Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/E7E7C9B0F64C11EEAAB16676C4F9AE02.roa
File: E7E7C9B0F64C11EEAAB16676C4F9AE02.roa (raw, json)
Hash identifier: hwcueF9v15oMbI9IHUw/SqBGEIMvaJvy9HHWzqUwqto=
Subject key identifier: 90:7C:DF:ED:7E:1B:91:79:DA:89:39:D8:7D:14:A0:5F:D1:6D:BC:9B
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 1027
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/E7E7C9B0F64C11EEAAB16676C4F9AE02.roa
Signing time: Tue 09 Apr 2024 08:41:06 +0000
ROA not before: Tue 09 Apr 2024 08:41:06 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 136406
IP address blocks: 103.86.192.0/22 maxlen: 22
103.86.193.0/24 maxlen: 24
103.86.194.0/24 maxlen: 24
103.86.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 07:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4135 (0x1027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Apr 9 08:41:06 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6614ff22-cdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:d1:44:99:cf:ae:a2:58:03:28:23:46:6b:
02:2e:9d:73:d1:2a:62:cd:be:96:c1:cf:ca:49:5a:
16:21:0d:00:07:10:0f:32:e0:aa:49:70:ad:a5:ab:
94:50:61:22:9b:97:d0:29:16:d5:a3:3c:73:56:ef:
4e:7c:f6:e9:4b:09:4e:3b:cf:b5:10:f2:bd:58:3b:
c0:a6:47:01:56:70:20:db:48:13:ca:7e:ce:06:31:
2f:e0:25:74:4d:f1:96:c4:20:b4:ef:1a:25:f9:38:
dc:a4:1d:ef:8c:03:71:1d:4c:b6:3d:22:e6:bf:51:
cf:9e:4f:5f:3f:4b:d9:41:0d:ee:be:2a:c2:2d:32:
4a:ab:0e:26:bb:38:1d:b3:59:6f:b1:9f:db:3d:ca:
45:90:d3:15:67:04:71:e7:1c:94:89:ca:87:c9:f9:
cd:b5:99:20:a3:c2:58:8e:47:90:10:5b:47:cd:6f:
3d:b1:a0:14:84:6f:3f:ab:17:25:0a:6c:06:53:a3:
ed:07:44:06:a2:3f:7b:b5:1b:89:81:81:7e:d4:d7:
5f:83:fc:65:54:d3:c6:67:70:26:cf:5e:cf:06:10:
d4:ab:52:73:44:48:f2:1b:1e:12:11:3f:79:4d:50:
7f:d6:47:75:d9:b2:55:19:9d:a5:25:10:27:e9:31:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:DF:ED:7E:1B:91:79:DA:89:39:D8:7D:14:A0:5F:D1:6D:BC:9B
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/E7E7C9B0F64C11EEAAB16676C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:8a:5a:22:16:9c:21:e7:01:d1:89:77:d0:06:76:d3:cb:c3:
16:50:da:8a:ab:07:6c:4f:1a:ac:db:27:99:e7:6d:86:6b:f8:
4a:f4:6f:49:42:c9:bc:b0:7c:71:8b:94:ff:94:ad:31:c2:5c:
9a:a0:6a:74:c1:56:69:61:1a:a5:38:2e:8e:d6:31:c9:6d:a6:
5f:0d:4e:33:f0:6f:66:99:5b:04:1d:e2:c5:07:25:f7:b3:35:
ba:69:44:9c:00:fe:a7:41:f6:08:6c:46:44:d8:24:cf:cd:94:
88:9c:c7:06:41:2f:d5:bf:35:31:dd:6f:0d:0d:2d:23:cb:d1:
c1:0b:63:af:b3:b4:1d:78:93:53:ae:6f:ed:06:4a:3b:dd:fa:
e8:78:13:f0:23:ba:65:e5:f9:99:a0:7e:b5:56:9b:b2:81:cb:
7d:89:c8:f4:c2:a7:98:b4:a7:05:13:7e:7f:f2:22:df:44:d5:
1f:20:11:f6:f6:a6:b5:0d:16:bd:1f:1c:f7:f4:b0:26:8d:c8:
c9:da:c3:f9:ed:66:01:20:06:9f:f3:75:0d:0f:3d:08:4e:58:
07:6f:34:cb:8e:a2:1a:28:5d:ea:d4:1b:2d:db:83:9e:47:c3:
9e:0e:f9:8f:f0:6c:6b:0c:8f:2e:85:eb:4d:87:03:e6:c3:79:
9d:58:94:a7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICECcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0
RUVFMUI3NDIwHhcNMjQwNDA5MDg0MTA2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE0ZmYyMi1jZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kXRRJnPrqJYAygjRmsCLp1z0Spizb6Wwc/KSVoWIQ0ABxAPMuCqSXCtpauU
UGEim5fQKRbVozxzVu9OfPbpSwlOO8+1EPK9WDvApkcBVnAg20gTyn7OBjEv4CV0
TfGWxCC07xol+TjcpB3vjANxHUy2PSLmv1HPnk9fP0vZQQ3uvirCLTJKqw4muzgd
s1lvsZ/bPcpFkNMVZwRx5xyUicqHyfnNtZkgo8JYjkeQEFtHzW89saAUhG8/qxcl
CmwGU6PtB0QGoj97tRuJgYF+1Ndfg/xlVNPGZ3Amz17PBhDUq1JzREjyGx4SET95
TVB/1kd12bJVGZ2lJRAn6TE9XwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJB83+1+
G5F52ok52H0UoF/RbbybMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG
MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvRTdFN0M5QjBG
NjRDMTFFRUFBQjE2Njc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnVsAwDQYJKoZIhvcNAQELBQADggEBAJ+KWiIWnCHnAdGJ
d9AGdtPLwxZQ2oqrB2xPGqzbJ5nnbYZr+Er0b0lCybywfHGLlP+UrTHCXJqganTB
VmlhGqU4Lo7WMcltpl8NTjPwb2aZWwQd4sUHJfezNbppRJwA/qdB9ghsRkTYJM/N
lIicxwZBL9W/NTHdbw0NLSPL0cELY6+ztB14k1Oub+0GSjvd+uh4E/AjumXl+Zmg
frVWm7KBy32JyPTCp5i0pwUTfn/yIt9E1R8gEfb2prUNFr0fHPf0sCaNyMnaw/nt
ZgEgBp/zdQ0PPQhOWAdvNMuOohooXerUGy3bg55Hw54O+Y/wbGsMjy6F602HA+bD
eZ1YlKc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org