Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/3788B3EE3CDA11EE9124E057C4F9AE02.roa
File: 3788B3EE3CDA11EE9124E057C4F9AE02.roa (raw, json)
Hash identifier: wvHHAfkSrCpNtKzjkna//gtsZsuUP9QLcCbEVIg7vJI=
Subject key identifier: C8:20:6A:33:C9:5F:A2:CB:A6:87:86:E4:90:16:DB:61:70:FD:29:FF
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0154
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/3788B3EE3CDA11EE9124E057C4F9AE02.roa
Signing time: Thu 17 Aug 2023 08:44:03 +0000
ROA not before: Thu 17 Aug 2023 08:44:03 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 21859
IP address blocks: 103.26.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Sep 2023 09:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Aug 17 08:44:03 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ddddd3-7478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:bf:8f:84:99:81:7c:45:5b:e5:14:43:e8:
cc:18:0a:eb:c9:9f:97:09:b5:d6:39:f4:d6:aa:08:
bc:4d:ed:cc:0a:f2:62:b9:73:5d:68:39:d1:64:43:
5b:ed:0d:ca:fb:b9:c9:af:7d:1b:b2:94:04:89:1f:
03:7b:9d:e2:1b:0c:aa:3e:99:2b:3b:c7:75:0b:38:
f5:54:73:34:27:23:ce:16:bc:9f:b5:f2:e4:46:44:
00:84:c3:2c:0b:fd:d6:ab:94:1e:13:a5:da:6a:bf:
33:3f:6a:1e:78:13:55:4f:a5:b4:ed:8d:4e:13:a2:
bd:62:58:8c:1b:90:16:f0:61:71:f2:5b:cf:32:e4:
ba:35:c2:c7:f6:04:cd:4e:c4:65:7a:db:e7:ec:cd:
f6:7e:3c:1f:b0:b4:18:60:42:7c:b6:29:1d:65:a2:
17:ff:04:63:a0:72:5d:64:ff:b7:58:b5:3a:bb:42:
89:d2:a5:58:ef:f4:16:b6:1d:d7:1d:44:84:52:53:
ce:c5:14:1e:51:ac:9a:90:10:47:6c:f7:d7:e5:01:
47:55:d3:5d:e8:7e:00:a7:2e:e5:74:da:87:0b:cd:
1f:51:b3:5b:e0:92:53:da:96:a6:85:e6:8e:0a:34:
66:ef:1e:23:f0:7c:36:7d:fc:4a:7b:de:e2:a4:7e:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:6A:33:C9:5F:A2:CB:A6:87:86:E4:90:16:DB:61:70:FD:29:FF
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/3788B3EE3CDA11EE9124E057C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.8.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:78:48:6b:1c:c7:97:03:88:e9:35:34:3d:06:b5:54:92:5b:
00:b9:1c:b6:84:e5:2d:40:bf:1c:66:c1:28:36:b5:07:98:fd:
3f:d6:56:0a:21:d1:d2:68:91:91:23:66:c9:f2:62:71:a5:c1:
fe:0f:2c:31:ca:83:2a:24:47:26:b2:a9:46:2f:72:af:ff:e6:
f2:78:73:a3:57:73:2c:d7:a7:21:9a:04:1c:72:0f:06:a4:a8:
2b:9b:63:cf:79:69:c7:f1:99:08:4b:fb:b4:63:79:fc:65:87:
60:54:d8:69:06:f8:ed:25:4a:68:0d:df:19:b9:e6:e7:44:5b:
23:24:d5:6d:7b:be:3f:b5:49:f4:9f:29:72:6a:2b:1c:10:8b:
9b:1a:9e:3d:1f:d8:ac:12:f1:ff:1c:f9:5d:77:3b:22:f2:01:
ec:4e:2b:85:d3:e4:c0:18:70:f7:92:b0:ae:54:0b:83:6d:cd:
06:a4:2f:5e:34:56:33:39:61:02:7a:5e:72:47:fb:c7:99:45:
04:fa:3f:7c:a1:b9:d0:37:98:d1:62:11:10:4d:a3:f5:f3:9c:
fa:1b:3f:e2:a3:5a:31:42:b9:3f:3b:0e:25:0c:7e:e1:b0:4a:
79:92:cc:40:79:31:8f:3d:6c:73:e5:43:e0:5e:35:cf:a4:65:
8a:73:13:31
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE
QUVGNDEzOTYwHhcNMjMwODE3MDg0NDAzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRkZGRkMy03NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVG/j4SZgXxFW+UUQ+jMGArryZ+XCbXWOfTWqgi8Te3MCvJiuXNdaDnRZENb
7Q3K+7nJr30bspQEiR8De53iGwyqPpkrO8d1Czj1VHM0JyPOFryftfLkRkQAhMMs
C/3Wq5QeE6Xaar8zP2oeeBNVT6W07Y1OE6K9YliMG5AW8GFx8lvPMuS6NcLH9gTN
TsRletvn7M32fjwfsLQYYEJ8tikdZaIX/wRjoHJdZP+3WLU6u0KJ0qVY7/QWth3X
HUSEUlPOxRQeUayakBBHbPfX5QFHVdNd6H4Apy7ldNqHC80fUbNb4JJT2pamheaO
CjRm7x4j8Hw2ffxKe97ipH5I+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMggajPJ
X6LLpoeG5JAW22Fw/Sn/MB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx
QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvMzc4OEIzRUUz
Q0RBMTFFRTkxMjRFMDU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnGggwDQYJKoZIhvcNAQELBQADggEBAMd4SGscx5cDiOk1
ND0GtVSSWwC5HLaE5S1AvxxmwSg2tQeY/T/WVgoh0dJokZEjZsnyYnGlwf4PLDHK
gyokRyayqUYvcq//5vJ4c6NXcyzXpyGaBBxyDwakqCubY895acfxmQhL+7Rjefxl
h2BU2GkG+O0lSmgN3xm55udEWyMk1W17vj+1SfSfKXJqKxwQi5sanj0f2KwS8f8c
+V13OyLyAexOK4XT5MAYcPeSsK5UC4NtzQakL140VjM5YQJ6XnJH+8eZRQT6P3yh
udA3mNFiERBNo/XznPobP+KjWjFCuT87DiUMfuGwSnmSzEB5MY89bHPlQ+BeNc+k
ZYpzEzE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org