Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/B446F4C2B59F11ECBBBE6980C4F9AE02.roa
File: B446F4C2B59F11ECBBBE6980C4F9AE02.roa (raw, json)
Hash identifier: n/ArkaR6HKXIUS8zQROAP3pXvdShl7jYkAQCPpyBD4Q=
Subject key identifier: 25:B0:1C:5B:8C:1E:35:8B:13:EB:FE:69:DF:30:F9:0D:CB:66:54:E1
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0600
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/B446F4C2B59F11ECBBBE6980C4F9AE02.roa
Signing time: Wed 31 May 2023 00:57:18 +0000
ROA not before: Wed 31 May 2023 00:57:18 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 103.54.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 31 00:57:18 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64769b6d-9643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:dd:eb:9f:41:42:e6:16:09:98:37:83:97:
92:d9:94:0c:25:82:c4:69:cb:24:8e:01:6a:bb:be:
c4:8a:b8:ac:91:50:b4:1a:2f:f3:92:7d:04:e3:af:
db:fa:cf:07:c5:58:59:98:51:2c:72:f7:39:9f:22:
d8:e4:6d:c5:96:d5:02:6c:17:f2:14:38:6a:a0:74:
f4:03:a2:27:9f:12:22:db:28:29:26:91:96:d9:c4:
c0:1d:3e:22:f3:86:51:d7:bc:24:d6:28:2b:df:82:
f1:51:09:a0:0d:1b:f0:d0:ef:cb:d1:3e:66:17:de:
38:c5:c1:95:7a:24:f2:7c:4d:3f:f1:10:4d:fa:f9:
d7:2a:78:c9:7c:06:13:cb:e4:17:6c:25:9d:92:43:
40:96:a3:2a:2d:86:a3:2b:02:2c:4e:c6:4f:26:78:
ae:2b:fc:5b:ac:5a:52:ce:23:3d:37:47:1c:3d:46:
86:ea:4b:92:95:b2:4b:e3:a0:37:a2:c2:6c:84:2a:
b3:83:a6:81:68:a9:45:b3:39:0f:38:98:02:5e:52:
8b:8e:46:a6:dd:d2:74:bf:a6:5d:74:8b:14:b7:6b:
ad:b6:1f:20:66:9d:4e:a3:38:49:98:48:74:70:95:
9d:43:9e:4b:b8:35:26:56:76:38:d8:44:32:94:5b:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:1C:5B:8C:1E:35:8B:13:EB:FE:69:DF:30:F9:0D:CB:66:54:E1
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/B446F4C2B59F11ECBBBE6980C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b8:56:f4:63:cf:da:12:d1:5a:89:0e:b3:de:4f:ee:70:4f:
ab:ce:97:3a:24:52:dd:62:46:70:a8:a7:93:87:00:3d:40:97:
e2:96:43:02:81:6b:d2:81:d6:d6:e2:a8:45:aa:ac:81:0f:06:
2e:f9:7a:4c:56:33:bf:f9:0f:54:78:82:9c:79:0f:9f:47:8c:
2c:36:69:cb:9a:34:09:78:86:20:38:b1:1e:99:a3:7b:f0:ea:
df:72:48:0e:71:b2:ad:ca:1f:28:56:d0:10:d8:f4:6e:aa:7a:
1e:b7:34:e7:c5:43:5b:22:c0:1a:51:1b:75:d0:de:d7:91:c6:
94:9d:6f:0f:11:74:cc:d9:22:77:6b:94:c4:2f:7d:7c:1f:c5:
49:70:3d:47:79:57:e1:cf:eb:cc:56:3e:ed:14:60:e9:a9:e7:
c5:29:20:65:d2:32:4f:93:c9:79:58:e9:e2:db:14:a2:8a:a9:
8b:94:7a:64:e8:95:ce:62:a2:fd:f3:10:84:ac:b7:c1:46:98:
00:6e:8d:5e:cf:ba:dd:73:8e:51:7e:2d:52:15:a7:b3:39:71:
f3:2a:9d:ad:f7:ed:a6:d8:81:65:c1:07:b1:48:3c:9b:91:1a:
aa:a6:a2:db:58:56:14:36:7a:5a:fe:43:de:6f:05:0b:f7:78:
b6:b6:8c:34
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjMwNTMxMDA1NzE4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc2OWI2ZC05NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3v3d659BQuYWCZg3g5eS2ZQMJYLEacskjgFqu77EiriskVC0Gi/zkn0E46/b
+s8HxVhZmFEscvc5nyLY5G3FltUCbBfyFDhqoHT0A6InnxIi2ygpJpGW2cTAHT4i
84ZR17wk1igr34LxUQmgDRvw0O/L0T5mF944xcGVeiTyfE0/8RBN+vnXKnjJfAYT
y+QXbCWdkkNAlqMqLYajKwIsTsZPJniuK/xbrFpSziM9N0ccPUaG6kuSlbJL46A3
osJshCqzg6aBaKlFszkPOJgCXlKLjkam3dJ0v6ZddIsUt2utth8gZp1OozhJmEh0
cJWdQ55LuDUmVnY42EQylFuTgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCWwHFuM
HjWLE+v+ad8w+Q3LZlThMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvQjQ0NkY0QzJC
NTlGMTFFQ0JCQkU2OTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNpswDQYJKoZIhvcNAQELBQADggEBAHy4VvRjz9oS0VqJ
DrPeT+5wT6vOlzokUt1iRnCop5OHAD1Al+KWQwKBa9KB1tbiqEWqrIEPBi75ekxW
M7/5D1R4gpx5D59HjCw2acuaNAl4hiA4sR6Zo3vw6t9ySA5xsq3KHyhW0BDY9G6q
eh63NOfFQ1siwBpRG3XQ3teRxpSdbw8RdMzZIndrlMQvfXwfxUlwPUd5V+HP68xW
Pu0UYOmp58UpIGXSMk+TyXlY6eLbFKKKqYuUemTolc5iov3zEISst8FGmABujV7P
ut1zjlF+LVIVp7M5cfMqna337abYgWXBB7FIPJuRGqqmottYVhQ2elr+Q95vBQv3
eLa2jDQ=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:36 2023 by rpki-client on console.sobornost.net