Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/6D9063222D1011E8ABD4FA58C4F9AE02.roa
File: 6D9063222D1011E8ABD4FA58C4F9AE02.roa (raw, json)
Hash identifier: KIzH7ocj33ffm4N06Aqf+246fKIzEapgo9ppp7yagdE=
Subject key identifier: DA:1C:83:4C:9C:30:FB:F5:7C:08:28:B0:6C:FB:AD:CE:61:3A:97:31
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 1503
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/6D9063222D1011E8ABD4FA58C4F9AE02.roa
Signing time: Wed 08 Feb 2023 17:44:16 +0000
ROA not before: Wed 08 Feb 2023 17:44:16 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 136970
IP address blocks: 103.107.236.0/22 maxlen: 22
103.107.236.0/24 maxlen: 24
103.107.237.0/24 maxlen: 24
103.107.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5379 (0x1503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Validity
Not Before: Feb 8 17:44:16 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63e3df70-f9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:bc:bd:8b:cc:73:9c:94:5a:be:65:b9:11:
db:14:09:27:e0:14:70:90:f6:06:d0:b5:ba:53:95:
39:f9:b6:41:03:6e:31:a5:9c:d9:dd:41:77:d0:79:
a1:3f:bd:40:45:f8:7d:41:c8:c4:ca:6b:3b:ab:58:
c6:50:e9:cc:c4:95:14:41:f5:00:3a:af:7c:0d:21:
7a:f5:45:09:93:b4:10:8a:51:04:60:12:a0:aa:b4:
6e:b9:64:cb:1f:1d:63:34:59:d7:29:3b:af:40:11:
84:dc:74:ea:a3:12:8b:4d:ac:e1:0a:ff:d8:eb:6e:
b9:f4:de:0a:2c:02:1f:98:92:9b:6c:98:00:f4:47:
c5:4d:2e:d3:29:db:1a:0a:35:b3:09:2f:6c:ab:8a:
21:46:ba:34:30:b4:fc:70:2e:e3:dd:8e:ae:8d:4c:
40:12:6b:64:16:f9:7a:a0:fd:d3:05:69:ff:b0:ab:
71:1b:1e:57:eb:31:a6:af:e6:f8:58:8c:c0:2f:84:
9a:03:b7:5f:38:c8:1d:ef:3c:d8:2d:88:99:35:30:
41:81:44:bb:a6:b0:7e:ab:b4:7c:42:80:48:ec:7e:
31:f6:ac:fd:99:e4:e7:7d:db:39:bc:d4:30:de:9f:
2c:3f:65:02:b5:8d:6f:1a:80:82:e5:58:f7:34:bb:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1C:83:4C:9C:30:FB:F5:7C:08:28:B0:6C:FB:AD:CE:61:3A:97:31
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/6D9063222D1011E8ABD4FA58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.236.0/22
Signature Algorithm: sha256WithRSAEncryption
17:82:b9:46:76:89:29:63:b5:c1:71:cc:5c:c7:d7:e6:07:22:
57:e5:0b:e6:54:cf:fb:d0:2c:3d:28:c4:46:22:99:31:75:71:
3d:a5:7c:57:5c:21:0f:6f:b8:d1:ad:c1:c8:6b:1a:b8:bd:09:
63:5f:0d:dd:b6:ad:98:7b:84:7b:08:aa:41:a8:46:6b:2d:ee:
aa:87:d3:4b:f4:b7:63:8a:ca:0d:e1:53:6f:30:d4:ba:5e:12:
01:0d:31:bc:c4:10:e9:ea:f4:d2:df:37:a7:1d:09:26:d7:7c:
0f:5e:27:35:9b:f8:0d:f0:1a:9a:ff:df:cb:32:c4:07:3c:58:
03:6b:88:17:19:b2:c0:51:2e:7b:24:f5:a8:26:00:63:31:0b:
d6:03:06:0f:75:15:95:14:e1:f3:f5:78:c7:7f:4d:cf:8a:fd:
39:ff:7e:20:cc:3c:4a:43:5c:13:a3:4a:c1:55:25:8d:b7:2f:
8a:04:d3:68:1a:f4:fa:bb:82:02:00:95:68:66:af:1a:df:bf:
91:94:f7:bf:86:ec:be:66:34:de:61:58:55:3c:46:61:15:45:
87:5f:64:5b:69:14:7c:a7:68:33:d3:6b:11:97:fd:c4:96:46:
84:19:ed:4a:9d:5b:6c:73:44:e4:15:2d:59:ec:68:ed:e0:aa:
02:3d:6c:cb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICFQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw
QUVEREJCNkIwHhcNMjMwMjA4MTc0NDE2WhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2UzZGY3MC1mOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydi8vYvMc5yUWr5luRHbFAkn4BRwkPYG0LW6U5U5+bZBA24xpZzZ3UF30Hmh
P71ARfh9QcjEyms7q1jGUOnMxJUUQfUAOq98DSF69UUJk7QQilEEYBKgqrRuuWTL
Hx1jNFnXKTuvQBGE3HTqoxKLTazhCv/Y62659N4KLAIfmJKbbJgA9EfFTS7TKdsa
CjWzCS9sq4ohRro0MLT8cC7j3Y6ujUxAEmtkFvl6oP3TBWn/sKtxGx5X6zGmr+b4
WIzAL4SaA7dfOMgd7zzYLYiZNTBBgUS7prB+q7R8QoBI7H4x9qz9meTnfds5vNQw
3p8sP2UCtY1vGoCC5Vj3NLuZ6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNocg0yc
MPv1fAgosGz7rc5hOpcxMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE
MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY1QTkvMDBCNzE1MUNGRDA4MTFFN0E0MjhGRjBGQzRGOUFFMDIvNkQ5MDYzMjIy
RDEwMTFFOEFCRDRGQTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJna+wwDQYJKoZIhvcNAQELBQADggEBABeCuUZ2iSljtcFx
zFzH1+YHIlflC+ZUz/vQLD0oxEYimTF1cT2lfFdcIQ9vuNGtwchrGri9CWNfDd22
rZh7hHsIqkGoRmst7qqH00v0t2OKyg3hU28w1LpeEgENMbzEEOnq9NLfN6cdCSbX
fA9eJzWb+A3wGpr/38syxAc8WANriBcZssBRLnsk9agmAGMxC9YDBg91FZUU4fP1
eMd/Tc+K/Tn/fiDMPEpDXBOjSsFVJY23L4oE02ga9Pq7ggIAlWhmrxrfv5GU97+G
7L5mNN5hWFU8RmEVRYdfZFtpFHynaDPTaxGX/cSWRoQZ7UqdW2xzROQVLVnsaO3g
qgI9bMs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:24 2023 by rpki-client on console.sobornost.net