Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0112BC4E3FB211EEAAB47135C4F9AE02.roa
File: 0112BC4E3FB211EEAAB47135C4F9AE02.roa (raw, json)
Hash identifier: LHM299LL/4uzfD1eNdJnGXzHn/hRKGoD5quNM837vro=
Subject key identifier: 48:A7:2E:86:E0:45:37:61:77:53:2F:13:E4:97:34:E2:F9:BD:D3:0F
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 33F1
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0112BC4E3FB211EEAAB47135C4F9AE02.roa
Signing time: Sun 20 Aug 2023 23:33:45 +0000
ROA not before: Sun 20 Aug 2023 23:33:45 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 834
IP address blocks: 117.121.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13297 (0x33f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Aug 20 23:33:45 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64e2a2d9-b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:08:84:f8:85:c5:63:ae:0a:2e:9b:5b:b3:
fb:ec:28:91:c0:1d:64:74:57:f6:96:07:09:d7:96:
d0:5a:b2:cb:26:8d:f4:4e:6b:f2:74:b6:67:90:0e:
ce:04:88:77:bb:cd:21:07:67:0f:9a:f6:20:1f:02:
28:94:2a:66:95:75:57:ff:48:f5:bb:0e:fa:2f:ff:
e2:f6:5c:66:7e:c4:89:ac:ee:76:11:58:1c:3d:12:
3b:85:fb:1a:fa:3a:04:00:eb:85:74:14:4b:cc:3f:
49:44:f2:a7:03:a0:34:7d:f9:40:e0:23:91:e8:de:
48:ea:0d:ab:18:8c:e7:c1:32:bb:73:3f:32:58:b5:
dc:8f:0f:18:e2:e9:d8:94:e6:25:1a:39:e7:ef:f6:
86:29:ae:7b:24:2a:13:fe:29:1f:1b:21:8a:4f:01:
4e:4e:42:0e:28:1d:78:b5:a1:f5:b4:c4:ca:0b:ac:
3a:33:5b:e0:9d:9a:78:b9:89:39:c7:e2:bf:b5:56:
bc:9e:70:c2:c0:a7:87:f3:33:dd:e2:b3:e3:b9:52:
04:bc:f8:28:5b:dd:1e:2a:51:ad:25:d2:14:e6:80:
ed:3e:cc:f8:f0:0e:9b:70:9f:a6:7a:ba:50:01:6d:
69:62:5e:a8:62:44:7d:3a:02:0b:4e:9d:7b:86:fe:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A7:2E:86:E0:45:37:61:77:53:2F:13:E4:97:34:E2:F9:BD:D3:0F
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0112BC4E3FB211EEAAB47135C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.121.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:24:14:73:20:39:ff:be:4a:ff:49:cf:2d:19:b9:32:99:
9b:79:e4:d9:5b:74:1d:d5:ec:0b:55:fd:f6:99:41:0b:e7:3e:
9d:87:9f:d8:03:c8:a0:4a:16:25:51:24:da:8d:85:28:af:6a:
42:22:cb:e7:68:fa:92:68:de:d2:b9:25:63:9e:4e:a5:c6:64:
4a:f7:1b:2f:a5:56:05:0e:2e:54:36:49:0e:9d:df:32:86:4d:
79:f2:8a:cc:ee:03:29:19:55:7d:1d:74:6a:a2:a2:67:8c:74:
cb:d6:22:d1:90:a0:3c:84:dd:31:28:2b:2a:58:52:5d:9e:ca:
88:a7:a0:bf:75:a8:aa:0d:6a:38:30:88:67:13:30:44:f5:15:
c7:1f:7f:f5:0e:50:ca:8a:1a:4d:83:76:37:12:6d:0d:67:2d:
03:87:2c:d7:c3:67:55:bf:5c:87:8e:45:71:9b:b3:48:78:c0:
0d:da:6d:b2:6a:f5:3d:a5:14:e0:9a:16:f3:91:15:9b:25:1e:
50:b5:2f:94:b9:01:53:51:ca:e9:cc:fd:46:81:b5:32:d4:63:
bb:b7:51:4e:54:05:47:90:31:90:93:06:84:9c:a2:32:ca:73:
66:0f:36:73:f5:54:22:91:1b:d4:e9:f5:a3:1b:d6:d2:a2:43:
f2:fe:94:85
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICM/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjMwODIwMjMzMzQ1WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGUyYTJkOS1iNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04YIhPiFxWOuCi6bW7P77CiRwB1kdFf2lgcJ15bQWrLLJo30TmvydLZnkA7O
BIh3u80hB2cPmvYgHwIolCpmlXVX/0j1uw76L//i9lxmfsSJrO52EVgcPRI7hfsa
+joEAOuFdBRLzD9JRPKnA6A0fflA4COR6N5I6g2rGIznwTK7cz8yWLXcjw8Y4unY
lOYlGjnn7/aGKa57JCoT/ikfGyGKTwFOTkIOKB14taH1tMTKC6w6M1vgnZp4uYk5
x+K/tVa8nnDCwKeH8zPd4rPjuVIEvPgoW90eKlGtJdIU5oDtPsz48A6bcJ+merpQ
AW1pYl6oYkR9OgILTp17hv6h7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEinLobg
RTdhd1MvE+SXNOL5vdMPMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvMDExMkJDNEUz
RkIyMTFFRUFBQjQ3MTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB1efMwDQYJKoZIhvcNAQELBQADggEBADLHJBRzIDn/vkr/
Sc8tGbkymZt55NlbdB3V7AtV/faZQQvnPp2Hn9gDyKBKFiVRJNqNhSivakIiy+do
+pJo3tK5JWOeTqXGZEr3Gy+lVgUOLlQ2SQ6d3zKGTXnyiszuAykZVX0ddGqiomeM
dMvWItGQoDyE3TEoKypYUl2eyoinoL91qKoNajgwiGcTMET1Fccff/UOUMqKGk2D
djcSbQ1nLQOHLNfDZ1W/XIeORXGbs0h4wA3abbJq9T2lFOCaFvORFZslHlC1L5S5
AVNRyunM/UaBtTLUY7u3UU5UBUeQMZCTBoScojLKc2YPNnP1VCKRG9Tp9aMb1tKi
Q/L+lIU=
Generated at Thu Aug 24 01:08:07 2023 by rpki-client on console-fra.rpki-client.org