Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/C8076592907A11EF9FA51C22C4F9AE02.roa
File: C8076592907A11EF9FA51C22C4F9AE02.roa (raw, json)
Hash identifier: hRYsk/3w3ZI8kfdQWz9nvMedmg8ky1xAeP1C/cYw8/A=
Subject key identifier: F8:C7:A1:88:6D:2F:8A:23:AE:A7:1B:DB:BB:99:57:FE:E8:7A:E0:C5
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2814
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/C8076592907A11EF9FA51C22C4F9AE02.roa
Signing time: Tue 22 Oct 2024 13:37:29 +0000
ROA not before: Tue 22 Oct 2024 13:37:29 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 62390
IP address blocks: 103.254.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 01:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10260 (0x2814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Oct 22 13:37:29 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6717aa99-9750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:9b:76:50:f5:9a:1a:ed:40:5f:50:cc:f8:
c2:30:6b:9f:de:e9:ff:a8:ed:50:5b:57:45:cf:81:
22:e5:f2:6e:2c:ac:5f:34:ae:6e:4f:e7:40:db:c9:
6e:cf:14:aa:df:fb:da:31:f1:e3:1d:b0:f4:75:c8:
36:1b:f2:eb:39:c2:eb:61:b6:c0:8d:f9:d9:f0:db:
d9:d8:12:52:49:62:a7:fe:4f:47:11:b6:6a:6e:f9:
80:58:02:a1:6e:68:5b:51:14:97:61:67:8a:9b:fd:
4a:f5:52:49:50:16:d3:10:90:09:b7:48:b9:5d:2d:
f8:25:4e:97:06:7d:79:84:09:4c:da:d5:bd:8f:e4:
be:da:e1:fe:4e:96:4e:42:ee:e7:46:1c:8d:07:92:
7e:d6:e5:41:8d:e1:1e:29:dc:ac:de:46:94:05:7c:
40:51:65:ec:ad:1f:65:ad:85:ad:4a:a5:6f:b2:94:
9f:bc:f9:fc:42:92:78:37:e2:a3:ea:6d:ea:80:27:
bb:f8:11:c3:c3:21:05:be:f5:e9:55:d9:ec:57:8b:
0d:ad:d3:ab:98:52:82:82:38:cd:bd:62:ce:5f:29:
4f:c6:f4:31:6f:fb:9f:20:0c:8e:61:cc:ee:29:1b:
05:1a:66:68:08:1e:91:33:b5:bf:b9:92:80:5d:83:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C7:A1:88:6D:2F:8A:23:AE:A7:1B:DB:BB:99:57:FE:E8:7A:E0:C5
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/C8076592907A11EF9FA51C22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f5:26:b9:c2:f8:08:c4:af:f3:e2:fb:53:07:b7:85:22:0c:
bc:cb:6c:8e:f3:45:51:f4:46:7c:ee:ab:86:6f:ba:62:d3:d8:
09:cb:e0:c9:66:a6:3b:df:34:03:6e:f4:d8:ab:43:65:79:a1:
be:10:40:4e:2f:e7:a6:91:58:d3:2b:32:99:9f:42:05:0b:68:
80:3b:3d:1a:41:65:de:34:4f:ff:57:b6:7b:42:2b:9a:c9:ea:
2d:0f:74:ac:d8:ce:93:11:48:8c:db:c2:a0:ae:ee:ab:d9:db:
ce:4e:f1:a9:69:18:33:c0:0b:f1:92:fc:75:0d:47:82:bf:be:
50:b9:13:0c:c1:d5:b2:12:5b:0e:dd:3f:d8:56:29:10:8a:56:
46:e0:9d:91:a9:fa:1a:aa:ec:14:0e:2c:77:03:52:7e:f5:ca:
62:17:1f:bf:f8:8c:b4:6c:9e:68:d3:ac:91:dc:45:be:44:dd:
3c:26:42:a4:13:8c:29:7b:fc:0f:5d:ef:f5:af:e0:27:1a:1e:
f0:08:6e:86:86:7a:00:8a:76:9d:bb:12:36:7e:69:6b:8e:f5:
23:2a:a1:a9:6e:63:1c:94:19:88:36:3d:2b:af:e6:7a:1a:71:
4c:07:5b:c5:3e:8b:be:8d:8b:e7:ae:7d:7f:2a:79:ab:05:63:
41:66:dc:48
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4
RTkzM0ZEQ0EwHhcNMjQxMDIyMTMzNzI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzE3YWE5OS05NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrmbdlD1mhrtQF9QzPjCMGuf3un/qO1QW1dFz4Ei5fJuLKxfNK5uT+dA28lu
zxSq3/vaMfHjHbD0dcg2G/LrOcLrYbbAjfnZ8NvZ2BJSSWKn/k9HEbZqbvmAWAKh
bmhbURSXYWeKm/1K9VJJUBbTEJAJt0i5XS34JU6XBn15hAlM2tW9j+S+2uH+TpZO
Qu7nRhyNB5J+1uVBjeEeKdys3kaUBXxAUWXsrR9lrYWtSqVvspSfvPn8QpJ4N+Kj
6m3qgCe7+BHDwyEFvvXpVdnsV4sNrdOrmFKCgjjNvWLOXylPxvQxb/ufIAyOYczu
KRsFGmZoCB6RM7W/uZKAXYMIRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPjHoYht
L4ojrqcb27uZV/7oeuDFMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG
OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvQzgwNzY1OTI5
MDdBMTFFRjlGQTUxQzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn/nowDQYJKoZIhvcNAQELBQADggEBALf1JrnC+AjEr/Pi
+1MHt4UiDLzLbI7zRVH0Rnzuq4ZvumLT2AnL4MlmpjvfNANu9NirQ2V5ob4QQE4v
56aRWNMrMpmfQgULaIA7PRpBZd40T/9XtntCK5rJ6i0PdKzYzpMRSIzbwqCu7qvZ
285O8alpGDPAC/GS/HUNR4K/vlC5EwzB1bISWw7dP9hWKRCKVkbgnZGp+hqq7BQO
LHcDUn71ymIXH7/4jLRsnmjTrJHcRb5E3TwmQqQTjCl7/A9d7/Wv4CcaHvAIboaG
egCKdp27EjZ+aWuO9SMqoaluYxyUGYg2PSuv5noacUwHW8U+i76Ni+eufX8qeasF
Y0Fm3Eg=
-----END CERTIFICATE-----
Generated at Sat Oct 26 04:05:30 2024 by rpki-client on console-fra.rpki-client.org