Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/7D2A9ADE671F11ED91297D0EC4F9AE02.roa
File: 7D2A9ADE671F11ED91297D0EC4F9AE02.roa (raw, json)
Hash identifier: guLcARe4v7Z+JeE5jUr+UxXAENZPPlau/QREmcLrI6o=
Subject key identifier: 4E:4B:1F:6A:9E:F7:0D:6F:F5:22:D2:31:BC:67:A8:60:C6:30:E8:81
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 338A
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/7D2A9ADE671F11ED91297D0EC4F9AE02.roa
Signing time: Wed 18 Oct 2023 03:08:42 +0000
ROA not before: Wed 18 Oct 2023 03:08:42 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9304
IP address blocks: 103.247.231.0/24 maxlen: 24
112.137.16.0/24 maxlen: 24
114.134.80.0/21 maxlen: 21
114.134.80.0/24 maxlen: 24
114.134.81.0/24 maxlen: 24
114.134.82.0/23 maxlen: 23
114.134.82.0/24 maxlen: 24
114.134.84.0/24 maxlen: 24
114.134.86.0/24 maxlen: 24
175.100.192.0/20 maxlen: 20
175.100.192.0/24 maxlen: 24
175.100.193.0/24 maxlen: 24
175.100.194.0/24 maxlen: 24
175.100.195.0/24 maxlen: 24
175.100.196.0/24 maxlen: 24
175.100.197.0/24 maxlen: 24
175.100.198.0/24 maxlen: 24
175.100.199.0/24 maxlen: 24
175.100.200.0/24 maxlen: 24
175.100.206.0/24 maxlen: 24
2403:5000::/32 maxlen: 32
2403:5000:165::/48 maxlen: 48
2403:5000:171::/48 maxlen: 48
2403:5000:188::/48 maxlen: 48
2403:5000:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 09:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13194 (0x338a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Oct 18 03:08:42 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=652f4c3a-b0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:90:19:c7:60:cc:cb:8e:42:fd:20:36:e0:
78:bf:cc:3e:73:f6:89:c8:1f:2a:54:32:97:4d:2f:
3a:f2:c5:b4:78:00:1d:fe:93:a0:be:2a:86:0f:bc:
74:8f:77:8e:c8:7d:75:30:f0:5f:1f:3f:c6:01:5a:
69:91:b1:78:42:ed:86:d4:d2:7e:55:a4:58:aa:af:
20:7a:cf:7d:33:c6:79:43:c4:47:13:58:7e:af:e4:
a4:c9:8f:b4:4d:a4:bf:75:1d:34:40:02:d9:00:b7:
57:eb:90:70:1c:43:0d:51:5c:c0:03:70:5f:52:06:
7a:d1:b1:fe:bc:a9:16:c8:a9:d6:bf:2a:64:38:61:
c9:5a:8a:06:80:73:b2:34:92:82:37:68:3a:75:b7:
bd:fb:8d:3a:d2:ae:f6:89:88:b6:2a:de:cc:03:66:
1a:de:82:ea:8f:d5:30:26:91:c9:a6:b0:19:7c:70:
59:c5:03:ec:9f:b4:04:91:49:69:0a:21:ab:40:a1:
52:87:ba:f0:ba:41:37:e9:38:59:26:c6:75:14:df:
16:3d:cf:51:bb:91:24:c5:50:e3:d1:4f:6b:f4:ee:
43:8d:18:6e:2d:64:1c:b7:c6:4f:42:4c:ce:e4:d0:
29:6a:96:80:f1:16:0a:17:bd:29:3a:11:67:af:bb:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:1F:6A:9E:F7:0D:6F:F5:22:D2:31:BC:67:A8:60:C6:30:E8:81
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/7D2A9ADE671F11ED91297D0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.231.0/24
112.137.16.0/24
114.134.80.0/21
175.100.192.0/20
IPv6:
2403:5000::/32
Signature Algorithm: sha256WithRSAEncryption
86:b2:13:46:d1:42:fc:5f:c4:a6:b6:2f:32:87:ff:a2:6c:f2:
02:d4:51:38:a8:0d:f3:f6:b6:f1:eb:d1:f7:3f:ed:37:5a:32:
90:d0:84:95:9c:12:16:51:bf:53:cb:11:d8:e2:25:25:8a:a3:
6a:60:f1:48:1c:dc:1f:80:92:38:88:5a:ab:c9:b5:40:69:79:
71:06:22:2e:fb:24:a9:87:56:8a:03:35:4d:df:7d:29:f2:f3:
c0:71:4a:c6:74:36:1e:72:07:44:4c:b4:77:9f:51:59:d7:de:
b0:49:55:55:ee:63:9c:ca:50:4a:a6:33:da:44:99:2a:da:98:
50:00:64:5e:7d:6b:d2:0a:a9:1c:df:1c:e4:5f:b8:09:31:fd:
8b:a7:a7:f9:88:4d:c2:37:5b:f4:dc:e4:ee:4f:18:eb:66:86:
10:55:84:47:85:2f:c3:8e:5d:49:7f:8e:bb:db:d0:f7:7b:70:
65:66:93:3e:e3:d8:33:af:70:ee:9b:08:f6:59:ff:d8:bb:9a:
01:58:4a:76:88:cc:f0:93:7f:2e:16:30:fd:48:52:71:85:4c:
43:3d:e6:0c:d7:65:1d:22:3c:91:b7:38:98:85:ec:74:8d:30:
58:c8:b0:ca:93:88:43:d6:33:00:6d:79:86:57:0d:6c:f0:af:
64:db:33:bb
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICM4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5
MkE1MkExN0MwHhcNMjMxMDE4MDMwODQyWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJmNGMzYS1iMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUCQGcdgzMuOQv0gNuB4v8w+c/aJyB8qVDKXTS868sW0eAAd/pOgviqGD7x0
j3eOyH11MPBfHz/GAVppkbF4Qu2G1NJ+VaRYqq8ges99M8Z5Q8RHE1h+r+SkyY+0
TaS/dR00QALZALdX65BwHEMNUVzAA3BfUgZ60bH+vKkWyKnWvypkOGHJWooGgHOy
NJKCN2g6dbe9+4060q72iYi2Kt7MA2Ya3oLqj9UwJpHJprAZfHBZxQPsn7QEkUlp
CiGrQKFSh7rwukE36ThZJsZ1FN8WPc9Ru5EkxVDj0U9r9O5DjRhuLWQct8ZPQkzO
5NApapaA8RYKF70pOhFnr7uK7wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFE5LH2qe
9w1v9SLSMbxnqGDGMOiBMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE
OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM5NUMvQkIzNDE3QzAxRDk2MTFFMkI4QkI4MjdGMDhCMDJDRDIvN0QyQTlBREU2
NzFGMTFFRDkxMjk3RDBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBABn9+cDBABwiRADBANyhlADBASvZMAwDQQCAAIwBwMFACQD
UAAwDQYJKoZIhvcNAQELBQADggEBAIayE0bRQvxfxKa2LzKH/6Js8gLUUTioDfP2
tvHr0fc/7TdaMpDQhJWcEhZRv1PLEdjiJSWKo2pg8Ugc3B+AkjiIWqvJtUBpeXEG
Ii77JKmHVooDNU3ffSny88BxSsZ0Nh5yB0RMtHefUVnX3rBJVVXuY5zKUEqmM9pE
mSramFAAZF59a9IKqRzfHORfuAkx/Yunp/mITcI3W/Tc5O5PGOtmhhBVhEeFL8OO
XUl/jrvb0Pd7cGVmkz7j2DOvcO6bCPZZ/9i7mgFYSnaIzPCTfy4WMP1IUnGFTEM9
5gzXZR0iPJG3OJiF7HSNMFjIsMqTiEPWMwBteYZXDWzwr2TbM7s=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:03 2024 by rpki-client on console.sobornost.net