Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6663C1E6632A11EFBFA40F53C4F9AE02.roa
File: 6663C1E6632A11EFBFA40F53C4F9AE02.roa (raw, json)
Hash identifier: OXqidtVMd/QqLUTu0QO75WtWkd5sqJBN6tvlnqCnA2k=
Subject key identifier: D4:EE:99:76:F4:1E:7E:39:70:B5:B4:D9:C2:20:81:DD:59:6C:43:F6
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3543
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6663C1E6632A11EFBFA40F53C4F9AE02.roa
Signing time: Sat 05 Oct 2024 10:01:37 +0000
ROA not before: Sat 05 Oct 2024 10:01:37 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.68.120.0/24 maxlen: 24
182.54.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 20:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13635 (0x3543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 5 10:01:37 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67010e80-d80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:6e:2a:3a:15:b4:ad:c4:71:26:cd:cd:69:
f9:16:0c:c0:f4:3d:42:e2:23:f9:d9:49:0a:a3:9f:
c8:be:75:c8:37:de:11:3a:22:81:4b:dc:e1:7e:08:
ae:1f:76:c8:b3:2b:4d:1d:d6:9d:bb:ff:2d:da:84:
1d:d8:a0:6e:d4:4e:1d:70:0b:40:23:d7:21:2f:3e:
c4:ce:17:9b:98:2b:bc:da:4e:cd:82:90:47:17:93:
29:3f:25:a1:b4:8c:3c:11:95:d7:6c:a1:a7:1a:24:
c1:ea:f9:43:28:84:f5:e5:6e:cb:2f:88:a9:4e:90:
90:98:a4:37:76:23:9b:5d:35:d0:ee:0f:6d:80:fb:
3e:e0:10:65:db:f9:d2:5c:5f:ec:bc:c2:a8:ad:1b:
46:68:70:b8:40:b2:1d:ff:76:82:b4:61:b3:99:cf:
bc:41:94:4d:9e:07:fb:5b:c2:0c:2f:0e:f1:8d:99:
9e:3b:d1:6a:38:ef:cb:ce:35:48:bc:c2:fe:f3:2a:
4e:d7:6f:42:ec:d3:8f:0f:ab:03:21:78:ac:a3:51:
f3:05:7f:7f:6e:7a:cb:73:d3:49:37:8c:fd:13:55:
e2:04:ea:e2:99:6a:39:9a:35:60:82:d6:e8:4b:2f:
3f:49:40:55:7d:9f:54:6c:88:12:48:0e:d2:ef:14:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:99:76:F4:1E:7E:39:70:B5:B4:D9:C2:20:81:DD:59:6C:43:F6
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6663C1E6632A11EFBFA40F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.120.0/24
182.54.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:45:c7:59:4b:ba:19:0d:59:ae:91:f6:43:fc:d8:99:94:08:
71:64:2d:93:9e:a9:15:6e:ec:63:83:92:4a:04:b7:40:19:97:
9f:1a:21:8d:46:a0:6d:59:90:b5:36:41:91:2e:d9:f7:5f:fb:
ae:0c:ad:ab:21:c2:e6:ce:90:19:f8:35:fb:90:78:2e:7a:89:
e1:56:c2:e3:48:c5:e7:53:45:0d:05:cb:82:6f:a1:d9:cb:7a:
3d:0b:48:be:e6:74:86:6c:78:cd:c0:56:7a:18:e4:aa:e4:4c:
54:11:44:75:1e:b2:ae:f1:4d:66:97:f3:42:6a:a2:33:1b:56:
89:2d:8a:22:3a:ed:73:5f:e9:20:25:aa:e4:a6:85:e4:9c:ab:
f4:c1:7b:37:87:a7:dc:62:27:d8:2c:79:1b:cc:f8:9d:79:b0:
90:75:cf:a6:fe:05:5c:33:9c:17:a7:c2:05:26:b2:fc:d4:d1:
42:9f:9c:77:50:a5:8b:26:83:ac:cc:3a:8a:2b:47:36:23:70:
24:0c:39:94:f1:17:a7:51:d4:11:c7:7f:ba:81:4a:18:2a:b1:
e4:e2:90:5a:71:94:5f:63:6b:55:52:d1:5a:70:08:75:93:93:
27:08:20:77:1e:55:b4:66:70:54:97:06:e1:f0:51:45:df:fc:
bc:49:71:63
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjQxMDA1MTAwMTM3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzAxMGU4MC1kODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2spuKjoVtK3EcSbNzWn5FgzA9D1C4iP52UkKo5/IvnXIN94ROiKBS9zhfgiu
H3bIsytNHdadu/8t2oQd2KBu1E4dcAtAI9chLz7EzhebmCu82k7NgpBHF5MpPyWh
tIw8EZXXbKGnGiTB6vlDKIT15W7LL4ipTpCQmKQ3diObXTXQ7g9tgPs+4BBl2/nS
XF/svMKorRtGaHC4QLId/3aCtGGzmc+8QZRNngf7W8IMLw7xjZmeO9FqOO/LzjVI
vML+8ypO129C7NOPD6sDIXiso1HzBX9/bnrLc9NJN4z9E1XiBOrimWo5mjVggtbo
Sy8/SUBVfZ9UbIgSSA7S7xRYPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNTumXb0
Hn45cLW02cIggd1ZbEP2MB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvNjY2M0MxRTY2
MzJBMTFFRkJGQTQwRjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnRHgDBAC2Nu4wDQYJKoZIhvcNAQELBQADggEBAKFFx1lL
uhkNWa6R9kP82JmUCHFkLZOeqRVu7GODkkoEt0AZl58aIY1GoG1ZkLU2QZEu2fdf
+64MrashwubOkBn4NfuQeC56ieFWwuNIxedTRQ0Fy4JvodnLej0LSL7mdIZseM3A
VnoY5KrkTFQRRHUesq7xTWaX80JqojMbVoktiiI67XNf6SAlquSmheScq/TBezeH
p9xiJ9gseRvM+J15sJB1z6b+BVwznBenwgUmsvzU0UKfnHdQpYsmg6zMOoorRzYj
cCQMOZTxF6dR1BHHf7qBShgqseTikFpxlF9ja1VS0VpwCHWTkycIIHceVbRmcFSX
BuHwUUXf/LxJcWM=
-----END CERTIFICATE-----
Generated at Mon Oct 14 22:50:51 2024 by rpki-client on console-ams.rpki-client.org