Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/B55EC6C491B211ED92AB0679C4F9AE02.roa
File: B55EC6C491B211ED92AB0679C4F9AE02.roa (raw, json)
Hash identifier: 2c4RzhzYczciOCNBGMKacIqLzG+8oGaU1Parx0Aa7Uw=
Subject key identifier: 7F:08:AD:5E:7E:26:8B:E2:00:A5:B0:38:70:F5:92:EF:2E:FF:14:CC
Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial: 05BC
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/B55EC6C491B211ED92AB0679C4F9AE02.roa
Signing time: Tue 27 Feb 2024 00:02:30 +0000
ROA not before: Tue 27 Feb 2024 00:02:30 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 135341
IP address blocks: 103.162.56.0/24 maxlen: 24
103.162.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 15:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Validity
Not Before: Feb 27 00:02:30 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65dd2696-22a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:6a:8e:08:93:26:87:b4:b1:9c:6f:f7:55:
bc:fc:1e:18:2c:f5:ad:f5:55:c5:81:07:78:14:d5:
4e:4d:e1:eb:12:7a:d1:c7:fa:c0:70:d9:79:3b:e4:
73:68:9c:59:b6:1a:9f:53:69:4d:f5:ae:4b:ab:c1:
d8:2a:86:bf:0e:88:22:a5:22:f1:ca:88:d3:c9:0d:
00:75:a3:7e:d0:79:71:25:c3:73:89:42:8b:3f:3d:
e6:87:9e:69:8c:63:50:24:a3:48:fe:63:af:ee:b4:
1a:8d:f4:7e:20:d7:62:9c:77:db:1e:51:85:90:95:
4f:a1:28:66:75:a8:78:a7:bf:27:25:9b:7d:93:ed:
2c:27:fa:d0:b2:1d:3d:8e:3c:ce:dd:db:35:9e:bd:
dd:ff:51:aa:8e:73:9d:b7:8f:a0:ae:9f:df:87:ea:
e4:36:69:69:5c:0b:89:78:ae:df:c2:60:79:a1:cc:
ae:9b:c7:08:57:45:a3:7c:b5:52:6d:24:86:07:ef:
b1:d2:2a:73:e7:8e:24:b9:39:66:1f:0b:f5:57:ba:
f7:93:6f:fb:4c:a5:9c:fd:c4:a1:f5:e1:5d:2e:54:
cd:76:a3:d1:04:96:ba:2c:83:31:dd:2e:68:bd:d6:
97:02:84:da:35:6b:05:44:d4:57:cd:de:cb:2d:2b:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:AD:5E:7E:26:8B:E2:00:A5:B0:38:70:F5:92:EF:2E:FF:14:CC
X509v3 Authority Key Identifier:
keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/B55EC6C491B211ED92AB0679C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.56.0/23
Signature Algorithm: sha256WithRSAEncryption
33:7f:aa:7b:ce:0c:4f:72:16:ed:90:35:31:72:96:4f:75:87:
63:55:65:0d:87:74:d9:a0:3a:64:61:81:22:91:ce:82:82:23:
b6:0b:0c:fa:74:e2:ca:1a:fc:72:6e:e1:b6:66:45:86:ba:e2:
5a:39:ce:15:9c:c3:f1:5f:e8:0e:90:90:e5:1f:2f:11:68:4e:
a4:93:bc:a0:a4:9e:b5:0a:26:0b:da:30:ab:91:3c:b0:45:ec:
f8:92:0f:44:4c:25:8b:23:af:2c:94:9e:79:80:0e:6f:2f:c0:
e7:e9:25:9e:24:fc:d5:3f:d4:38:cc:02:d3:cd:6c:ba:75:5e:
c1:2d:f7:14:9d:c4:1d:e3:33:48:65:bb:51:22:37:2a:21:d9:
66:e5:9e:27:23:8d:ca:1e:a0:44:26:76:08:01:5c:45:e7:aa:
6b:d7:27:fb:e1:cb:c7:1f:48:db:6e:4e:b9:15:37:2a:35:fc:
58:34:2a:0f:12:53:db:8a:10:3c:51:42:eb:92:1f:a1:94:e3:
2c:25:58:f2:fe:8e:ee:5f:75:15:72:8f:44:1f:8c:77:40:30:
a5:f4:99:00:c5:a6:5e:b0:15:8f:95:37:a2:26:03:a4:7c:b1:
64:9a:18:f0:27:35:14:6b:bf:a1:71:c1:50:8e:44:c8:b2:c4:
c0:25:45:de
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1
RjE4MzQ5RjcwHhcNMjQwMjI3MDAwMjMwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWRkMjY5Ni0yMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQxqjgiTJoe0sZxv91W8/B4YLPWt9VXFgQd4FNVOTeHrEnrRx/rAcNl5O+Rz
aJxZthqfU2lN9a5Lq8HYKoa/DogipSLxyojTyQ0AdaN+0HlxJcNziUKLPz3mh55p
jGNQJKNI/mOv7rQajfR+INdinHfbHlGFkJVPoShmdah4p78nJZt9k+0sJ/rQsh09
jjzO3ds1nr3d/1GqjnOdt4+grp/fh+rkNmlpXAuJeK7fwmB5ocyum8cIV0WjfLVS
bSSGB++x0ipz544kuTlmHwv1V7r3k2/7TKWc/cSh9eFdLlTNdqPRBJa6LIMx3S5o
vdaXAoTaNWsFRNRXzd7LLSs+dwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH8IrV5+
JoviAKWwOHD1ku8u/xTMMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG
NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI2QzYvNThFOTlFOTQ2Rjc5MTFFQkE0RDIyMjg3QzRGOUFFMDIvQjU1RUM2QzQ5
MUIyMTFFRDkyQUIwNjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnojgwDQYJKoZIhvcNAQELBQADggEBADN/qnvODE9yFu2Q
NTFylk91h2NVZQ2HdNmgOmRhgSKRzoKCI7YLDPp04soa/HJu4bZmRYa64lo5zhWc
w/Ff6A6QkOUfLxFoTqSTvKCknrUKJgvaMKuRPLBF7PiSD0RMJYsjryyUnnmADm8v
wOfpJZ4k/NU/1DjMAtPNbLp1XsEt9xSdxB3jM0hlu1EiNyoh2WblnicjjcoeoEQm
dggBXEXnqmvXJ/vhy8cfSNtuTrkVNyo1/Fg0Kg8SU9uKEDxRQuuSH6GU4ywlWPL+
ju5fdRVyj0QfjHdAMKX0mQDFpl6wFY+VN6ImA6R8sWSaGPAnNRRrv6FxwVCORMiy
xMAlRd4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:42 2024 by rpki-client on console-fra.rpki-client.org