Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/9C8B26D82BB511EC8499F575C4F9AE02.roa
File: 9C8B26D82BB511EC8499F575C4F9AE02.roa (raw, json)
Hash identifier: Wn3n2zYXx10ujdwbbmUZHZpIvQppHgKPP3gHiG4QAk4=
Subject key identifier: 1F:74:34:D2:EE:06:FD:6A:B3:DC:72:AA:88:40:13:32:13:99:6E:07
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 039F
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/9C8B26D82BB511EC8499F575C4F9AE02.roa
Signing time: Tue 07 Jun 2022 13:39:42 +0000
ROA not before: Tue 07 Jun 2022 13:39:42 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 61138
IP address blocks: 103.151.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927 (0x39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Validity
Not Before: Jun 7 13:39:42 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=629f551e-90dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:cc:d5:06:c7:6f:a9:4c:b9:d0:23:cb:53:
c7:18:e3:26:57:cc:6c:ea:8a:74:eb:99:f4:3a:1e:
75:1a:9d:cf:b4:b8:75:a4:f4:07:94:ca:4d:63:57:
f3:54:bc:53:7f:bb:1e:fa:8b:45:3b:4a:23:df:31:
87:58:3a:05:a4:93:78:e6:aa:94:bc:c6:85:e7:20:
61:a7:66:a2:3c:fa:9f:44:43:19:11:bc:3e:9a:bc:
1b:88:1f:21:54:88:28:2c:fb:e9:76:a6:ff:47:17:
5c:46:45:9a:8d:23:87:9a:dd:78:1f:8f:64:06:48:
57:bc:e0:b9:f6:03:bb:14:72:b0:20:3f:70:c5:61:
ea:f3:fd:6d:b1:9b:db:eb:2e:b4:a2:6a:ab:3f:fa:
df:03:a3:7e:5c:d4:43:db:4c:e2:bb:3c:c4:fc:56:
37:11:01:b9:a7:26:0c:c4:b0:d7:1e:26:f2:2a:60:
f4:f9:9d:ad:65:f7:4c:1a:21:26:cd:81:64:30:72:
d2:70:fa:89:7d:c7:d7:d9:1c:cf:20:98:21:90:4a:
8b:55:e1:cd:d0:3a:1a:49:a3:2e:d7:a4:77:49:1d:
d7:12:be:61:a2:7c:43:e0:ce:e9:39:bc:a7:33:08:
bb:e7:91:3d:19:e6:93:c2:4f:32:e0:6e:1c:72:07:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:34:D2:EE:06:FD:6A:B3:DC:72:AA:88:40:13:32:13:99:6E:07
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/9C8B26D82BB511EC8499F575C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f6:7f:2f:ae:a3:8d:e8:e4:da:24:da:9b:f3:4f:b5:29:27:
77:89:a4:bd:e7:7f:29:fe:92:41:57:73:d3:ed:bb:c9:ed:88:
62:0c:31:57:6b:fb:b0:e8:5c:24:5f:00:91:ea:8f:97:17:40:
d2:06:f8:58:15:7c:dc:8e:b4:97:71:ac:f9:34:be:45:01:c0:
ca:69:f4:21:4b:54:e5:e7:06:09:3c:99:bf:34:87:b9:98:16:
33:3c:03:df:7b:76:22:f5:c7:b1:cc:30:08:9f:69:77:b3:e6:
dd:92:12:5d:10:51:c9:11:29:cd:71:e9:90:ed:52:8d:fb:ad:
48:b8:ee:15:22:c6:18:6f:0b:bc:97:10:83:50:36:92:ed:59:
72:29:36:c6:37:41:f6:03:aa:9a:28:82:1d:85:f8:af:49:c8:
c6:ba:8b:dd:3e:c6:af:62:44:49:25:95:04:0b:6b:a4:4a:cb:
2a:26:bb:70:fe:b1:c6:ce:04:22:21:08:6c:03:41:b7:3a:d1:
1e:e8:43:aa:ff:ea:1c:51:76:78:98:7a:a7:a9:18:f9:b1:07:
27:58:c0:55:e1:1a:98:ee:b4:05:2c:f9:d8:bf:7c:26:88:11:
08:ba:fc:d0:7c:f9:97:8b:c7:47:b8:e0:32:e4:57:cb:60:f0:
d3:cb:b3:53
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz
NTlCMzAxNjUwHhcNMjIwNjA3MTMzOTQyWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjlmNTUxZS05MGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnwzM1QbHb6lMudAjy1PHGOMmV8xs6op065n0Oh51Gp3PtLh1pPQHlMpNY1fz
VLxTf7se+otFO0oj3zGHWDoFpJN45qqUvMaF5yBhp2aiPPqfREMZEbw+mrwbiB8h
VIgoLPvpdqb/RxdcRkWajSOHmt14H49kBkhXvOC59gO7FHKwID9wxWHq8/1tsZvb
6y60omqrP/rfA6N+XNRD20ziuzzE/FY3EQG5pyYMxLDXHibyKmD0+Z2tZfdMGiEm
zYFkMHLScPqJfcfX2RzPIJghkEqLVeHN0DoaSaMu16R3SR3XEr5honxD4M7pObyn
Mwi755E9GeaTwk8y4G4ccgdDDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB90NNLu
Bv1qs9xyqohAEzITmW4HMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw
RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdDMEUvRUU1OUU3RjQ4MEY5MTFFQjk4NUY0MzNBQzRGOUFFMDIvOUM4QjI2RDgy
QkI1MTFFQzg0OTlGNTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlygwDQYJKoZIhvcNAQELBQADggEBAFD2fy+uo43o5Nok
2pvzT7UpJ3eJpL3nfyn+kkFXc9Ptu8ntiGIMMVdr+7DoXCRfAJHqj5cXQNIG+FgV
fNyOtJdxrPk0vkUBwMpp9CFLVOXnBgk8mb80h7mYFjM8A997diL1x7HMMAifaXez
5t2SEl0QUckRKc1x6ZDtUo37rUi47hUixhhvC7yXEINQNpLtWXIpNsY3QfYDqpoo
gh2F+K9JyMa6i90+xq9iREkllQQLa6RKyyomu3D+scbOBCIhCGwDQbc60R7oQ6r/
6hxRdniYeqepGPmxBydYwFXhGpjutAUs+di/fCaIEQi6/NB8+ZeLx0e44DLkV8tg
8NPLs1M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org