Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/91DC4E90F69711EBA25C8D71C4F9AE02.roa
File: 91DC4E90F69711EBA25C8D71C4F9AE02.roa (raw, json)
Hash identifier: RYZmBvA1AJAGEUo7nKO9HPSegZFOuhgoOkSmGfKoQ/0=
Subject key identifier: B2:9B:74:3E:D0:75:B5:58:EC:FE:36:6E:B2:37:CE:EC:9B:2B:27:D5
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 0335
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/91DC4E90F69711EBA25C8D71C4F9AE02.roa
Signing time: Wed 29 Jun 2022 14:22:35 +0000
ROA not before: Wed 29 Jun 2022 14:22:35 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 38136
IP address blocks: 103.167.134.0/23 maxlen: 23
103.167.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Jun 29 14:22:35 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62bc602b-1a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:52:9c:dc:36:e1:bf:79:45:80:7a:ad:03:
57:2f:15:7a:10:70:ae:e0:7a:dc:df:ca:9d:b4:29:
85:92:95:54:62:04:5b:2c:84:34:d9:24:f3:c0:14:
e6:70:15:29:ae:c4:f2:9c:0b:7f:44:36:ec:97:4a:
94:13:1b:70:07:a1:96:0d:cd:ed:1e:d3:c0:9b:70:
c2:ec:6a:a2:f8:e4:02:7e:30:ce:24:47:b9:bf:b9:
33:fc:a0:68:ac:25:26:fc:10:fe:1b:bc:35:36:41:
a0:24:1a:e4:75:2c:99:cf:19:2e:2d:69:ea:e0:5d:
47:24:e8:ce:fd:1e:a9:7c:e1:40:35:27:39:75:23:
42:85:5e:49:20:5c:9e:72:8a:d5:d1:54:f7:dc:06:
b5:10:9b:28:d5:48:86:c6:00:8f:9b:62:23:81:c9:
30:80:f5:66:37:4b:1a:64:15:59:f8:ed:82:ab:87:
e1:77:2f:39:1f:b7:cd:eb:51:d8:cb:8f:87:9d:8b:
f3:14:44:d3:26:76:a8:83:f4:c8:53:92:4d:8d:35:
b0:b2:f8:db:41:2f:4e:fc:8b:0c:82:55:de:cd:38:
d1:03:e9:db:8f:48:29:5f:24:a7:e5:7f:6d:92:2f:
95:ff:b5:08:0f:47:97:4c:10:78:0c:c8:20:e2:f8:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9B:74:3E:D0:75:B5:58:EC:FE:36:6E:B2:37:CE:EC:9B:2B:27:D5
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/91DC4E90F69711EBA25C8D71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:cc:2b:99:f9:09:21:b5:a7:b1:c0:54:1b:bc:4b:13:f8:53:
8a:d8:bd:59:67:af:21:00:76:10:6c:72:60:7b:aa:63:90:5e:
96:c6:4e:25:00:9c:40:01:e4:23:7a:ce:e1:ca:94:f2:6b:e4:
3a:f8:01:85:46:dd:f3:05:4d:af:92:e9:49:74:db:05:67:5f:
61:82:3f:5d:54:69:36:b3:19:2a:ee:52:96:b7:e5:a4:17:5e:
23:88:b0:2a:c9:c5:5d:5b:31:3f:7e:d0:5e:19:ab:1b:a5:bf:
f1:69:42:1a:c2:98:46:5d:04:f3:81:13:ad:75:7b:86:31:d4:
94:5d:36:0d:8f:30:3c:ab:32:86:81:25:9d:e9:f1:a0:ae:0c:
b4:27:75:f9:d6:91:81:fd:be:da:7a:33:7d:df:ae:88:05:96:
26:f9:0e:bd:cb:61:f3:85:ef:ec:fe:cf:d9:e1:9d:84:6f:7a:
8b:39:50:b5:0e:da:14:6c:01:fa:05:6d:cb:50:c9:b4:30:98:
82:ac:57:27:1a:25:b7:c9:53:5f:a4:9c:91:7a:9a:57:ac:9a:
b2:dd:a7:da:5b:af:18:bc:48:db:85:c6:bb:df:9c:f4:d4:f1:
55:86:07:63:05:c7:1b:6e:33:9a:7a:15:19:1d:93:d9:2c:01:
5e:e5:49:fc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMTYxMTAvBgNVBAUTKDcwMjk0NjA1QjAxN0NCNzk2Q0FEODg0MkY1RUZCQTNG
NDQ4NzA3RjUwHhcNMjIwNjI5MTQyMjM1WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJjNjAyYi0xYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2aRSnNw24b95RYB6rQNXLxV6EHCu4Hrc38qdtCmFkpVUYgRbLIQ02STzwBTm
cBUprsTynAt/RDbsl0qUExtwB6GWDc3tHtPAm3DC7Gqi+OQCfjDOJEe5v7kz/KBo
rCUm/BD+G7w1NkGgJBrkdSyZzxkuLWnq4F1HJOjO/R6pfOFANSc5dSNChV5JIFye
corV0VT33Aa1EJso1UiGxgCPm2IjgckwgPVmN0saZBVZ+O2Cq4fhdy85H7fN61HY
y4+HnYvzFETTJnaog/TIU5JNjTWwsvjbQS9O/IsMglXezTjRA+nbj0gpXySn5X9t
ki+V/7UID0eXTBB4DMgg4vhBywIDAQABo4IClTCCApEwHQYDVR0OBBYEFLKbdD7Q
dbVY7P42brI3zuybKyfVMB8GA1UdIwQYMBaAFHApRgWwF8t5bK2IQvXvuj9Ehwf1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMxNi84RjBDNkIwMEJF
NjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkzbHNyWWhDOWUtNlAwU0hC
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NDbEdCYkFYeTNsc3JZaEM5ZS02UDBTSEJfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTFDMTYvOEYwQzZCMDBCRTYxMTFFQkFFRjM1QTYxQzRGOUFFMDIvOTFEQzRFOTBG
Njk3MTFFQkEyNUM4RDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnp4YwDQYJKoZIhvcNAQELBQADggEBAAvMK5n5CSG1p7HA
VBu8SxP4U4rYvVlnryEAdhBscmB7qmOQXpbGTiUAnEAB5CN6zuHKlPJr5Dr4AYVG
3fMFTa+S6Ul02wVnX2GCP11UaTazGSruUpa35aQXXiOIsCrJxV1bMT9+0F4Zqxul
v/FpQhrCmEZdBPOBE611e4Yx1JRdNg2PMDyrMoaBJZ3p8aCuDLQndfnWkYH9vtp6
M33frogFlib5Dr3LYfOF7+z+z9nhnYRveos5ULUO2hRsAfoFbctQybQwmIKsVyca
JbfJU1+knJF6mlesmrLdp9pbrxi8SNuFxrvfnPTU8VWGB2MFxxtuM5p6FRkdk9ks
AV7lSfw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org