Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/980FBF380C8E11EC899E3211C4F9AE02.roa
File: 980FBF380C8E11EC899E3211C4F9AE02.roa (raw, json)
Hash identifier: 6PsJWrPCESS72Cgsphwc7pgkinbPzCBr6HjEWyJ7RGI=
Subject key identifier: 10:A3:27:39:C4:D7:B9:40:F1:64:70:2B:55:24:0A:81:BC:CF:2E:CC
Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial: 03D8
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/980FBF380C8E11EC899E3211C4F9AE02.roa
Signing time: Thu 05 Oct 2023 01:02:33 +0000
ROA not before: Thu 05 Oct 2023 01:02:33 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 137549
IP address blocks: 103.172.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Validity
Not Before: Oct 5 01:02:33 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651e0b29-b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:63:fe:83:b0:ec:da:c6:86:97:2b:6f:f8:
5a:db:d9:d7:90:62:15:64:d0:ac:cc:c0:bd:2c:8b:
5a:13:00:19:05:1e:bf:84:b9:ff:5a:76:c3:06:20:
d2:93:b5:e0:58:08:3b:e6:47:83:06:0a:5a:cb:32:
45:6f:cb:ed:49:3c:dc:9d:38:75:93:96:d8:28:bf:
5e:5a:fb:5c:91:58:8f:bd:6e:04:b7:80:84:97:df:
7c:1a:bd:79:4f:bb:70:74:8a:29:ea:71:d3:4e:30:
16:b7:1e:79:f9:49:88:83:be:98:e7:44:fa:de:36:
dd:00:6f:4b:2b:6f:1c:fc:bd:01:74:69:30:c8:92:
8d:ad:9b:c4:1f:60:52:08:4d:6b:a4:17:d8:19:a9:
ec:d9:4a:be:bf:f2:c0:7b:9e:e1:f1:b7:39:7a:97:
b9:90:62:19:6a:23:09:e1:53:15:60:da:3e:d1:f1:
a1:ce:af:29:44:c7:49:67:5f:47:91:dd:5c:19:65:
51:f2:bc:b5:e4:ee:55:84:a9:a8:48:56:4f:1c:fe:
3d:c2:02:cd:97:b1:f8:90:97:68:ab:9e:74:a6:47:
6a:d6:18:21:a5:b3:7d:42:19:29:6b:43:44:92:3e:
25:b1:e8:4a:8d:71:da:1c:43:cb:8c:e0:65:d8:39:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:27:39:C4:D7:B9:40:F1:64:70:2B:55:24:0A:81:BC:CF:2E:CC
X509v3 Authority Key Identifier:
keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/980FBF380C8E11EC899E3211C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.142.0/23
Signature Algorithm: sha256WithRSAEncryption
72:88:ec:38:55:68:3c:a5:05:6f:66:ad:42:db:10:69:8c:91:
0a:97:c7:41:5a:f4:82:ed:7b:2b:99:2d:ee:1d:2f:47:ed:d3:
e4:ec:f3:19:ff:0f:19:61:ac:53:05:9c:2a:54:2f:a9:a8:73:
81:df:1c:43:5d:e9:de:71:4f:8a:df:d0:71:d7:8b:3b:a3:09:
40:34:4a:8a:ac:ef:15:28:33:3d:49:82:d9:e1:9d:af:36:3b:
e4:25:a9:4a:98:d9:e1:68:17:fb:95:22:03:cd:5f:93:f1:0e:
50:4b:a3:a5:d0:d5:f0:b2:f8:53:07:a2:fb:04:c2:75:90:9c:
52:3d:8d:d3:b2:a3:89:44:dd:fa:e5:86:47:f8:cb:92:ee:3a:
42:cd:5d:5f:59:5a:84:e7:20:75:b2:87:40:61:0d:92:ff:f7:
ba:4b:43:5e:d0:59:0b:8f:67:8d:ef:ae:fa:e2:f3:da:a1:fa:
2a:3a:59:03:14:28:59:1a:e6:8d:84:50:21:5d:86:00:b9:4f:
4c:38:6f:fd:6f:5a:4c:0d:3f:19:a1:32:ce:df:08:3f:d6:5e:
2b:46:2b:4b:74:4c:eb:8a:d1:c9:02:a6:e8:55:22:94:24:24:
4c:c6:03:8e:31:65:1f:3d:74:b6:f1:c7:8a:39:5a:ce:c4:e9:
28:f9:bf:75
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4
RUI0RTIyNUYwHhcNMjMxMDA1MDEwMjMzWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFlMGIyOS1iMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyRj/oOw7NrGhpcrb/ha29nXkGIVZNCszMC9LItaEwAZBR6/hLn/WnbDBiDS
k7XgWAg75keDBgpayzJFb8vtSTzcnTh1k5bYKL9eWvtckViPvW4Et4CEl998Gr15
T7twdIop6nHTTjAWtx55+UmIg76Y50T63jbdAG9LK28c/L0BdGkwyJKNrZvEH2BS
CE1rpBfYGans2Uq+v/LAe57h8bc5epe5kGIZaiMJ4VMVYNo+0fGhzq8pRMdJZ19H
kd1cGWVR8ry15O5VhKmoSFZPHP49wgLNl7H4kJdoq550pkdq1hghpbN9Qhkpa0NE
kj4lsehKjXHaHEPLjOBl2Dk47wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBCjJznE
17lA8WRwK1UkCoG8zy7MMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD
OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzk1NkMvRkIzMDVBNUUwQzhBMTFFQ0EzMTkxQjBDQzRGOUFFMDIvOTgwRkJGMzgw
QzhFMTFFQzg5OUUzMjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrI4wDQYJKoZIhvcNAQELBQADggEBAHKI7DhVaDylBW9m
rULbEGmMkQqXx0Fa9ILteyuZLe4dL0ft0+Ts8xn/DxlhrFMFnCpUL6moc4HfHENd
6d5xT4rf0HHXizujCUA0Soqs7xUoMz1Jgtnhna82O+QlqUqY2eFoF/uVIgPNX5Px
DlBLo6XQ1fCy+FMHovsEwnWQnFI9jdOyo4lE3frlhkf4y5LuOkLNXV9ZWoTnIHWy
h0BhDZL/97pLQ17QWQuPZ43vrvri89qh+io6WQMUKFka5o2EUCFdhgC5T0w4b/1v
WkwNPxmhMs7fCD/WXitGK0t0TOuK0ckCpuhVIpQkJEzGA44xZR89dLbxx4o5Ws7E
6Sj5v3U=
-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org