Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/69445176ECA411ED8FDDC54AC4F9AE02.roa
File: 69445176ECA411ED8FDDC54AC4F9AE02.roa (raw, json)
Hash identifier: xUa6GR8kZLAnHQiXzUyLdWVj8SHKbcHIll81jzXMciQ=
Subject key identifier: CD:78:7F:3B:33:CB:B5:40:58:B1:AA:0E:EC:5D:27:1B:87:9E:4E:BE
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0ACA
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/69445176ECA411ED8FDDC54AC4F9AE02.roa
Signing time: Fri 02 Jun 2023 20:31:40 +0000
ROA not before: Fri 02 Jun 2023 20:31:40 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 150744
IP address blocks: 103.196.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2762 (0xaca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Jun 2 20:31:40 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=647a51ac-f409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:e3:65:55:ee:6e:a7:59:a0:cd:74:9b:c2:
8e:3b:e1:93:6d:42:86:2c:b6:94:0a:24:94:33:39:
f1:18:e2:81:6f:9f:aa:01:bd:d5:61:f0:40:7d:f6:
02:3d:c2:a4:3c:8a:76:c2:19:2f:3d:b3:9b:e9:c8:
44:d7:da:dd:4a:a2:ab:df:8a:ce:5b:f4:46:55:53:
b1:5e:b7:c9:52:15:3c:9d:26:bc:cc:40:31:ba:ef:
1b:15:04:8c:c3:38:04:9b:12:5e:89:94:dd:c2:46:
34:73:0f:94:3d:2b:df:60:cd:02:05:c8:76:64:7f:
db:47:5c:7c:f4:47:88:91:24:8f:b7:35:80:75:4f:
31:71:3b:6d:c4:74:d0:bb:63:54:26:66:f5:f1:71:
81:bb:c8:10:67:0e:ad:bf:2d:f7:b7:be:be:b3:16:
4c:be:5c:82:c6:a3:29:48:50:a8:15:89:f3:f1:a9:
10:f7:42:a9:e6:5c:0e:8f:bb:44:31:a1:9e:b0:d2:
9f:80:75:74:77:4a:5f:3f:98:6f:59:8b:2e:61:09:
71:46:61:da:13:cc:37:c1:82:99:58:3e:78:b8:75:
c9:95:dd:0a:37:d9:ce:ea:39:d0:dd:50:d8:30:93:
0b:13:db:ca:18:1a:ca:09:05:f1:89:42:42:c6:88:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:7F:3B:33:CB:B5:40:58:B1:AA:0E:EC:5D:27:1B:87:9E:4E:BE
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/69445176ECA411ED8FDDC54AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.196.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:57:66:58:0f:99:e7:86:e8:5f:cd:a9:db:67:ca:2f:61:ec:
3d:7e:29:07:cb:88:ba:5b:82:fd:86:80:88:46:1e:75:f8:2c:
0b:2a:3e:68:7b:e9:ea:aa:96:e8:df:38:7b:6d:12:0d:8a:76:
2b:fd:c7:0c:62:75:1f:c4:b9:05:e6:7b:d8:67:80:d2:53:e5:
92:af:65:8f:c0:16:86:a1:53:ef:6a:44:40:68:07:43:15:5d:
84:7c:89:a2:9d:7b:e0:3e:c3:68:a2:5e:8d:b9:dc:9f:2a:a6:
75:c2:31:c3:b6:80:97:fb:dc:8c:36:7f:39:44:8c:c9:13:a7:
e4:42:25:f3:eb:69:21:5e:ea:70:18:06:aa:25:cf:35:3c:a7:
ca:48:f5:02:aa:29:79:44:4b:6a:0e:95:9b:64:26:b3:c8:ea:
28:68:58:1c:04:14:c0:76:7d:21:4b:0e:4c:4a:66:09:22:8c:
87:a0:08:28:4f:fd:9d:5b:55:cd:2a:3f:4a:6e:42:67:3e:36:
b0:36:55:47:c5:11:53:1e:57:53:94:ed:f3:79:ea:30:87:e1:
ef:fc:85:2a:8a:4b:64:7d:93:14:58:c5:8c:1b:71:85:2c:8a:
27:d7:66:02:c0:99:67:a9:70:f9:81:0c:2c:8e:c3:bf:34:ae:
7f:c4:89:97
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy
NTNBQkQwMjYwHhcNMjMwNjAyMjAzMTQwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDdhNTFhYy1mNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmlfjZVXubqdZoM10m8KOO+GTbUKGLLaUCiSUMznxGOKBb5+qAb3VYfBAffYC
PcKkPIp2whkvPbOb6chE19rdSqKr34rOW/RGVVOxXrfJUhU8nSa8zEAxuu8bFQSM
wzgEmxJeiZTdwkY0cw+UPSvfYM0CBch2ZH/bR1x89EeIkSSPtzWAdU8xcTttxHTQ
u2NUJmb18XGBu8gQZw6tvy33t76+sxZMvlyCxqMpSFCoFYnz8akQ90Kp5lwOj7tE
MaGesNKfgHV0d0pfP5hvWYsuYQlxRmHaE8w3wYKZWD54uHXJld0KN9nO6jnQ3VDY
MJMLE9vKGBrKCQXxiUJCxoiZ3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFM14fzsz
y7VAWLGqDuxdJxuHnk6+MB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC
NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5MjgvNERBN0JCMjAwQjVCMTFFQUEzRUJDNjUwQzRGOUFFMDIvNjk0NDUxNzZF
Q0E0MTFFRDhGRERDNTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnxOkwDQYJKoZIhvcNAQELBQADggEBADtXZlgPmeeG6F/N
qdtnyi9h7D1+KQfLiLpbgv2GgIhGHnX4LAsqPmh76eqqlujfOHttEg2Kdiv9xwxi
dR/EuQXme9hngNJT5ZKvZY/AFoahU+9qREBoB0MVXYR8iaKde+A+w2iiXo253J8q
pnXCMcO2gJf73Iw2fzlEjMkTp+RCJfPraSFe6nAYBqolzzU8p8pI9QKqKXlES2oO
lZtkJrPI6ihoWBwEFMB2fSFLDkxKZgkijIegCChP/Z1bVc0qP0puQmc+NrA2VUfF
EVMeV1OU7fN56jCH4e/8hSqKS2R9kxRYxYwbcYUsiifXZgLAmWepcPmBDCyOw780
rn/EiZc=
-----END CERTIFICATE-----
Generated at Tue Sep 5 04:40:00 2023 by rpki-client on console-ams.rpki-client.org