Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/BCC968581C0711EE831FF756C4F9AE02.roa
File: BCC968581C0711EE831FF756C4F9AE02.roa (raw, json)
Hash identifier: 7Ss1WtkDif4kXdcO46jk30BVx2NY01XB4bM9fOCaAyE=
Subject key identifier: 3A:56:2C:B7:2B:F5:FF:DD:74:74:C9:61:4E:3F:A9:3A:C5:09:09:47
Certificate issuer: /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial: 089A
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/BCC968581C0711EE831FF756C4F9AE02.roa
Signing time: Thu 06 Jul 2023 14:16:45 +0000
ROA not before: Thu 06 Jul 2023 14:16:45 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 4134
IP address blocks: 123.108.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Validity
Not Before: Jul 6 14:16:45 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=64a6cccd-bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:b6:18:af:53:69:2d:a5:09:da:7a:48:6a:
db:79:13:fd:7c:9c:6e:10:59:38:42:7a:80:31:45:
05:94:29:05:36:68:e2:d1:8f:0a:c8:71:0d:9a:fb:
6c:29:7a:33:fb:49:3d:d4:90:0a:3e:76:02:e9:9c:
fe:7d:98:cb:25:b4:b8:f7:8a:3f:c6:64:63:6b:9c:
00:8d:09:ca:c3:bb:e8:48:e8:a6:b0:e6:bf:47:25:
63:03:eb:5f:be:fd:88:04:0b:02:32:88:7e:48:d5:
15:2c:d0:1f:38:cb:ce:a5:62:b5:50:67:7a:a7:c8:
28:54:54:8a:64:37:1e:7c:b4:62:fa:fc:30:0e:ff:
af:c5:d6:f3:10:5a:7f:49:6a:a9:6d:fa:58:5b:f3:
d3:cc:9a:9a:72:e6:25:2d:20:7c:63:90:21:44:b8:
5a:c7:16:74:5d:90:19:36:f0:34:0d:99:04:c8:84:
f5:62:06:cf:48:c1:cd:03:41:6b:80:1f:78:5a:53:
49:3d:a8:77:ce:25:f5:3c:5b:86:5d:a4:65:46:ae:
68:82:ad:6f:23:3e:54:36:68:53:24:46:8c:3e:3f:
8c:aa:d9:b4:d0:33:72:eb:b7:99:8a:90:fe:b5:6f:
91:1a:b3:9c:93:55:9f:d8:91:91:e8:9f:6b:9f:e8:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:56:2C:B7:2B:F5:FF:DD:74:74:C9:61:4E:3F:A9:3A:C5:09:09:47
X509v3 Authority Key Identifier:
keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/BCC968581C0711EE831FF756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.108.72.0/22
Signature Algorithm: sha256WithRSAEncryption
87:8e:65:4f:7d:96:29:6b:b2:8e:2d:9f:4c:1e:ac:a0:3c:46:
c0:3b:06:73:84:4f:68:f5:64:8b:bb:11:73:3d:e0:1b:f1:03:
26:d2:87:c2:1d:ab:e4:b8:84:c8:9e:84:88:61:e0:d2:4e:18:
3b:c9:77:8e:15:e7:c0:a1:52:9c:25:eb:7e:26:7e:48:7d:3c:
70:1b:ed:2d:7d:b1:d5:b1:5f:45:10:2e:20:91:55:c4:8b:7d:
8a:01:db:11:dd:82:6e:c4:d7:3c:ba:a7:e4:61:3b:1b:4c:08:
30:61:85:47:11:da:39:bb:8e:1b:45:11:d1:a1:0e:07:35:16:
23:5e:3f:8d:52:d3:05:82:3b:42:d8:2e:53:ef:37:eb:e0:aa:
03:d7:46:af:0f:04:da:c4:e8:cf:06:18:14:ba:94:ac:b8:bf:
6f:ad:b9:d1:da:20:f2:8c:cc:6a:68:e1:d5:a2:af:bf:1f:60:
54:c2:02:d8:b8:90:a4:35:ab:8b:f9:75:32:f0:cb:1e:9e:db:
f3:bb:eb:89:fd:f8:85:19:d7:7f:d9:28:2f:75:cd:0f:f3:75:
63:d1:6d:18:30:f2:70:37:be:b2:91:a6:fc:11:b9:8d:6e:1a:
7e:21:53:7a:7a:03:8e:01:7b:2a:ce:cf:c9:0d:0b:2a:c3:37:
a6:ce:39:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMjUxMTAvBgNVBAUTKDA2REYxQjUyNEJEMERERERBMTc5QjA0NTA2MjdFQUY3
RjhEOTRDMDAwHhcNMjMwNzA2MTQxNjQ1WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE2Y2NjZC1iY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUe2GK9TaS2lCdp6SGrbeRP9fJxuEFk4QnqAMUUFlCkFNmji0Y8KyHENmvts
KXoz+0k91JAKPnYC6Zz+fZjLJbS494o/xmRja5wAjQnKw7voSOimsOa/RyVjA+tf
vv2IBAsCMoh+SNUVLNAfOMvOpWK1UGd6p8goVFSKZDcefLRi+vwwDv+vxdbzEFp/
SWqpbfpYW/PTzJqacuYlLSB8Y5AhRLhaxxZ0XZAZNvA0DZkEyIT1YgbPSMHNA0Fr
gB94WlNJPah3ziX1PFuGXaRlRq5ogq1vIz5UNmhTJEaMPj+Mqtm00DNy67eZipD+
tW+RGrOck1Wf2JGR6J9rn+jTEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDpWLLcr
9f/ddHTJYU4/qTrFCQlHMB8GA1UdIwQYMBaAFAbfG1JL0N3doXmwRQYn6vf42UwA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAyNS8xMEQ3NzFDMjc4
ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNkMmhlYkJGQmlmcTlfalpU
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0OGJVa3ZRM2QyaGViQkZCaWZxOV9qWlRBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkwMjUvMTBENzcxQzI3ODg0MTFFQUFEQTUxMzEwQzRGOUFFMDIvQkNDOTY4NTgx
QzA3MTFFRTgzMUZGNzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ7bEgwDQYJKoZIhvcNAQELBQADggEBAIeOZU99lilrso4t
n0werKA8RsA7BnOET2j1ZIu7EXM94BvxAybSh8Idq+S4hMiehIhh4NJOGDvJd44V
58ChUpwl634mfkh9PHAb7S19sdWxX0UQLiCRVcSLfYoB2xHdgm7E1zy6p+RhOxtM
CDBhhUcR2jm7jhtFEdGhDgc1FiNeP41S0wWCO0LYLlPvN+vgqgPXRq8PBNrE6M8G
GBS6lKy4v2+tudHaIPKMzGpo4dWir78fYFTCAti4kKQ1q4v5dTLwyx6e2/O764n9
+IUZ13/ZKC91zQ/zdWPRbRgw8nA3vrKRpvwRuY1uGn4hU3p6A44BeyrOz8kNCyrD
N6bOOY0=
-----END CERTIFICATE-----
Generated at Mon Nov 20 09:30:05 2023 by rpki-client on console-ams.rpki-client.org