Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/83A08FC6695111ECAD5B1E1BC4F9AE02.roa
File: 83A08FC6695111ECAD5B1E1BC4F9AE02.roa (raw, json)
Hash identifier: mH+YzQR6J+q1GVh+78zQZxTlVkqWszT67ifje+q5CSY=
Subject key identifier: D7:75:62:D6:11:ED:4B:3A:0A:B6:54:52:90:47:03:79:42:16:68:37
Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial: 05FC
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/83A08FC6695111ECAD5B1E1BC4F9AE02.roa
Signing time: Thu 20 Oct 2022 23:29:24 +0000
ROA not before: Thu 20 Oct 2022 23:29:24 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 58689
IP address blocks: 103.155.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Validity
Not Before: Oct 20 23:29:24 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6351d9d4-5c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:75:b4:39:e8:2d:4f:8a:43:ea:17:c5:6a:
4c:3d:15:b5:04:ce:1b:77:51:90:93:33:38:f2:ea:
38:8a:6c:96:08:18:ca:7f:64:37:ff:d9:86:50:c7:
3a:08:cf:f5:7e:1e:80:17:a7:dc:82:ca:05:c8:e0:
56:15:ed:ec:ce:45:d8:62:88:18:d1:88:aa:0d:65:
da:cb:2c:0a:13:6f:ba:2c:c3:35:c0:c9:0c:ea:ed:
26:74:0c:2f:49:29:8f:85:f6:67:1c:bf:1d:be:b9:
97:0e:b5:2b:0d:67:3e:8f:96:a3:a9:3f:df:60:79:
b9:89:6b:0e:26:5b:fd:0a:0a:ba:d9:21:db:df:5d:
59:27:fc:f4:31:ce:b3:71:5f:2a:14:39:94:07:9b:
33:94:66:3c:05:8c:c1:50:17:d0:0d:43:ab:a0:59:
7c:c4:f1:26:6d:48:22:e4:b4:0d:c4:3b:21:af:e4:
83:3b:0e:ac:6b:f0:9c:d5:eb:2c:52:26:74:7a:b9:
38:46:fd:99:53:98:f8:7f:58:54:10:c9:b5:e3:cd:
98:2c:44:45:90:b2:59:35:87:e2:ca:b9:dc:a9:4a:
06:34:14:3b:cf:8b:7e:4b:48:15:ef:dc:77:84:ec:
3e:78:0a:55:6a:83:2f:b2:53:3f:d5:35:b7:fc:21:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:62:D6:11:ED:4B:3A:0A:B6:54:52:90:47:03:79:42:16:68:37
X509v3 Authority Key Identifier:
keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/83A08FC6695111ECAD5B1E1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:90:32:e7:ea:4e:29:4d:3c:a1:6c:15:29:16:8e:d2:a3:32:
1f:7a:9c:e3:09:c9:d0:de:23:24:93:66:96:c6:93:d6:67:50:
33:b6:24:6d:5c:c1:29:ef:8b:24:10:fe:53:fb:81:e7:a5:b0:
35:f0:cd:4c:b3:c7:4d:16:d4:8e:73:08:2e:c2:f8:53:1b:54:
86:ad:12:3e:9e:64:c8:70:44:f8:ca:94:d9:38:3b:ed:e1:19:
65:9c:25:bc:7c:94:f1:53:16:dc:84:fa:41:02:52:a1:df:2d:
91:4b:84:5c:53:fd:15:61:df:a7:05:d3:a3:2a:70:e1:05:c5:
9d:b0:1e:dc:02:e1:81:a7:90:ac:93:24:ff:59:32:a0:42:19:
ba:87:c9:44:94:3d:cb:db:74:e6:8e:09:4e:75:44:ba:2c:37:
c7:0d:2e:5d:d8:e1:28:11:2d:f2:0c:b0:aa:0a:4e:f6:3c:b1:
00:42:30:7c:59:36:b5:1b:fd:47:29:a2:2e:36:de:b8:ce:ca:
13:20:b0:d6:d9:ef:ab:da:75:f1:75:44:e1:5e:4c:9a:47:17:
34:9b:08:e0:82:5c:16:e4:ca:88:9e:11:1e:9d:67:41:9c:08:
53:85:0c:db:7c:93:ec:b5:05:ed:d8:11:d4:67:87:04:bb:3a:
1e:7d:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org