Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/6083A24270FB11ECB5277A0FC4F9AE02.roa
File: 6083A24270FB11ECB5277A0FC4F9AE02.roa (raw, json)
Hash identifier: rClVS26evX4WdHVVAkU7xbnXvRKjyo8XVGDuRu7az/M=
Subject key identifier: C8:7A:5E:C5:86:D9:E1:C1:77:08:82:FF:53:16:49:22:04:84:B5:AE
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 0267
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/6083A24270FB11ECB5277A0FC4F9AE02.roa
Signing time: Fri 13 Jan 2023 04:03:38 +0000
ROA not before: Fri 13 Jan 2023 04:03:38 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 136038
IP address blocks: 103.254.72.0/24 maxlen: 24
103.254.73.0/24 maxlen: 24
103.254.74.0/24 maxlen: 24
103.254.75.0/24 maxlen: 24
192.51.188.0/24 maxlen: 24
192.197.113.0/24 maxlen: 24
199.212.57.0/24 maxlen: 24
204.52.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Jan 13 04:03:38 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63c0d81a-4b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:04:10:52:12:53:c8:07:a5:4c:a0:03:b0:
77:a5:31:9e:02:e7:06:a4:8f:4b:f1:70:36:e1:bd:
19:5a:d4:de:c8:7b:e1:3d:10:d8:f3:b1:c1:29:89:
15:0f:9b:9c:56:76:5f:f1:fa:25:5a:54:5d:e6:dc:
44:40:78:b1:5b:36:2a:94:53:f1:63:ab:54:13:67:
d5:a5:3d:4f:ed:89:e3:b0:08:90:40:7f:7e:e7:5d:
6c:35:db:48:a8:cf:a7:38:1e:92:02:fe:4d:56:b8:
50:63:71:fb:0e:29:3f:52:ac:26:fa:01:8c:67:39:
bb:f8:02:00:ea:c0:75:47:4b:71:5f:f7:41:6c:89:
e6:50:d6:08:37:50:b7:09:13:18:cd:e1:c0:d1:38:
88:e2:a9:cf:12:89:76:3f:37:b1:0f:ea:99:16:c5:
e1:0c:ba:1d:54:08:23:bc:f0:16:7c:7d:f1:a0:b5:
2f:3c:af:2d:6d:53:e4:7e:b2:b8:5b:d3:06:77:cc:
03:0f:49:e1:bf:fa:2e:5d:5c:15:73:51:69:a7:2c:
e0:e9:62:5a:7f:64:21:ff:f0:98:ff:58:6e:03:0d:
fc:37:33:91:e4:c2:73:10:d7:b9:84:29:54:2c:65:
0a:4e:4a:8b:fa:9b:ec:9d:d3:46:4b:ad:11:94:7c:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:5E:C5:86:D9:E1:C1:77:08:82:FF:53:16:49:22:04:84:B5:AE
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/6083A24270FB11ECB5277A0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.72.0/22
192.51.188.0/24
192.197.113.0/24
199.212.57.0/24
204.52.191.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c2:f8:14:87:85:dd:f7:74:46:de:34:11:63:56:b5:45:36:
c6:94:4f:82:6e:4d:ed:77:65:47:ee:40:8e:8d:12:bb:84:85:
f1:8d:e0:21:f5:bc:26:13:23:cb:3c:53:58:71:6a:7e:c4:fc:
ac:2b:58:e5:c4:42:33:41:12:91:aa:5a:1f:96:e0:e8:d5:cb:
ab:1e:fb:1c:e2:2f:44:d5:97:2c:f5:48:46:18:41:45:6e:6f:
0d:6f:51:98:4f:41:ef:ba:16:41:63:41:e1:50:3c:ce:74:63:
7a:ce:ae:b7:f7:5a:ea:28:90:6c:a3:73:5d:b7:8c:b5:37:7b:
30:a7:38:7c:ed:a7:e4:73:aa:31:5f:60:00:5e:55:a3:f9:00:
0e:ae:92:66:f3:0b:9b:77:b9:60:3b:ac:23:aa:13:e4:a6:d1:
d3:5b:6c:d3:11:7d:c8:2f:0e:22:19:4d:44:fc:9a:d2:44:7e:
e4:f2:6d:01:3f:9f:77:8b:ad:83:cb:c3:1e:4a:1c:f5:11:04:
a6:b0:9b:ca:ac:44:0f:5b:a4:3f:8c:f0:02:58:58:a1:52:b2:
1b:e0:44:de:d4:d3:75:50:a6:d0:7d:97:13:a2:40:e5:ea:fd:
cd:e6:5f:10:34:e9:85:07:84:1f:9e:02:16:2f:b1:b9:95:74:
bc:04:1c:fa
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC
RUQ1RDk4OTIwHhcNMjMwMTEzMDQwMzM4WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2MwZDgxYS00YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUgEEFISU8gHpUygA7B3pTGeAucGpI9L8XA24b0ZWtTeyHvhPRDY87HBKYkV
D5ucVnZf8folWlRd5txEQHixWzYqlFPxY6tUE2fVpT1P7YnjsAiQQH9+511sNdtI
qM+nOB6SAv5NVrhQY3H7Dik/Uqwm+gGMZzm7+AIA6sB1R0txX/dBbInmUNYIN1C3
CRMYzeHA0TiI4qnPEol2PzexD+qZFsXhDLodVAgjvPAWfH3xoLUvPK8tbVPkfrK4
W9MGd8wDD0nhv/ouXVwVc1Fppyzg6WJaf2Qh//CY/1huAw38NzOR5MJzENe5hClU
LGUKTkqL+pvsndNGS60RlHyoJQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMh6XsWG
2eHBdwiC/1MWSSIEhLWuMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw
RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvNjA4M0EyNDI3
MEZCMTFFQ0I1Mjc3QTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJn/kgDBADAM7wDBADAxXEDBADH1DkDBADMNL8wDQYJKoZI
hvcNAQELBQADggEBAHnC+BSHhd33dEbeNBFjVrVFNsaUT4JuTe13ZUfuQI6NEruE
hfGN4CH1vCYTI8s8U1hxan7E/KwrWOXEQjNBEpGqWh+W4OjVy6se+xziL0TVlyz1
SEYYQUVubw1vUZhPQe+6FkFjQeFQPM50Y3rOrrf3WuookGyjc123jLU3ezCnOHzt
p+RzqjFfYABeVaP5AA6ukmbzC5t3uWA7rCOqE+Sm0dNbbNMRfcgvDiIZTUT8mtJE
fuTybQE/n3eLrYPLwx5KHPURBKawm8qsRA9bpD+M8AJYWKFSshvgRN7U03VQptB9
lxOiQOXq/c3mXxA06YUHhB+eAhYvsbmVdLwEHPo=
-----END CERTIFICATE-----
Generated at Thu Nov 30 03:30:24 2023 by rpki-client on console-ams.rpki-client.org