Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/BE7860C80C5711EF8AE6AB5AC4F9AE02.roa
File: BE7860C80C5711EF8AE6AB5AC4F9AE02.roa (raw, json)
Hash identifier: 9sDrodfqoGzvFCdndNDtYFdGHudc/7bnrCHTn0gjYrA=
Subject key identifier: C7:A4:63:0D:1F:C6:8E:17:29:E0:B9:17:91:42:AA:00:46:4F:CA:58
Certificate issuer: /CN=A91BF5C2/serialNumber=AB24AF5DBDC3AF0647853DAB199FA49FEB6D0735
Certificate serial: 0757
Authority key identifier: AB:24:AF:5D:BD:C3:AF:06:47:85:3D:AB:19:9F:A4:9F:EB:6D:07:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/BE7860C80C5711EF8AE6AB5AC4F9AE02.roa
Signing time: Tue 07 May 2024 09:54:07 +0000
ROA not before: Tue 07 May 2024 09:54:07 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 135391
IP address blocks: 103.129.196.0/24 maxlen: 24
103.129.197.0/24 maxlen: 24
103.129.198.0/24 maxlen: 24
103.129.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 09:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF5C2/serialNumber=AB24AF5DBDC3AF0647853DAB199FA49FEB6D0735
Validity
Not Before: May 7 09:54:07 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6639fa3f-66ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:52:a7:8c:5e:a8:a6:c0:6b:a6:f4:5b:d2:
75:41:9a:8a:bc:4a:fd:8a:00:50:c0:ca:d4:19:22:
13:c8:8a:78:ab:65:11:a5:0e:8d:dd:74:98:af:d5:
d2:5d:e3:d3:dd:29:73:d9:cb:76:a5:b4:d9:50:08:
bb:bd:d3:97:97:81:b7:1c:aa:ae:3b:bd:31:0f:05:
62:2f:8b:37:84:27:aa:cd:5e:f9:ab:39:72:a8:37:
d5:1a:63:d3:a6:79:95:5e:b4:e3:3f:84:76:01:11:
3c:c8:cb:22:36:82:df:6d:bd:93:a4:52:4f:8f:dd:
8b:60:c8:50:85:0f:40:d0:59:82:82:6c:02:30:09:
15:75:43:1b:e5:4e:44:9e:63:63:2c:bc:f3:c0:11:
06:da:53:2d:1e:60:20:e6:e1:f9:58:4b:3e:05:cb:
83:38:37:83:4c:bf:8f:a2:1a:b4:0d:c8:6c:fe:51:
0b:23:56:bf:d7:8a:b3:a4:fe:02:9b:01:d1:45:f8:
a1:a3:3a:05:9e:0a:89:f2:37:a9:19:35:df:da:f9:
cc:16:3a:27:a5:4a:67:25:60:7f:cb:ac:9f:e8:7b:
ec:e3:7f:9f:66:e5:2a:44:99:53:00:c7:76:f8:7e:
95:6a:59:b7:63:ba:06:17:cd:88:02:a8:11:3a:32:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:63:0D:1F:C6:8E:17:29:E0:B9:17:91:42:AA:00:46:4F:CA:58
X509v3 Authority Key Identifier:
keyid:AB:24:AF:5D:BD:C3:AF:06:47:85:3D:AB:19:9F:A4:9F:EB:6D:07:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/qySvXb3DrwZHhT2rGZ-kn-ttBzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qySvXb3DrwZHhT2rGZ-kn-ttBzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C2/B37E3CA8E74C11EABF5CAA1EC4F9AE02/BE7860C80C5711EF8AE6AB5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9f:63:06:ca:42:52:36:71:bc:00:89:f0:7d:cb:ed:59:1f:
3a:2f:5e:f5:76:86:99:a9:33:59:2d:03:95:8d:5b:7a:5f:67:
b2:e8:eb:1a:cb:32:ea:78:72:78:c2:59:0f:df:51:a2:5a:da:
ab:f1:71:29:80:72:17:34:cb:29:0e:c5:6e:f7:16:77:a1:1d:
88:ea:21:2f:54:76:c7:cf:3a:28:fc:3c:e0:ec:a7:0e:00:cd:
4d:32:23:fd:24:a7:84:f9:60:39:4f:cb:2f:1c:43:59:55:7e:
b7:91:d4:94:c3:79:43:b7:ae:c8:ca:39:fc:fd:af:43:ab:ed:
46:60:4b:34:e3:c5:00:dc:81:34:a1:34:49:fd:a9:cd:8c:ef:
98:4a:1a:97:d4:13:dc:b9:c2:22:69:72:30:fc:ae:c8:74:cd:
93:aa:31:bd:f9:88:ed:16:1b:53:c9:9f:e3:04:04:56:52:4b:
68:cd:0b:f0:ca:77:24:f2:0d:ff:e0:7a:a1:27:be:14:d0:33:
e8:6b:4f:44:f9:45:4b:2d:a8:1a:d8:f3:f4:46:e7:07:a7:74:
81:2d:67:c6:34:43:19:c8:a8:7d:9e:25:70:77:43:a0:56:60:
34:4f:4f:e5:53:36:ac:2b:54:9d:e8:30:7b:00:14:1f:9f:d4:
42:c0:9f:b1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY1QzIxMTAvBgNVBAUTKEFCMjRBRjVEQkRDM0FGMDY0Nzg1M0RBQjE5OUZBNDlG
RUI2RDA3MzUwHhcNMjQwNTA3MDk1NDA3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM5ZmEzZi02NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYRSp4xeqKbAa6b0W9J1QZqKvEr9igBQwMrUGSITyIp4q2URpQ6N3XSYr9XS
XePT3Slz2ct2pbTZUAi7vdOXl4G3HKquO70xDwViL4s3hCeqzV75qzlyqDfVGmPT
pnmVXrTjP4R2ARE8yMsiNoLfbb2TpFJPj92LYMhQhQ9A0FmCgmwCMAkVdUMb5U5E
nmNjLLzzwBEG2lMtHmAg5uH5WEs+BcuDODeDTL+Pohq0Dchs/lELI1a/14qzpP4C
mwHRRfihozoFngqJ8jepGTXf2vnMFjonpUpnJWB/y6yf6Hvs43+fZuUqRJlTAMd2
+H6Valm3Y7oGF82IAqgROjIsoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMekYw0f
xo4XKeC5F5FCqgBGT8pYMB8GA1UdIwQYMBaAFKskr129w68GR4U9qxmfpJ/rbQc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMi9CMzdFM0NBOEU3
NEMxMUVBQkY1Q0FBMUVDNEY5QUUwMi9xeVN2WGIzRHJ3WkhoVDJyR1ota24tdHRC
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F5U3ZYYjNEcndaSGhUMnJHWi1rbi10dEJ6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkY1QzIvQjM3RTNDQThFNzRDMTFFQUJGNUNBQTFFQzRGOUFFMDIvQkU3ODYwQzgw
QzU3MTFFRjhBRTZBQjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJngcQwDQYJKoZIhvcNAQELBQADggEBADyfYwbKQlI2cbwA
ifB9y+1ZHzovXvV2hpmpM1ktA5WNW3pfZ7Lo6xrLMup4cnjCWQ/fUaJa2qvxcSmA
chc0yykOxW73FnehHYjqIS9UdsfPOij8PODspw4AzU0yI/0kp4T5YDlPyy8cQ1lV
freR1JTDeUO3rsjKOfz9r0Or7UZgSzTjxQDcgTShNEn9qc2M75hKGpfUE9y5wiJp
cjD8rsh0zZOqMb35iO0WG1PJn+MEBFZSS2jNC/DKdyTyDf/geqEnvhTQM+hrT0T5
RUstqBrY8/RG5wendIEtZ8Y0QxnIqH2eJXB3Q6BWYDRPT+VTNqwrVJ3oMHsAFB+f
1ELAn7E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org