Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/F95335D4950011EEA378E536C4F9AE02.roa
File: F95335D4950011EEA378E536C4F9AE02.roa (raw, json)
Hash identifier: QdpxDy1W1ByHR77AyLwG4i2PxoK71J8pUW6+P3LPJGU=
Subject key identifier: 72:D9:10:67:65:CF:B2:7C:F3:B4:45:EA:5B:8D:4E:D5:8B:41:C8:7C
Certificate issuer: /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial: 08F1
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/F95335D4950011EEA378E536C4F9AE02.roa
Signing time: Thu 07 Dec 2023 13:03:11 +0000
ROA not before: Thu 07 Dec 2023 13:03:11 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 212517
IP address blocks: 103.82.216.0/23 maxlen: 23
103.82.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Validity
Not Before: Dec 7 13:03:11 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6571c28f-c2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:25:a0:2b:7a:6b:49:e3:c0:10:5c:ce:71:b2:
d7:10:74:25:d4:fb:3d:7a:73:58:76:f7:e0:b3:3f:
cc:40:75:6c:36:42:29:90:c0:74:17:f6:15:79:21:
8a:68:b3:29:08:a0:bf:6d:e5:3f:07:ce:bf:1b:59:
81:1a:6d:df:4b:bd:7f:c9:21:a8:64:b8:f5:86:ad:
41:e7:df:eb:f6:04:70:7f:93:bd:4b:18:f6:53:89:
f5:68:ba:5d:82:2a:0f:d7:68:42:3d:00:af:bc:98:
b0:35:88:1d:14:8a:a1:f1:f4:7b:09:1d:3e:11:63:
ed:85:4f:04:0d:fc:08:6f:7c:c0:c3:b5:70:c7:b6:
26:80:f5:76:95:42:8a:24:5a:a7:2c:57:08:4b:3e:
6d:22:3f:b5:40:3e:21:fe:88:cf:00:eb:c0:27:3b:
53:f7:48:b2:1f:4b:cd:1e:da:ad:94:b5:b2:95:17:
ea:a4:7f:f5:30:a6:00:46:d7:06:06:9a:d7:19:82:
dd:b6:36:5b:26:c6:93:68:87:ef:15:11:9b:ea:4d:
ea:1f:17:02:54:c0:40:60:ae:93:06:9a:ac:d9:59:
25:41:48:25:ac:9b:f8:f7:9f:b6:38:e1:98:d8:82:
82:b2:6a:77:89:58:7e:59:b1:c8:e2:4f:c1:97:4e:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:10:67:65:CF:B2:7C:F3:B4:45:EA:5B:8D:4E:D5:8B:41:C8:7C
X509v3 Authority Key Identifier:
keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/F95335D4950011EEA378E536C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.216.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:a8:d8:5b:1b:b9:e1:8b:b6:e7:95:9c:df:c3:be:3e:35:27:
6a:c1:0c:bc:6f:42:f0:93:80:93:ed:c0:d4:7a:b1:8b:53:a1:
42:eb:0e:97:15:4d:ab:e3:ad:51:e7:9a:18:a5:6c:9b:35:ab:
67:6c:35:9a:0d:b7:c1:a5:b7:b2:08:b7:49:03:fe:8d:cd:87:
9d:55:60:53:4b:25:4c:00:02:b0:c9:bd:71:b5:98:8f:5e:c5:
37:7a:c1:97:5e:9e:ef:cd:30:5d:d7:62:20:91:81:ec:48:1c:
34:36:cd:77:37:85:1d:30:52:88:19:84:97:6f:fa:42:37:f3:
df:7f:ff:3e:f0:5c:fa:6e:49:df:1a:2a:f7:aa:e3:f1:68:4a:
32:32:b6:d9:33:e1:c6:46:45:d1:20:fe:37:cb:db:36:dd:18:
a1:09:b3:5e:16:00:7e:c7:c1:d4:21:da:df:52:79:ca:14:90:
9e:f5:96:d7:5a:6a:70:4f:cd:a1:3c:5e:1f:31:98:6c:c1:2b:
97:ff:ce:84:7e:85:b3:dd:57:79:0a:a2:8f:d4:f6:6d:b7:26:
fc:19:35:d5:d8:f2:42:6b:0b:6e:69:2d:39:99:52:da:dd:6d:
6c:b1:16:96:02:2a:12:83:75:f6:19:8a:f9:53:92:79:76:6b:
c8:b9:62:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMjUxMTAvBgNVBAUTKDA2REYxQjUyNEJEMERERERBMTc5QjA0NTA2MjdFQUY3
RjhEOTRDMDAwHhcNMjMxMjA3MTMwMzExWhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTcxYzI4Zi1jMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4CWgK3prSePAEFzOcbLXEHQl1Ps9enNYdvfgsz/MQHVsNkIpkMB0F/YVeSGK
aLMpCKC/beU/B86/G1mBGm3fS71/ySGoZLj1hq1B59/r9gRwf5O9Sxj2U4n1aLpd
gioP12hCPQCvvJiwNYgdFIqh8fR7CR0+EWPthU8EDfwIb3zAw7Vwx7YmgPV2lUKK
JFqnLFcISz5tIj+1QD4h/ojPAOvAJztT90iyH0vNHtqtlLWylRfqpH/1MKYARtcG
BprXGYLdtjZbJsaTaIfvFRGb6k3qHxcCVMBAYK6TBpqs2VklQUglrJv495+2OOGY
2IKCsmp3iVh+WbHI4k/Bl07FIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHLZEGdl
z7J887RF6luNTtWLQch8MB8GA1UdIwQYMBaAFAbfG1JL0N3doXmwRQYn6vf42UwA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAyNS8xMEQ3NzFDMjc4
ODQxMUVBQURBNTEzMTBDNEY5QUUwMi9CdDhiVWt2UTNkMmhlYkJGQmlmcTlfalpU
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0OGJVa3ZRM2QyaGViQkZCaWZxOV9qWlRBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkwMjUvMTBENzcxQzI3ODg0MTFFQUFEQTUxMzEwQzRGOUFFMDIvRjk1MzM1RDQ5
NTAwMTFFRUEzNzhFNTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnUtgwDQYJKoZIhvcNAQELBQADggEBAL+o2FsbueGLtueV
nN/Dvj41J2rBDLxvQvCTgJPtwNR6sYtToULrDpcVTavjrVHnmhilbJs1q2dsNZoN
t8Glt7IIt0kD/o3Nh51VYFNLJUwAArDJvXG1mI9exTd6wZdenu/NMF3XYiCRgexI
HDQ2zXc3hR0wUogZhJdv+kI3899//z7wXPpuSd8aKveq4/FoSjIyttkz4cZGRdEg
/jfL2zbdGKEJs14WAH7HwdQh2t9SecoUkJ71ltdaanBPzaE8Xh8xmGzBK5f/zoR+
hbPdV3kKoo/U9m23JvwZNdXY8kJrC25pLTmZUtrdbWyxFpYCKhKDdfYZivlTknl2
a8i5YmQ=
-----END CERTIFICATE-----
Generated at Fri Dec 8 16:29:09 2023 by rpki-client on console-fra.rpki-client.org