Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/347E7D7A1EB511EEA684146AC4F9AE02.roa
File: 347E7D7A1EB511EEA684146AC4F9AE02.roa (raw, json)
Hash identifier: zve83T2xECeq6qJKnTMa+1JXNBn01DH4DKwMggfmtsI=
Subject key identifier: EC:1A:13:21:F6:92:5F:D1:1A:14:01:A5:A6:32:E0:7C:B7:9A:71:FF
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 5C
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/347E7D7A1EB511EEA684146AC4F9AE02.roa
Signing time: Wed 09 Aug 2023 05:28:12 +0000
ROA not before: Wed 09 Aug 2023 05:28:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 123.108.70.0/24 maxlen: 24
202.126.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Aug 9 05:28:12 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64d323ec-24af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:a2:94:7c:6b:2a:50:09:9d:6c:c3:ee:f9:
aa:2c:96:9a:82:63:e7:e4:ec:44:bb:ab:5a:b2:8d:
de:48:83:9a:53:3b:eb:bc:58:57:8d:27:82:3d:6b:
96:4d:ff:b3:81:64:b9:23:30:50:35:ad:f3:47:fe:
63:5b:87:42:0e:44:4a:20:da:9f:c2:3b:17:ce:d8:
19:b7:ee:3f:ee:ca:90:1c:a6:f4:3e:cc:a3:c1:ff:
5b:b4:95:a1:d4:09:38:e7:21:26:13:b9:59:db:3a:
43:d4:97:2c:1f:16:c9:a3:cd:b0:51:79:a9:f0:bb:
45:b6:6b:5d:aa:00:3e:cb:a9:61:af:58:9b:e3:7a:
49:fd:31:2d:a3:01:12:af:f1:d6:b9:6f:5a:41:2b:
e8:b8:99:ac:bd:59:68:fc:68:07:be:1c:1e:6e:98:
14:54:3b:80:d7:41:40:4e:8f:bf:5c:b8:de:7e:f5:
a8:5c:ca:2d:00:b6:ec:b5:4d:d9:54:f2:bf:47:1a:
47:aa:76:19:d4:f2:59:76:d3:bd:2b:e4:04:34:0a:
38:aa:48:f5:c0:ac:e3:17:9f:27:ec:4e:1b:13:62:
b7:7b:fb:3c:c4:2d:72:19:c5:e8:8e:c6:91:86:b7:
2b:41:be:7d:55:69:5b:a9:96:14:da:54:ab:a6:0a:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1A:13:21:F6:92:5F:D1:1A:14:01:A5:A6:32:E0:7C:B7:9A:71:FF
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/347E7D7A1EB511EEA684146AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.108.70.0/24
202.126.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:79:a8:bb:05:87:9d:36:a1:f3:53:0e:be:de:b9:5d:4f:49:
2d:0c:ce:76:0d:ef:c1:19:d0:28:37:d4:96:b7:b5:c4:56:b3:
ba:48:0b:06:68:3a:ad:87:36:b2:76:6b:5e:2e:01:f2:e3:2a:
72:39:a8:66:c7:d7:c9:82:98:c5:98:99:a9:9a:c6:46:15:04:
db:4b:f4:11:db:a7:93:32:1d:f8:83:7e:7a:df:d3:22:09:f6:
29:0e:f0:db:87:09:67:bf:ea:d7:74:d5:9b:51:82:42:e2:4e:
7f:17:79:7b:94:b3:b1:4e:cf:53:11:75:f9:3f:71:2f:0e:2b:
4a:cc:aa:c9:8e:d5:94:de:c9:5b:bb:6c:4c:e6:0b:e0:94:46:
2f:ee:e0:36:bd:c2:c8:e8:20:83:17:5a:1d:47:98:5a:95:15:
31:d8:04:66:1a:80:87:40:04:c5:06:c9:3f:35:49:10:1f:1b:
38:40:f9:03:fe:24:23:31:a6:a2:ef:a6:58:f0:23:7a:e3:a4:
a2:4a:24:24:20:2b:64:dc:ef:86:aa:ca:f6:28:e0:b6:33:94:
75:3e:5e:46:90:4a:90:54:2f:fe:f4:61:fc:38:63:15:9b:c3:
34:65:11:a9:9d:61:f0:e9:0b:c4:86:d5:4d:97:2f:c9:ee:f7:
6e:c9:40:72
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjU1MDExMC8GA1UEBRMoNDU2RUVBMDY5MkM2QTRGMjZGNTNEMkQyMzdEMUNCNERD
RDc4MzMwNTAeFw0yMzA4MDkwNTI4MTJaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZDMyM2VjLTI0YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWzqKUfGsqUAmdbMPu+aoslpqCY+fk7ES7q1qyjd5Ig5pTO+u8WFeNJ4I9a5ZN
/7OBZLkjMFA1rfNH/mNbh0IOREog2p/COxfO2Bm37j/uypAcpvQ+zKPB/1u0laHU
CTjnISYTuVnbOkPUlywfFsmjzbBReanwu0W2a12qAD7LqWGvWJvjekn9MS2jARKv
8da5b1pBK+i4may9WWj8aAe+HB5umBRUO4DXQUBOj79cuN5+9ahcyi0Atuy1TdlU
8r9HGkeqdhnU8ll2070r5AQ0CjiqSPXArOMXnyfsThsTYrd7+zzELXIZxeiOxpGG
tytBvn1VaVuplhTaVKumCoXzAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU7BoTIfaS
X9EaFAGlpjLgfLeacf8wHwYDVR0jBBgwFoAURW7qBpLGpPJvU9LSN9HLTc14MwUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NTUwLzg0MDA5NTRBQ0VD
NDExRUQ4QTgzRkIxMUM0RjlBRTAyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUlc3cUJwTEdwUEp2VTlMU045SExUYzE0TXdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU1MC84NDAwOTU0QUNFQzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi8zNDdFN0Q3QTFF
QjUxMUVFQTY4NDE0NkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAHtsRgMEAMp+YTANBgkqhkiG9w0BAQsFAAOCAQEALnmouwWH
nTah81MOvt65XU9JLQzOdg3vwRnQKDfUlre1xFazukgLBmg6rYc2snZrXi4B8uMq
cjmoZsfXyYKYxZiZqZrGRhUE20v0EdunkzId+IN+et/TIgn2KQ7w24cJZ7/q13TV
m1GCQuJOfxd5e5SzsU7PUxF1+T9xLw4rSsyqyY7VlN7JW7tsTOYL4JRGL+7gNr3C
yOgggxdaHUeYWpUVMdgEZhqAh0AExQbJPzVJEB8bOED5A/4kIzGmou+mWPAjeuOk
okokJCArZNzvhqrK9ijgtjOUdT5eRpBKkFQv/vRh/DhjFZvDNGURqZ1h8OkLxIbV
TZcvye73bslAcg==
-----END CERTIFICATE-----
Generated at Thu Aug 10 06:46:53 2023 by rpki-client on console-ams.rpki-client.org