Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
File: 1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa (raw, json)
Hash identifier: V5l//TrTM4E0JvCDXG1QeKZ39Azlp1rzuRNdOZelEDg=
Subject key identifier: EE:32:5B:43:DD:E9:E6:7B:C8:AA:84:D3:CD:8C:F4:84:2E:D9:E1:72
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 05FF
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
Signing time: Wed 31 May 2023 00:57:16 +0000
ROA not before: Wed 31 May 2023 00:57:16 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 103.54.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 31 00:57:16 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64769b6c-8427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:30:6b:2f:72:2d:6a:04:36:e0:63:a4:7a:
4e:45:b2:f5:6d:55:98:cc:2c:3c:54:70:c4:11:18:
fc:c2:ff:cd:b9:58:cd:45:31:3b:5f:3a:f6:0e:89:
ec:a5:3e:a9:84:c4:f3:62:b1:a4:87:4d:d6:40:86:
e6:f7:97:76:a0:e9:a3:2e:bc:cc:c8:ba:1f:7f:9a:
88:9f:bb:e4:28:ac:88:70:81:d3:5f:46:5f:c4:99:
eb:dc:93:a6:20:0e:e6:0a:ab:ef:2f:10:aa:18:a5:
60:ff:c3:02:ec:bc:a8:e9:1c:0b:1e:32:e8:97:e1:
a7:48:e2:28:cb:2f:30:2b:80:0d:fd:31:ac:5d:18:
7d:c4:5b:8e:1d:49:89:9f:fa:38:20:d0:20:b6:74:
aa:5c:13:ab:79:89:8e:0e:d1:de:b1:bf:36:13:47:
6a:ff:06:98:4c:f3:64:1b:7e:31:82:0a:e4:06:b0:
d7:6e:82:3a:34:60:18:38:f0:64:73:11:0e:a1:a8:
b3:50:a5:d3:7f:5a:88:23:a9:0e:c3:e6:df:68:1a:
17:d4:d3:85:38:c0:21:fc:1e:70:e5:42:f3:7c:e7:
3c:dc:29:d1:5e:5a:5a:ce:a3:49:f5:65:2d:4f:db:
53:15:8b:0d:7e:29:26:5a:ec:e5:ef:c3:35:3e:54:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:5B:43:DD:E9:E6:7B:C8:AA:84:D3:CD:8C:F4:84:2E:D9:E1:72
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.155.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9c:f0:00:e3:db:5b:57:4b:31:fa:5b:2a:4b:a8:05:7f:d2:
ca:fc:44:b1:26:37:61:2e:a6:1c:9e:a6:72:23:a8:20:dc:3b:
c2:d1:46:8a:d3:8c:3f:45:7d:87:99:46:9e:ba:e8:8c:10:3e:
9c:99:af:3b:9a:7b:36:8a:c4:4b:64:62:a3:0b:77:42:45:ce:
d2:ea:98:a1:7c:1e:5c:1c:c3:eb:25:fa:42:c7:3b:62:8a:51:
1c:39:c7:ba:52:7d:50:bf:3c:f5:3e:2c:bd:8e:ab:23:cf:eb:
ca:19:24:fa:06:d1:8e:a6:5d:db:0d:24:d9:8f:2a:8c:f5:ac:
0e:c4:0a:af:03:2c:ea:ed:84:fb:70:72:21:bf:8b:ed:47:1f:
93:9e:fc:b4:33:4c:12:83:d1:72:c7:8b:60:92:1f:91:b8:7e:
d7:1a:2f:5e:af:f3:21:a3:65:ee:b9:54:ea:3a:e5:85:cb:7d:
b2:17:c6:e8:e6:b4:b0:07:a0:ed:d2:45:d4:fe:03:f3:bf:18:
fc:62:cd:be:b0:06:11:fd:c8:9c:d8:23:a8:ed:80:86:8f:7b:
0d:db:15:9e:79:20:f0:dc:70:72:3c:7d:22:a2:47:36:b6:2a:
79:15:d5:af:b8:f6:b2:46:f1:cc:43:b1:64:20:17:5c:90:c7:
ab:9e:5a:08
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjMwNTMxMDA1NzE2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc2OWI2Yy04NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxuEway9yLWoENuBjpHpORbL1bVWYzCw8VHDEERj8wv/NuVjNRTE7Xzr2Dons
pT6phMTzYrGkh03WQIbm95d2oOmjLrzMyLoff5qIn7vkKKyIcIHTX0ZfxJnr3JOm
IA7mCqvvLxCqGKVg/8MC7Lyo6RwLHjLol+GnSOIoyy8wK4AN/TGsXRh9xFuOHUmJ
n/o4INAgtnSqXBOreYmODtHesb82E0dq/waYTPNkG34xggrkBrDXboI6NGAYOPBk
cxEOoaizUKXTf1qII6kOw+bfaBoX1NOFOMAh/B5w5ULzfOc83CnRXlpazqNJ9WUt
T9tTFYsNfikmWuzl78M1PlTKgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO4yW0Pd
6eZ7yKqE082M9IQu2eFyMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMUY4RjdEMjJC
NDFFMTFFQ0FGREExRjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNpswDQYJKoZIhvcNAQELBQADggEBAACc8ADj21tXSzH6
WypLqAV/0sr8RLEmN2EuphyepnIjqCDcO8LRRorTjD9FfYeZRp666IwQPpyZrzua
ezaKxEtkYqMLd0JFztLqmKF8Hlwcw+sl+kLHO2KKURw5x7pSfVC/PPU+LL2OqyPP
68oZJPoG0Y6mXdsNJNmPKoz1rA7ECq8DLOrthPtwciG/i+1HH5Oe/LQzTBKD0XLH
i2CSH5G4ftcaL16v8yGjZe65VOo65YXLfbIXxujmtLAHoO3SRdT+A/O/GPxizb6w
BhH9yJzYI6jtgIaPew3bFZ55IPDccHI8fSKiRza2KnkV1a+49rJG8cxDsWQgF1yQ
x6ueWgg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:35 2023 by rpki-client on console.sobornost.net