Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B34B8/1391B69610F811EA8F18611FC4F9AE02/585E2180EF6B11EBAD94EE65C4F9AE02.roa
File: 585E2180EF6B11EBAD94EE65C4F9AE02.roa (raw, json)
Hash identifier: amTB4OIOUH9Y8KpPV770R5DnsoZXvGB6xls7NbCrx6Y=
Subject key identifier: 67:88:DC:93:76:B8:B3:90:EC:E1:38:67:30:2C:E7:21:9C:9B:32:25
Certificate issuer: /CN=A91B34B8/serialNumber=97337110C75AA32C37B8E74C8CF5C340A2DD06F5
Certificate serial: 0A91
Authority key identifier: 97:33:71:10:C7:5A:A3:2C:37:B8:E7:4C:8C:F5:C3:40:A2:DD:06:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzNxEMdaoyw3uOdMjPXDQKLdBvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B34B8/1391B69610F811EA8F18611FC4F9AE02/585E2180EF6B11EBAD94EE65C4F9AE02.roa
Signing time: Sun 02 Apr 2023 20:27:10 +0000
ROA not before: Sun 02 Apr 2023 20:27:10 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 58715
IP address blocks: 103.85.156.0/22 maxlen: 24
144.48.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 15:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B34B8/serialNumber=97337110C75AA32C37B8E74C8CF5C340A2DD06F5
Validity
Not Before: Apr 2 20:27:10 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6429e51e-0ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:e3:f7:c8:9a:d3:1f:fa:df:74:97:b0:96:
13:51:f1:b6:ed:d4:1b:22:9f:98:f2:80:ce:9c:76:
2c:c0:56:94:5d:c3:b9:cc:92:10:5d:7e:6f:8a:ee:
8a:62:eb:92:91:06:33:89:b6:fc:84:c0:1a:f3:68:
c1:54:cb:0f:42:27:55:90:15:c7:ae:66:4f:83:9e:
b9:1b:ea:70:89:51:12:e2:e1:b8:cf:2f:c8:c7:ae:
ba:a1:a1:b7:41:95:4b:8d:a2:63:de:f1:67:40:87:
d4:c4:e5:91:b7:a1:13:c9:86:05:82:af:0e:63:79:
cd:92:81:44:05:51:b1:ce:3b:98:c2:78:23:70:c1:
0b:3a:de:39:0e:78:a9:67:20:b5:db:f3:64:77:49:
21:fa:e3:23:69:5b:e5:0c:1d:71:b4:37:99:f4:fc:
d7:27:a0:de:81:28:c2:37:81:ed:ff:a1:9a:93:19:
90:5e:15:ba:26:df:47:a6:6a:48:d1:9b:f3:06:39:
9d:17:95:e8:04:49:22:f7:37:93:f1:56:aa:17:02:
4d:b9:ac:d7:a8:3d:b4:ae:cb:31:19:7a:5f:db:01:
af:81:ef:c3:dd:1f:27:f3:38:47:26:e6:32:d7:bb:
5b:e4:72:9b:a4:9f:67:c5:0a:a6:74:ca:a9:55:22:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:DC:93:76:B8:B3:90:EC:E1:38:67:30:2C:E7:21:9C:9B:32:25
X509v3 Authority Key Identifier:
keyid:97:33:71:10:C7:5A:A3:2C:37:B8:E7:4C:8C:F5:C3:40:A2:DD:06:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B34B8/1391B69610F811EA8F18611FC4F9AE02/lzNxEMdaoyw3uOdMjPXDQKLdBvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzNxEMdaoyw3uOdMjPXDQKLdBvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B34B8/1391B69610F811EA8F18611FC4F9AE02/585E2180EF6B11EBAD94EE65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.156.0/22
144.48.116.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:69:6a:73:0c:67:ca:1e:42:30:6e:cb:2a:24:79:8a:c2:f9:
11:b7:c7:aa:45:85:53:02:0b:ab:aa:a3:05:f2:c1:15:66:3f:
fa:8c:22:9f:0e:84:82:04:18:53:8c:84:73:db:a5:5e:99:81:
1f:a1:a4:74:36:73:1c:27:80:3d:48:8b:df:65:17:3f:3d:11:
4b:10:47:cd:b3:75:58:cf:dc:10:ec:29:8b:58:43:20:51:0b:
6f:f3:8f:02:5c:7a:19:33:15:6c:d3:62:dc:d0:2d:9b:99:27:
8a:16:d4:49:47:ad:93:2b:00:89:5f:c2:89:51:17:12:ac:16:
0a:9b:c1:05:7f:32:60:38:9c:7c:52:22:9c:aa:e2:f4:4b:27:
f0:fb:64:93:1b:de:41:2a:f2:fd:60:29:b3:3c:eb:0f:f5:b3:
2e:9c:4f:29:f3:10:3d:32:26:27:bc:e3:3d:4b:f7:fc:20:e1:
6a:73:68:f5:2c:e9:9a:94:c5:c4:13:4c:2c:87:27:2f:b0:ff:
87:b5:17:7b:65:b4:d6:af:52:94:90:3e:5a:a7:d1:8f:7f:a5:
f1:d0:9f:60:c9:9a:9c:30:72:dc:15:4f:67:14:52:00:cc:73:
9b:e8:84:5a:47:a4:b2:cf:c3:a8:ff:66:d1:fa:c0:fe:65:51:
f4:92:fe:5a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM0QjgxMTAvBgNVBAUTKDk3MzM3MTEwQzc1QUEzMkMzN0I4RTc0QzhDRjVDMzQw
QTJERDA2RjUwHhcNMjMwNDAyMjAyNzEwWhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDI5ZTUxZS0wZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNbj98ia0x/633SXsJYTUfG27dQbIp+Y8oDOnHYswFaUXcO5zJIQXX5viu6K
YuuSkQYzibb8hMAa82jBVMsPQidVkBXHrmZPg565G+pwiVES4uG4zy/Ix666oaG3
QZVLjaJj3vFnQIfUxOWRt6ETyYYFgq8OY3nNkoFEBVGxzjuYwngjcMELOt45Dnip
ZyC12/Nkd0kh+uMjaVvlDB1xtDeZ9PzXJ6DegSjCN4Ht/6GakxmQXhW6Jt9HpmpI
0ZvzBjmdF5XoBEki9zeT8VaqFwJNuazXqD20rssxGXpf2wGvge/D3R8n8zhHJuYy
17tb5HKbpJ9nxQqmdMqpVSL7xQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGeI3JN2
uLOQ7OE4ZzAs5yGcmzIlMB8GA1UdIwQYMBaAFJczcRDHWqMsN7jnTIz1w0Ci3Qb1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzRCOC8xMzkxQjY5NjEw
RjgxMUVBOEYxODYxMUZDNEY5QUUwMi9sek54RU1kYW95dzN1T2RNalBYRFFLTGRC
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x6TnhFTWRhb3l3M3VPZE1qUFhEUUtMZEJ2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjM0QjgvMTM5MUI2OTYxMEY4MTFFQThGMTg2MTFGQzRGOUFFMDIvNTg1RTIxODBF
RjZCMTFFQkFEOTRFRTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnVZwDBAKQMHQwDQYJKoZIhvcNAQELBQADggEBAMlpanMM
Z8oeQjBuyyokeYrC+RG3x6pFhVMCC6uqowXywRVmP/qMIp8OhIIEGFOMhHPbpV6Z
gR+hpHQ2cxwngD1Ii99lFz89EUsQR82zdVjP3BDsKYtYQyBRC2/zjwJcehkzFWzT
YtzQLZuZJ4oW1ElHrZMrAIlfwolRFxKsFgqbwQV/MmA4nHxSIpyq4vRLJ/D7ZJMb
3kEq8v1gKbM86w/1sy6cTynzED0yJie84z1L9/wg4WpzaPUs6ZqUxcQTTCyHJy+w
/4e1F3tltNavUpSQPlqn0Y9/pfHQn2DJmpwwctwVT2cUUgDMc5vohFpHpLLPw6j/
ZtH6wP5lUfSS/lo=
-----END CERTIFICATE-----
Generated at Fri Mar 22 18:51:28 2024 by rpki-client on console-ams.rpki-client.org