Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/36D76E5CD5F911ECA822DD1EC4F9AE02.roa
File: 36D76E5CD5F911ECA822DD1EC4F9AE02.roa (raw, json)
Hash identifier: ZF1q67QhVYzseFdmeU/v8cuBRtlWn3s634PQW3rbxR4=
Subject key identifier: 9C:22:AF:B0:58:32:7D:57:E3:8F:78:0B:EC:67:B3:14:7B:BA:72:12
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 03BC
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/36D76E5CD5F911ECA822DD1EC4F9AE02.roa
Signing time: Wed 05 Apr 2023 03:03:36 +0000
ROA not before: Wed 05 Apr 2023 03:03:36 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 135271
IP address blocks: 103.210.244.0/23 maxlen: 23
103.210.246.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Validity
Not Before: Apr 5 03:03:36 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=642ce508-0d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:3a:4f:ad:dd:03:fd:9c:a6:cf:c8:05:99:
1e:9c:f8:0d:a5:56:0d:36:3f:7c:14:a8:52:b0:eb:
27:ea:e8:0e:73:32:31:76:3e:c8:c6:10:7f:e1:1c:
00:15:cb:ca:5b:44:a9:54:c3:27:cf:a4:24:9f:01:
00:2b:ab:cc:8a:5d:30:13:80:8a:42:64:6f:ca:df:
93:64:2c:0c:d9:5d:f9:4d:bb:9a:97:3d:5e:56:72:
ea:f6:97:3f:ac:8e:3c:42:18:0a:e1:d0:10:67:bc:
4e:07:14:6e:79:bb:4f:fb:d3:87:fb:4d:9b:3b:9d:
06:53:9a:9d:b0:8a:20:56:07:39:1f:6c:49:29:b5:
f8:e8:ab:c3:45:8e:71:42:1b:c1:6b:b8:30:ce:f0:
0e:73:46:a1:cd:48:87:a6:63:74:4a:f2:94:aa:cd:
30:4e:aa:48:c0:73:3c:29:c4:58:e2:86:a9:9b:f0:
8b:63:ac:ef:01:6c:15:43:ef:fd:1e:9f:61:10:94:
a5:70:b8:e5:7b:6c:b6:b9:97:48:4b:81:f8:7e:db:
0d:f5:70:d7:d0:d6:b0:dd:1f:a8:36:ac:93:96:bf:
77:74:3c:8a:d4:2b:0d:02:38:1f:b5:e4:75:28:c3:
b9:eb:dd:8c:f7:a2:3e:e0:38:02:a5:e2:2b:41:3f:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:AF:B0:58:32:7D:57:E3:8F:78:0B:EC:67:B3:14:7B:BA:72:12
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/36D76E5CD5F911ECA822DD1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.244.0/22
Signature Algorithm: sha256WithRSAEncryption
96:3f:10:73:31:15:d6:00:03:90:6a:02:60:89:6f:60:31:3f:
c5:89:02:78:2d:c6:b6:64:26:5b:74:fd:45:08:2a:7d:da:39:
12:62:62:f9:90:90:29:1b:60:43:52:a6:7f:bf:d7:a2:32:fc:
11:f9:47:2d:36:31:b5:7d:15:0c:c8:15:7f:94:b2:fb:46:95:
ff:a3:52:dd:fe:5b:0e:68:a7:b8:48:5a:e1:3c:18:cc:10:c1:
fe:4e:37:3b:a4:62:a8:55:53:1c:91:d9:dd:85:a6:48:0f:7c:
e1:f9:f8:79:12:fc:fa:60:fa:d2:65:58:1c:7e:4c:ce:8b:2d:
84:ff:3e:61:98:0e:c1:d0:a3:18:87:7a:77:1a:af:7c:2f:b8:
1b:e9:48:44:79:fb:d2:1e:ee:02:b0:1c:bd:c7:e3:9c:5b:69:
98:05:7f:99:ca:28:de:76:f7:22:a7:93:28:ec:dc:58:d3:09:
62:c0:51:2f:83:43:25:46:a9:84:18:26:1b:fd:a5:93:57:ed:
e7:ba:4f:5d:4d:69:af:86:86:fe:58:5b:5f:f9:35:4e:84:fe:
07:53:fd:b2:5a:90:7c:07:a1:e1:a7:bb:e4:28:1f:c1:f6:06:
e7:17:b6:87:bc:6a:b5:ce:88:77:0e:fb:d9:4a:ac:de:4e:91:
df:c6:b9:68
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC
QTBCNENDNzIwHhcNMjMwNDA1MDMwMzM2WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJjZTUwOC0wZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvI6T63dA/2cps/IBZkenPgNpVYNNj98FKhSsOsn6ugOczIxdj7IxhB/4RwA
FcvKW0SpVMMnz6QknwEAK6vMil0wE4CKQmRvyt+TZCwM2V35Tbualz1eVnLq9pc/
rI48QhgK4dAQZ7xOBxRuebtP+9OH+02bO50GU5qdsIogVgc5H2xJKbX46KvDRY5x
QhvBa7gwzvAOc0ahzUiHpmN0SvKUqs0wTqpIwHM8KcRY4oapm/CLY6zvAWwVQ+/9
Hp9hEJSlcLjle2y2uZdIS4H4ftsN9XDX0Naw3R+oNqyTlr93dDyK1CsNAjgfteR1
KMO5692M96I+4DgCpeIrQT+KjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJwir7BY
Mn1X4494C+xnsxR7unISMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1
MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTNDRTkvMEFCMUQzOTZGNTE1MTFFQjlFRkUwNzUwQzRGOUFFMDIvMzZENzZFNUNE
NUY5MTFFQ0E4MjJERDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn0vQwDQYJKoZIhvcNAQELBQADggEBAJY/EHMxFdYAA5Bq
AmCJb2AxP8WJAngtxrZkJlt0/UUIKn3aORJiYvmQkCkbYENSpn+/16Iy/BH5Ry02
MbV9FQzIFX+UsvtGlf+jUt3+Ww5op7hIWuE8GMwQwf5ONzukYqhVUxyR2d2FpkgP
fOH5+HkS/Ppg+tJlWBx+TM6LLYT/PmGYDsHQoxiHencar3wvuBvpSER5+9Ie7gKw
HL3H45xbaZgFf5nKKN529yKnkyjs3FjTCWLAUS+DQyVGqYQYJhv9pZNX7ee6T11N
aa+Ghv5YW1/5NU6E/gdT/bJakHwHoeGnu+QoH8H2BucXtoe8arXOiHcO+9lKrN5O
kd/GuWg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net