Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/19EC14885CC211ECA783B985C4F9AE02.roa
File: 19EC14885CC211ECA783B985C4F9AE02.roa (raw, json)
Hash identifier: Y3t7ZPo8UeyKsLQ+lmAPZeDWcznJ0c2SZUHg6OlLwQY=
Subject key identifier: 84:10:3C:15:1F:A7:F5:43:26:90:AB:0C:86:33:19:40:A8:4C:69:20
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 0315
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/19EC14885CC211ECA783B985C4F9AE02.roa
Signing time: Tue 17 Oct 2023 01:53:46 +0000
ROA not before: Tue 17 Oct 2023 01:53:46 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 140732
IP address blocks: 103.152.116.0/23 maxlen: 23
103.152.116.0/24 maxlen: 24
103.152.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 20:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Validity
Not Before: Oct 17 01:53:46 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=652de929-ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:4c:43:2c:6c:2c:81:14:eb:5f:29:f8:84:
a7:e0:49:95:91:87:6d:5a:1f:2c:15:da:d2:3b:fd:
e6:42:7d:96:6d:38:5b:63:ca:c4:87:01:17:31:05:
b2:66:f0:b3:a2:e7:94:bb:df:c4:3b:db:78:41:8e:
ee:ab:df:32:ea:bb:67:c3:68:e4:60:0d:5f:80:af:
ff:95:06:1e:7b:98:76:2b:17:78:9b:8c:a0:6b:df:
a4:0b:cf:ba:b6:53:5c:83:ad:10:12:a9:7c:7e:62:
59:1e:c8:29:23:2a:45:92:36:3a:32:b9:db:0e:87:
2c:0c:73:c0:0a:6d:67:d3:db:44:1b:2c:34:80:b9:
aa:06:7b:93:69:ee:ea:54:58:62:95:14:22:f1:7a:
22:b5:f1:7b:e9:f9:df:74:61:d9:d9:57:59:ff:b6:
71:8b:eb:0b:b6:b7:88:19:60:0d:ee:51:ea:d8:45:
75:c0:c1:1a:1f:5f:2f:ea:55:ab:ec:4e:ae:4f:2c:
f5:95:d2:56:d9:29:cc:5a:ae:18:98:72:e8:37:98:
d9:d7:00:85:66:02:eb:de:b3:3c:80:72:53:fc:a8:
74:9c:c8:a5:d9:46:97:d9:e8:9e:fe:e8:cd:ed:bf:
61:c6:9d:99:a8:dc:2e:fe:5a:bf:2e:e2:58:d0:57:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:3C:15:1F:A7:F5:43:26:90:AB:0C:86:33:19:40:A8:4C:69:20
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/19EC14885CC211ECA783B985C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:81:7d:27:32:dc:50:a8:9d:08:6a:b8:c8:48:bf:a0:5f:cc:
34:c3:b3:1c:75:18:1c:e6:fe:ce:27:8b:ac:c3:9e:f0:5c:bc:
7a:4c:b6:9b:6a:95:37:a4:7e:4a:bc:10:8a:41:aa:6d:19:5c:
e9:4f:31:d9:e7:eb:cc:b5:14:f7:19:fd:ec:9f:12:d6:55:5d:
a5:f2:1b:de:fa:60:b3:de:9b:46:ea:62:d9:ee:9f:a7:02:bd:
2e:33:58:ba:85:37:fd:5f:b1:84:12:39:3a:13:a9:1f:86:be:
06:bd:ea:c5:c0:fb:33:0d:cf:10:41:27:7d:5f:7f:ac:a6:c4:
eb:61:80:94:44:55:c1:c6:3e:94:8b:5d:f6:79:da:aa:28:08:
da:61:84:da:19:d0:39:b5:4a:5b:5c:39:45:72:60:1d:78:5e:
e5:a1:87:30:bc:98:dc:2e:b2:32:90:3b:e9:ae:4b:12:49:af:
3d:5d:19:63:90:51:8b:a8:94:54:c8:db:47:7e:ef:4d:e2:ad:
a4:c4:bc:85:0a:37:ed:90:f1:36:17:d1:68:ba:f0:ea:1a:37:
3b:1d:c3:5c:95:68:fd:f7:7b:64:c6:f3:30:1f:21:c0:b9:21:
4e:cf:41:fc:2e:3a:7a:3d:37:6d:e0:58:9f:4f:e7:2d:1f:f9:
63:43:6f:e3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0
ODVCMDVBMkMwHhcNMjMxMDE3MDE1MzQ2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJkZTkyOS1lZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoydMQyxsLIEU618p+ISn4EmVkYdtWh8sFdrSO/3mQn2WbThbY8rEhwEXMQWy
ZvCzoueUu9/EO9t4QY7uq98y6rtnw2jkYA1fgK//lQYee5h2Kxd4m4yga9+kC8+6
tlNcg60QEql8fmJZHsgpIypFkjY6MrnbDocsDHPACm1n09tEGyw0gLmqBnuTae7q
VFhilRQi8XoitfF76fnfdGHZ2VdZ/7Zxi+sLtreIGWAN7lHq2EV1wMEaH18v6lWr
7E6uTyz1ldJW2SnMWq4YmHLoN5jZ1wCFZgLr3rM8gHJT/Kh0nMil2UaX2eie/ujN
7b9hxp2ZqNwu/lq/LuJY0Ffr2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIQQPBUf
p/VDJpCrDIYzGUCoTGkgMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD
QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUVFMDYvMDU1OUVFQUU1Q0JFMTFFQ0IyNzNEQzdDQzRGOUFFMDIvMTlFQzE0ODg1
Q0MyMTFFQ0E3ODNCOTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmHQwDQYJKoZIhvcNAQELBQADggEBAF+BfScy3FConQhq
uMhIv6BfzDTDsxx1GBzm/s4ni6zDnvBcvHpMtptqlTekfkq8EIpBqm0ZXOlPMdnn
68y1FPcZ/eyfEtZVXaXyG976YLPem0bqYtnun6cCvS4zWLqFN/1fsYQSOToTqR+G
vga96sXA+zMNzxBBJ31ff6ymxOthgJREVcHGPpSLXfZ52qooCNphhNoZ0Dm1Sltc
OUVyYB14XuWhhzC8mNwusjKQO+muSxJJrz1dGWOQUYuolFTI20d+703iraTEvIUK
N+2Q8TYX0Wi68OoaNzsdw1yVaP33e2TG8zAfIcC5IU7PQfwuOno9N23gWJ9P5y0f
+WNDb+M=
-----END CERTIFICATE-----
Generated at Sat Feb 10 22:09:14 2024 by rpki-client on console-ams.rpki-client.org