ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:2c:d9:2d:5b:e0:c7:9f:03:5f:63:a6:3c:
9d:70:16:f1:57:ca:c0:c0:21:5d:fe:9b:e9:1a:80:
f4:f3:85:ca:7a:0a:c7:2f:08:6e:fe:98:64:df:9a:
39:12:bf:d8:7e:0e:28:b8:6e:c4:cd:e7:d4:6f:c9:
f0:2e:dd:94:08:84:b2:0c:92:5e:1e:eb:89:f1:a0:
0b:fc:a7:29:95:3d:fb:88:57:33:f5:20:ff:c4:ca:
99:ff:13:fb:56:3f:01:56:33:eb:a2:95:a0:84:32:
93:f0:01:e0:1f:f0:73:f8:ca:c5:23:dc:ab:0a:98:
96:15:09:a8:0f:19:42:f7:c1:06:af:63:30:ff:fc:
cd:5f:30:dc:67:df:0e:12:dc:91:ac:d3:8c:69:e9:
89:50:f4:ae:a3:5f:58:30:a4:9d:63:d3:c1:07:39:
cb:c1:e7:88:63:4c:5a:81:b8:a9:20:0a:cd:f0:a2:
66:04:a5:91:a9:8f:c7:c2:6f:ee:a0:f1:e7:99:20:
da:30:da:5c:71:0b:a2:5f:70:6a:f2:0a:ac:e4:7e:
2c:61:44:9f:cc:52:82:ef:c3:ca:bc:5b:96:cf:6b:
4e:28:8d:da:8d:c6:25:07:15:56:f4:cf:02:0f:45:
e6:95:cc:24:3f:bc:c9:ab:51:0d:54:e9:9e:35:25:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:BA:7C:8B:77:EE:9E:D0:42:19:A9:9B:F5:34:A5:17:84:B1:3A
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/CF3F6AE8A5D711EC872DCD21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3c:65:0c:6f:0e:8a:64:ae:98:ca:fb:1a:1d:aa:9b:a6:c1:
57:70:32:17:4f:f3:dd:87:6f:e4:35:a0:8f:cc:b0:c0:10:28:
48:0a:dc:f4:d4:4c:ab:28:dc:c5:1d:2f:85:81:a4:62:c3:ed:
1f:b2:eb:70:eb:a5:5a:8c:51:d0:c0:6b:da:1c:61:6e:54:34:
64:e2:54:d5:ef:b3:5b:bb:4d:98:f9:41:ee:24:3a:fe:54:df:
26:ad:aa:b9:e1:5c:9b:8e:2d:6c:78:24:a0:0e:52:b0:41:c6:
4b:7c:ba:9e:c3:4f:d2:fb:0e:89:c7:49:3b:b0:c8:ba:28:d6:
b4:9f:58:05:f6:79:87:f3:6c:4b:6d:3e:16:02:89:ed:cb:98:
84:7b:8c:67:e9:60:7c:94:57:c8:57:f2:d4:ac:6b:ae:21:5e:
08:95:99:0c:ec:25:96:ca:cf:30:31:05:ba:6c:76:38:64:9e:
fb:92:57:66:5b:2e:de:c5:63:f7:52:52:0b:7a:7e:c0:0e:00:
61:1b:07:66:98:4c:24:42:f2:d4:bd:93:d2:d0:6c:37:42:54:
23:c7:8e:ff:4a:6e:12:2d:53:a0:af:d1:29:a3:ef:6b:41:30:
89:ee:d9:1f:97:c5:b6:f0:bd:48:c2:37:a7:ef:b2:6f:f9:57:
58:09:6d:82
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYxMzExMTAvBgNVBAUTKDdCMDU5Q0NDNjBCQUFBRkNGNkYxNDEyMTZFRkRENjhF
ODcwQzI1NTEwHhcNMjIwODIyMDAxOTQ3WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzAyY2JhMy00YWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7ws2S1b4MefA19jpjydcBbxV8rAwCFd/pvpGoD084XKegrHLwhu/phk35o5
Er/Yfg4ouG7EzefUb8nwLt2UCISyDJJeHuuJ8aAL/KcplT37iFcz9SD/xMqZ/xP7
Vj8BVjPropWghDKT8AHgH/Bz+MrFI9yrCpiWFQmoDxlC98EGr2Mw//zNXzDcZ98O
EtyRrNOMaemJUPSuo19YMKSdY9PBBznLweeIY0xagbipIArN8KJmBKWRqY/Hwm/u
oPHnmSDaMNpccQuiX3Bq8gqs5H4sYUSfzFKC78PKvFuWz2tOKI3ajcYlBxVW9M8C
D0XmlcwkP7zJq1ENVOmeNSUblwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPAcunyL
d+6e0EIZqZv1NKUXhLE6MB8GA1UdIwQYMBaAFHsFnMxguqr89vFBIW791o6HDCVR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjEzMS8wRkNCM0QzODI4
RDYxMUVCODRFNEM5M0JDNEY5QUUwMi9ld1djekdDNnF2ejI4VUVoYnYzV2pvY01K
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V3V2N6R0M2cXZ6MjhVRWhidjNXam9jTUpWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYxMzEvMEZDQjNEMzgyOEQ2MTFFQjg0RTRDOTNCQzRGOUFFMDIvQ0YzRjZBRThB
NUQ3MTFFQzg3MkRDRDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn7oMwDQYJKoZIhvcNAQELBQADggEBAGo8ZQxvDopkrpjK
+xodqpumwVdwMhdP892Hb+Q1oI/MsMAQKEgK3PTUTKso3MUdL4WBpGLD7R+y63Dr
pVqMUdDAa9ocYW5UNGTiVNXvs1u7TZj5Qe4kOv5U3yatqrnhXJuOLWx4JKAOUrBB
xkt8up7DT9L7DonHSTuwyLoo1rSfWAX2eYfzbEttPhYCie3LmIR7jGfpYHyUV8hX
8tSsa64hXgiVmQzsJZbKzzAxBbpsdjhknvuSV2ZbLt7FY/dSUgt6fsAOAGEbB2aY
TCRC8tS9k9LQbDdCVCPHjv9KbhItU6Cv0Smj72tBMInu2R+XxbbwvUjCN6fvsm/5
V1gJbYI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org