Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/91A7F8F6118111EDB2110376C4F9AE02.roa
File: 91A7F8F6118111EDB2110376C4F9AE02.roa (raw, json)
Hash identifier: GNYE/szghJT+zC98r+gPJTZTIoUQxRs7S6tlpocD228=
Subject key identifier: 32:3B:4B:85:86:F0:18:AF:92:44:37:2B:80:E7:1A:F2:45:BA:11:E8
Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Certificate serial: 0B2B
Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/91A7F8F6118111EDB2110376C4F9AE02.roa
Signing time: Mon 01 Aug 2022 10:06:11 +0000
ROA not before: Mon 01 Aug 2022 10:06:11 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 138336
IP address blocks: 103.115.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2859 (0xb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Validity
Not Before: Aug 1 10:06:11 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62e7a593-f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:b3:8c:b0:75:8d:11:fc:e5:8b:49:92:fd:
e3:e8:41:6e:2a:a6:bf:29:04:29:3a:fc:5f:d3:99:
c7:52:1e:38:a1:de:19:b5:3e:7e:fc:23:61:d9:52:
e5:76:e0:5c:00:c0:cc:e5:c9:ca:c3:0a:de:66:d1:
5c:68:bb:b1:4a:92:92:d2:f2:3d:fa:fa:a4:71:6a:
53:e2:24:cf:6c:ec:e9:b6:46:9b:c3:cc:aa:f0:1c:
83:fc:bf:63:4e:00:d8:dc:f5:8f:6a:82:d0:dc:88:
a1:30:d6:a6:a2:ef:92:b0:ee:31:78:bd:60:ab:4d:
73:6e:fe:ff:ab:22:51:6f:08:36:33:f4:67:46:73:
2f:9f:1b:dd:14:ef:58:f0:e5:51:37:e1:7a:a1:65:
ac:7b:52:ee:d5:10:71:8a:a7:dd:ca:26:b1:6f:77:
9d:e3:f5:9e:67:ae:45:e7:70:0d:54:f5:f4:f1:85:
32:86:0e:9e:98:f2:aa:7b:04:a3:5d:33:e4:32:97:
ba:fd:fd:7b:86:2e:a8:4e:70:02:0f:90:d2:02:6b:
88:cc:75:df:a6:0b:8d:a6:89:46:9e:06:fb:69:00:
d5:7e:87:df:d0:15:fc:a1:4e:08:c8:f6:a6:78:f9:
39:5e:0d:4b:02:b8:f5:2c:fa:14:a9:d9:a3:f1:b6:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:4B:85:86:F0:18:AF:92:44:37:2B:80:E7:1A:F2:45:BA:11:E8
X509v3 Authority Key Identifier:
keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/91A7F8F6118111EDB2110376C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:19:04:e3:9b:35:5e:f1:cf:58:22:3b:6d:19:16:b3:68:4e:
2c:8a:e0:c2:dd:d9:43:4a:54:17:62:9f:15:2c:ce:9c:ef:57:
94:27:f1:03:4b:9a:f4:d8:b6:9d:b0:28:86:91:73:eb:d2:1a:
2c:fa:57:6c:db:e5:f4:26:95:a5:e6:43:3a:19:c1:18:43:eb:
a7:32:42:e3:10:53:01:b8:9f:a0:19:95:a2:d6:a1:1b:b5:17:
df:c5:e9:a1:1c:ed:63:78:02:3b:c8:08:fe:06:2b:e5:a4:58:
2c:d1:7c:75:25:c3:70:f9:51:83:c5:b7:8d:c2:f6:2c:f9:a8:
f7:69:25:f7:b5:3e:d9:45:19:6a:2f:86:c8:91:46:6a:07:c3:
ed:16:3d:55:67:6e:7a:64:36:94:ed:62:6f:e3:e8:ce:2e:dc:
72:4f:70:4e:3b:44:26:07:ba:42:da:0a:43:2a:4a:57:83:42:
cb:0b:08:41:82:41:30:2b:31:77:dd:ea:7d:b6:c1:15:14:5c:
9d:60:c9:d2:0a:27:8c:2f:90:f5:ee:59:72:3d:62:c9:6b:fc:
c1:b6:60:46:ef:51:74:35:ce:1a:dc:4e:2f:f9:74:68:34:39:
3b:88:f1:22:e5:34:7d:50:ae:5a:5f:d3:a5:c4:f2:a7:53:a5:
c6:68:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org