Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF0F3082349611EEA491FC7AC4F9AE02.roa
File: BF0F3082349611EEA491FC7AC4F9AE02.roa (raw, json)
Hash identifier: c8l2PP6rLYXFgaFI8wPB6NuNtEBgEHCRvh5xM/TMk2Q=
Subject key identifier: C2:E7:3F:69:93:CF:81:17:E3:7F:D1:B0:41:99:EF:42:2A:F7:19:C0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0CA4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF0F3082349611EEA491FC7AC4F9AE02.roa
Signing time: Sun 06 Aug 2023 20:20:55 +0000
ROA not before: Sun 06 Aug 2023 20:20:55 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 103.11.61.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 6 20:20:55 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64d000a7-2ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:8b:39:de:48:e4:b1:74:d4:2a:64:81:5f:
ba:db:67:71:4d:f9:49:36:36:05:ad:70:f3:30:77:
ab:be:1a:bd:cd:b5:bb:6f:47:4c:16:1d:ba:1e:0a:
68:a1:23:3a:05:b4:de:dc:cb:e4:06:ba:07:0a:f5:
1e:eb:b6:a1:d5:51:2c:92:53:23:9e:9b:9b:39:57:
55:0a:4c:93:84:21:e9:c3:63:a7:72:67:88:79:9e:
16:d1:71:62:e5:2e:6b:71:b4:19:80:e2:d0:64:d7:
f8:4d:cc:71:a3:13:f4:53:31:c0:17:00:ad:3e:56:
a1:1d:98:9b:27:d2:da:43:99:95:eb:e1:8f:63:7a:
f4:92:0b:94:82:dc:1c:24:01:87:ac:1f:9b:30:b4:
a9:a2:4d:56:fe:eb:a4:26:d7:14:1d:32:0b:7e:db:
e4:cb:93:94:9b:25:b6:ca:9e:aa:50:10:66:c2:69:
3f:2c:2d:3a:7f:33:5b:0c:86:64:09:5d:26:69:0f:
80:c4:6d:46:8a:0b:02:d7:ea:e4:3e:ae:79:8c:a9:
76:0e:ff:38:32:ca:d9:87:e3:be:d1:03:6e:e7:5c:
c9:d9:ae:58:60:58:14:fa:7b:ea:88:1c:9c:d8:e6:
4b:c3:b5:ad:90:9b:74:60:e0:69:19:c6:58:67:cf:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:3F:69:93:CF:81:17:E3:7F:D1:B0:41:99:EF:42:2A:F7:19:C0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF0F3082349611EEA491FC7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.61.0/24
113.203.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d3:5c:96:57:80:72:1b:55:6d:8f:96:b4:bf:ca:b1:ea:1c:
19:91:1c:4e:a8:ce:49:9f:93:e8:d7:30:9c:49:80:c1:9c:11:
60:06:5b:a2:82:9f:61:d3:14:dc:52:9e:59:11:a9:55:9c:58:
ee:ab:81:b8:00:d1:66:77:f0:c8:fd:43:27:f0:a9:6b:3e:14:
53:b8:02:68:12:44:8d:01:32:49:35:f3:b3:19:a1:28:c6:2b:
93:ec:3d:db:be:aa:9d:47:ff:58:70:7b:44:9a:e3:e4:d0:c6:
ea:95:45:a8:7e:44:f3:a6:fa:fb:40:26:bb:fb:e9:86:a3:28:
50:1c:30:2f:75:23:d0:72:1c:f5:5e:40:45:5c:27:48:c5:88:
3d:df:73:65:94:27:19:aa:d6:39:80:ea:35:2d:56:99:27:5c:
a3:87:3b:70:0e:f7:b0:06:e6:7c:93:ad:66:fc:47:7a:45:c6:
9e:4c:d6:5c:10:e4:c4:db:c2:77:ed:58:2f:6f:a0:01:15:79:
9a:ea:5f:be:6e:1d:0f:56:15:e5:15:86:bc:d7:fc:94:a3:30:
b9:86:1b:d7:77:3e:fe:03:e0:2c:39:8f:22:b5:f4:f7:33:3e:
8b:7e:b1:06:f3:df:d4:83:0b:dc:1d:46:07:ae:08:d5:49:a9:
19:83:b1:9d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwODA2MjAyMDU1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQwMDBhNy0yZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkqLOd5I5LF01CpkgV+622dxTflJNjYFrXDzMHervhq9zbW7b0dMFh26Hgpo
oSM6BbTe3MvkBroHCvUe67ah1VEsklMjnpubOVdVCkyThCHpw2OncmeIeZ4W0XFi
5S5rcbQZgOLQZNf4TcxxoxP0UzHAFwCtPlahHZibJ9LaQ5mV6+GPY3r0kguUgtwc
JAGHrB+bMLSpok1W/uukJtcUHTILftvky5OUmyW2yp6qUBBmwmk/LC06fzNbDIZk
CV0maQ+AxG1GigsC1+rkPq55jKl2Dv84MsrZh+O+0QNu51zJ2a5YYFgU+nvqiByc
2OZLw7WtkJt0YOBpGcZYZ89DjwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMLnP2mT
z4EX43/RsEGZ70Iq9xnAMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQkYwRjMwODIz
NDk2MTFFRUE0OTFGQzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnCz0DBABxy/UwDQYJKoZIhvcNAQELBQADggEBAJvTXJZX
gHIbVW2PlrS/yrHqHBmRHE6ozkmfk+jXMJxJgMGcEWAGW6KCn2HTFNxSnlkRqVWc
WO6rgbgA0WZ38Mj9QyfwqWs+FFO4AmgSRI0BMkk187MZoSjGK5PsPdu+qp1H/1hw
e0Sa4+TQxuqVRah+RPOm+vtAJrv76YajKFAcMC91I9ByHPVeQEVcJ0jFiD3fc2WU
Jxmq1jmA6jUtVpknXKOHO3AO97AG5nyTrWb8R3pFxp5M1lwQ5MTbwnftWC9voAEV
eZrqX75uHQ9WFeUVhrzX/JSjMLmGG9d3Pv4D4Cw5jyK19PczPot+sQbz39SDC9wd
RgeuCNVJqRmDsZ0=
-----END CERTIFICATE-----
Generated at Tue Oct 10 08:27:59 2023 by rpki-client on console-fra.rpki-client.org