Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0FF8DFF0FBA911EEA155441FC4F9AE02.roa
File: 0FF8DFF0FBA911EEA155441FC4F9AE02.roa (raw, json)
Hash identifier: FIvlNoaAle/zv6I2bOjGctr9qyasLVuix8LsvcpiatA=
Subject key identifier: 5E:66:97:1D:B1:C4:A0:C8:56:A1:EC:C2:56:83:C7:A0:0B:89:12:7C
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 34CD
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0FF8DFF0FBA911EEA155441FC4F9AE02.roa
Signing time: Wed 19 Jun 2024 22:02:29 +0000
ROA not before: Wed 19 Jun 2024 22:02:29 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.68.120.0/24 maxlen: 24
103.230.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 12:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13517 (0x34cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Jun 19 22:02:29 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66735575-dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:07:77:f7:7e:8d:0f:ae:f6:12:a9:40:af:
3a:3e:7d:d8:ca:68:d4:6e:3d:36:77:64:4c:77:e6:
f1:20:3e:85:91:5c:b2:e3:31:f2:67:ec:d3:20:3d:
2d:d9:f5:bd:16:9d:96:67:79:5a:04:cf:6a:6a:0e:
4c:79:e5:19:8d:2f:f6:da:e4:d2:3a:63:72:e4:19:
00:22:41:0b:a5:6c:ca:7f:01:8b:93:3c:89:ad:45:
c4:88:d7:1b:e1:63:15:b8:92:b9:b2:01:30:51:b7:
f7:fc:c4:1a:8a:0e:4e:9e:a8:e7:41:3f:99:12:b8:
e6:d4:5d:4f:dc:01:6a:5d:3f:91:c1:57:f4:2d:21:
a1:6d:47:4c:ac:7e:b7:38:84:97:b9:f6:75:1c:48:
09:a8:b3:b3:a9:e5:23:18:a2:35:bb:2a:cc:29:b6:
19:ef:cb:72:45:35:73:25:89:31:42:4c:18:29:a1:
94:ea:0f:af:4a:b7:1e:53:d6:b7:21:52:22:97:89:
6b:18:dc:5f:fe:ec:be:98:09:38:90:2b:c8:58:30:
41:2a:4c:91:d8:16:1a:62:cd:2e:f9:9c:1f:97:fa:
a1:a6:5f:33:22:0c:0b:29:59:18:46:2d:79:2a:f3:
5b:7d:78:79:c1:2b:9d:5b:ea:d9:57:98:0d:0d:95:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:66:97:1D:B1:C4:A0:C8:56:A1:EC:C2:56:83:C7:A0:0B:89:12:7C
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0FF8DFF0FBA911EEA155441FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.120.0/24
103.230.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a0:71:80:d8:93:85:a0:11:32:72:7d:6a:a7:d2:fb:fb:58:
db:14:52:c9:d6:a2:53:c6:ac:b2:de:98:26:b8:f6:00:2f:de:
70:91:05:3c:ef:ba:5f:f9:e6:34:1b:2d:7b:b1:cd:bd:ad:13:
ee:55:54:2f:02:d7:67:5f:fb:1c:c1:72:d8:f1:c8:b8:90:fd:
b7:55:0b:d8:98:52:c6:3c:d7:14:fc:02:99:07:40:83:4a:c4:
08:0c:75:ff:a4:70:c2:1e:3b:4c:8d:16:80:dd:b7:e3:f9:11:
e0:1f:25:f6:23:74:4e:11:17:a5:cf:a1:d6:b0:db:60:12:d1:
18:b3:2a:5f:b5:b6:d5:94:be:c4:2a:7f:8c:e3:dc:a1:3f:0c:
82:5d:f3:a6:a1:83:01:47:83:43:2d:39:09:66:d4:66:30:e0:
f8:e7:6e:fa:16:9a:0a:75:6e:37:30:df:52:96:c8:ae:5e:4a:
8e:45:fa:3e:93:95:cf:a9:54:cc:fb:6f:ff:eb:f5:6b:23:00:
1d:83:5a:87:c1:65:8e:40:d3:5c:42:e4:7c:9e:64:0f:20:05:
7e:97:04:8f:02:bf:f9:f9:26:ed:2c:9e:75:88:0f:6c:af:e1:
db:d7:66:7c:93:43:42:39:17:82:1d:4c:a2:1a:1e:ac:ea:77:
da:20:ac:fc
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjQwNjE5MjIwMjI5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjczNTU3NS1kZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TcHd/d+jQ+u9hKpQK86Pn3YymjUbj02d2RMd+bxID6FkVyy4zHyZ+zTID0t
2fW9Fp2WZ3laBM9qag5MeeUZjS/22uTSOmNy5BkAIkELpWzKfwGLkzyJrUXEiNcb
4WMVuJK5sgEwUbf3/MQaig5OnqjnQT+ZErjm1F1P3AFqXT+RwVf0LSGhbUdMrH63
OISXufZ1HEgJqLOzqeUjGKI1uyrMKbYZ78tyRTVzJYkxQkwYKaGU6g+vSrceU9a3
IVIil4lrGNxf/uy+mAk4kCvIWDBBKkyR2BYaYs0u+Zwfl/qhpl8zIgwLKVkYRi15
KvNbfXh5wSudW+rZV5gNDZX3qwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF5mlx2x
xKDIVqHswlaDx6ALiRJ8MB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvMEZGOERGRjBG
QkE5MTFFRUExNTU0NDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnRHgDBABn5kUwDQYJKoZIhvcNAQELBQADggEBAAugcYDY
k4WgETJyfWqn0vv7WNsUUsnWolPGrLLemCa49gAv3nCRBTzvul/55jQbLXuxzb2t
E+5VVC8C12df+xzBctjxyLiQ/bdVC9iYUsY81xT8ApkHQINKxAgMdf+kcMIeO0yN
FoDdt+P5EeAfJfYjdE4RF6XPodaw22AS0RizKl+1ttWUvsQqf4zj3KE/DIJd86ah
gwFHg0MtOQlm1GYw4PjnbvoWmgp1bjcw31KWyK5eSo5F+j6Tlc+pVMz7b//r9Wsj
AB2DWofBZY5A01xC5HyeZA8gBX6XBI8Cv/n5Ju0snnWID2yv4dvXZnyTQ0I5F4Id
TKIaHqzqd9ogrPw=
-----END CERTIFICATE-----
Generated at Mon Jun 24 16:22:16 2024 by rpki-client on console-ams.rpki-client.org