Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8FB17F6270B911EDB6E1F81BC4F9AE02.roa
File: 8FB17F6270B911EDB6E1F81BC4F9AE02.roa (raw, json)
Hash identifier: QIMM91hvFKhff7BmJpq1QeFMZeQOP3FHQSf7wHF22yQ=
Subject key identifier: 38:9C:DF:DA:5C:CA:92:E2:A2:DA:FD:21:84:CF:26:B2:9C:1D:FC:2E
Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial: 03
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8FB17F6270B911EDB6E1F81BC4F9AE02.roa
Signing time: Wed 30 Nov 2022 14:16:20 +0000
ROA not before: Wed 30 Nov 2022 14:16:20 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 150451
IP address blocks: 103.42.228.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Validity
Not Before: Nov 30 14:16:20 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=638765b4-ec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:3f:79:c2:0f:95:ea:55:6c:cc:85:13:9d:
7d:40:b2:b9:c1:b9:3d:ca:df:51:56:c1:f6:6b:51:
33:92:e1:f4:c3:e0:c3:7d:8f:bd:51:5b:77:9d:ec:
20:98:ad:20:93:c9:20:10:fe:5c:d2:d5:9b:02:de:
dc:e3:cf:da:b4:ed:ba:96:0c:6c:4e:0a:d3:9e:67:
78:d2:ec:c4:4f:fe:54:23:f4:d4:06:af:76:b3:dc:
d6:e6:e4:67:9a:9c:45:cb:54:64:c8:6c:a7:29:e1:
fc:fd:97:a0:02:79:42:92:4c:0e:87:b9:18:81:ac:
d1:2f:77:f8:58:48:41:c2:33:15:ea:e9:aa:26:59:
19:19:b3:5f:ea:01:dd:df:19:b3:80:30:c4:e8:c7:
a2:48:20:56:35:98:2b:16:58:78:8c:89:ba:70:96:
29:06:2b:cd:8d:53:2d:98:80:c7:fd:a3:5a:7a:f2:
7f:71:ea:9f:54:be:41:78:c8:c2:22:d6:f7:12:9c:
43:0a:f8:47:04:0e:3c:91:f8:ed:76:86:db:e0:81:
1f:28:87:b6:d6:dc:b8:7f:59:d8:de:6d:40:a1:b9:
24:0e:19:5c:3d:1c:b3:a5:9c:95:93:57:db:6d:03:
16:ef:82:8d:87:59:8f:b2:96:df:0b:06:41:52:51:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9C:DF:DA:5C:CA:92:E2:A2:DA:FD:21:84:CF:26:B2:9C:1D:FC:2E
X509v3 Authority Key Identifier:
keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/8FB17F6270B911EDB6E1F81BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.228.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:e5:eb:14:cf:23:d0:6c:87:95:7e:ba:76:b8:01:a9:5e:52:
54:be:a4:b1:3c:ab:dd:a0:4d:1f:8c:12:10:9e:f8:00:a4:d1:
cb:7b:dc:b8:87:56:44:f6:17:af:7c:76:cd:6a:ab:28:cc:f6:
64:9a:82:cc:69:6f:a5:39:2f:d8:bd:6d:c6:aa:b9:d6:8e:77:
12:b1:99:9d:96:e0:76:ab:e5:28:68:ee:aa:d5:a2:98:7b:02:
76:a5:b6:df:5e:40:7a:ac:87:6d:02:a9:2f:66:c3:81:eb:21:
c0:4e:30:a3:e6:21:8f:f3:82:5d:fe:ab:b7:49:31:a4:d6:6e:
c1:2a:f3:29:fc:3a:ab:c1:9b:84:8b:b8:20:6c:7f:6c:ea:66:
5d:79:0f:ee:ab:e1:70:4b:8d:f8:39:36:a4:a8:09:13:11:ea:
b2:27:4d:d9:aa:3d:16:8d:6d:4f:d4:37:39:1c:e8:44:48:b1:
61:cb:8f:01:63:c6:fb:98:f0:8a:4f:27:50:78:e2:d7:6e:5b:
10:c3:cb:51:30:99:8f:97:a0:f8:b3:14:ea:de:59:40:ea:f4:
e3:da:24:4a:e4:5b:1f:39:f4:56:c4:30:aa:19:e7:8c:9f:85:
0a:ad:66:cf:31:98:b7:5a:0e:ae:ad:7e:42:20:f3:c4:c1:18:
52:46:0b:88
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OEE1MjExMC8GA1UEBRMoNzEyRUI1QTJENzA2OUYxOEVFOUM2NUYzQjAxMzI3MUFE
QkYxRjU0MDAeFw0yMjExMzAxNDE2MjBaFw0yNDAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzODc2NWI0LWVjMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxXz95wg+V6lVszIUTnX1AsrnBuT3K31FWwfZrUTOS4fTD4MN9j71RW3ed7CCY
rSCTySAQ/lzS1ZsC3tzjz9q07bqWDGxOCtOeZ3jS7MRP/lQj9NQGr3az3Nbm5Gea
nEXLVGTIbKcp4fz9l6ACeUKSTA6HuRiBrNEvd/hYSEHCMxXq6aomWRkZs1/qAd3f
GbOAMMTox6JIIFY1mCsWWHiMibpwlikGK82NUy2YgMf9o1p68n9x6p9UvkF4yMIi
1vcSnEMK+EcEDjyR+O12htvggR8oh7bW3Lh/WdjebUChuSQOGVw9HLOlnJWTV9tt
Axbvgo2HWY+ylt8LBkFSUQYrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOJzf2lzK
kuKi2v0hhM8mspwd/C4wHwYDVR0jBBgwFoAUcS61otcGnxjunGXzsBMnGtvx9UAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4QTUyL0ZCN0U0QkRFNzBC
NTExRUQ5M0YwREQxNkM0RjlBRTAyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlV
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1M2MW90Y0dueGp1bkdYenNCTW5HdHZ4OVVBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi84RkIxN0Y2Mjcw
QjkxMUVEQjZFMUY4MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcq5DANBgkqhkiG9w0BAQsFAAOCAQEAqOXrFM8j0GyHlX66
drgBqV5SVL6ksTyr3aBNH4wSEJ74AKTRy3vcuIdWRPYXr3x2zWqrKMz2ZJqCzGlv
pTkv2L1txqq51o53ErGZnZbgdqvlKGjuqtWimHsCdqW2315AeqyHbQKpL2bDgesh
wE4wo+Yhj/OCXf6rt0kxpNZuwSrzKfw6q8GbhIu4IGx/bOpmXXkP7qvhcEuN+Dk2
pKgJExHqsidN2ao9Fo1tT9Q3ORzoREixYcuPAWPG+5jwik8nUHji125bEMPLUTCZ
j5eg+LMU6t5ZQOr049okSuRbHzn0VsQwqhnnjJ+FCq1mzzGYt1oOrq1+QiDzxMEY
UkYLiA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org