Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/79AB20B8B93111ED99E8FA1FC4F9AE02.roa
File: 79AB20B8B93111ED99E8FA1FC4F9AE02.roa (raw, json)
Hash identifier: ahyeBylXqAXQ8PEUCW9tK2DB3Bro16xbQa8MAU/sK/4=
Subject key identifier: 5A:D1:E5:C5:2E:6E:37:DF:02:D8:AC:14:12:B8:85:6D:19:D6:3C:98
Certificate issuer: /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial: 02
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/79AB20B8B93111ED99E8FA1FC4F9AE02.roa
Signing time: Thu 02 Mar 2023 19:36:06 +0000
ROA not before: Thu 02 Mar 2023 19:36:06 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 1239
IP address blocks: 103.171.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Validity
Not Before: Mar 2 19:36:06 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6400faa6-5d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:1e:1a:a0:27:b1:b5:87:d6:54:3d:d3:26:
42:16:d0:5f:3f:e6:38:29:bd:1c:cf:41:d0:8d:54:
2c:a5:c3:9d:5e:13:a4:c5:d6:8c:a5:84:ff:07:4e:
78:ed:fd:68:09:9b:53:9b:86:43:7c:cd:90:5a:d4:
d2:2d:ad:61:6d:41:97:b9:46:d5:eb:d6:d6:a4:50:
58:9f:25:20:06:b6:33:90:de:13:9a:a0:c4:0a:0c:
53:05:31:ac:04:37:ab:30:da:e1:e0:22:d9:78:cf:
e1:89:0e:27:d9:88:24:6e:06:c7:97:ad:34:1c:76:
97:2d:de:33:8a:a0:12:45:7c:9f:c8:a2:ef:e3:f1:
d3:fd:35:5d:bd:55:bb:41:cf:11:c0:c0:a2:49:c2:
6d:39:7d:a0:01:8f:fa:91:0b:f3:20:fb:9d:b8:80:
b0:c5:5b:64:ec:4c:86:4e:e4:4c:62:2e:3d:c1:86:
4a:98:9c:ed:02:39:72:97:d6:9b:77:5a:44:b2:dc:
69:80:39:3c:91:c9:f7:6a:fd:c0:e6:82:54:d0:60:
69:4e:89:8d:c2:56:4c:c4:40:18:92:28:04:ff:05:
d3:32:92:49:a5:31:22:69:ad:83:ca:0c:1d:0a:44:
9e:ff:f7:88:d7:e0:32:b7:8b:b6:f0:d3:29:27:4a:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:E5:C5:2E:6E:37:DF:02:D8:AC:14:12:B8:85:6D:19:D6:3C:98
X509v3 Authority Key Identifier:
keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/79AB20B8B93111ED99E8FA1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.122.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5d:f1:ce:c0:78:8c:2c:1c:4b:20:0f:7f:0f:a1:88:57:27:
d1:87:0f:a7:c2:cf:16:c2:a7:77:33:de:4f:ac:49:1d:05:5c:
05:c7:6d:3c:39:38:cc:86:f7:f6:06:da:31:19:2a:eb:94:e9:
53:bc:34:80:fe:51:6d:36:81:b9:ff:97:e6:bd:41:98:e9:1d:
74:61:97:60:57:18:13:e1:30:05:56:c7:62:c2:ba:8e:d9:f7:
46:f6:e9:a5:e3:ed:70:f8:e4:9f:32:67:f1:19:3d:d9:90:90:
f6:63:a7:02:b1:ee:66:80:d1:fb:f6:c8:7f:be:5c:f8:d2:50:
28:eb:9e:ec:4f:31:08:d6:c7:aa:f4:e1:0d:e2:45:0d:f6:f2:
ed:a7:21:0f:9f:47:24:49:39:5f:52:f0:64:1d:18:ba:dc:cc:
3b:7a:62:08:c9:ca:01:64:ec:1c:1a:d7:91:42:bf:8c:bb:4d:
51:22:c9:b7:be:46:67:4e:8d:1f:24:05:fa:7a:a0:4d:31:a3:
b6:4d:71:73:9f:1e:90:b4:a7:e1:fd:4a:ce:a6:a4:9d:ff:01:
34:e0:9c:ba:d1:38:09:9f:4a:0d:0d:e9:d8:5c:74:81:a6:ec:
c1:2c:f5:ab:e0:c3:6b:24:b1:4f:22:79:57:e8:4b:5c:eb:ed:
45:33:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org