Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/7E073238494211ECA6E0E21BC4F9AE02.roa
File: 7E073238494211ECA6E0E21BC4F9AE02.roa (raw, json)
Hash identifier: JRS5Mn8Uad+uDOqnUCULTIhyXXDac3Z8o9Xo0RTMT7k=
Subject key identifier: 67:DC:B7:E7:D1:51:18:28:80:95:98:8B:4C:F8:BE:10:DA:D8:58:CC
Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial: 0586
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/7E073238494211ECA6E0E21BC4F9AE02.roa
Signing time: Wed 01 Mar 2023 00:51:06 +0000
ROA not before: Wed 01 Mar 2023 00:51:06 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 30058
IP address blocks: 103.160.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Validity
Not Before: Mar 1 00:51:06 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63fea179-0558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:5c:e3:28:f1:96:df:c1:f6:d9:6c:b6:1a:
d2:79:c2:ab:ef:99:9f:bb:01:c5:b0:c5:a0:70:d0:
63:7b:98:38:1d:04:7b:30:93:bf:a0:6c:22:9b:56:
5a:90:d5:6e:d2:6f:0f:91:ab:57:2c:d0:fe:fd:b2:
1e:98:40:51:a3:cd:dd:17:b7:f3:a1:3f:dc:c2:99:
7d:f9:e6:23:8c:22:6c:48:56:8b:8e:00:89:c5:a8:
fc:98:c4:d1:a3:61:dd:05:8b:81:e4:06:5e:4a:6a:
25:c7:19:fd:a6:e8:2a:ea:54:b9:a9:48:b0:3a:4b:
dd:88:8a:18:84:24:5f:41:e3:17:4e:23:55:56:61:
00:dd:01:a6:5d:42:d5:3f:ef:bb:a0:86:c8:0d:7e:
6f:98:0e:94:82:54:b5:3d:02:32:61:b8:50:74:d9:
70:eb:77:2b:53:19:09:98:7b:54:ae:c1:65:5e:a0:
8e:7e:17:47:0a:9e:1c:4f:75:a2:5b:1f:6b:8c:fd:
0d:bc:82:d7:cd:43:0d:ce:70:6c:40:e5:bb:1e:ad:
01:39:f0:a9:86:0e:ad:fd:af:20:b5:e8:8d:1f:c6:
54:2d:e9:f8:60:8e:9f:00:0f:0f:b2:61:28:8f:fc:
f2:13:33:fb:14:ce:85:28:c7:0d:71:9a:8f:ba:b0:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:B7:E7:D1:51:18:28:80:95:98:8B:4C:F8:BE:10:DA:D8:58:CC
X509v3 Authority Key Identifier:
keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/7E073238494211ECA6E0E21BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4f:1c:fc:ae:42:05:4f:6f:0f:69:6a:74:b4:10:2f:04:2e:
fd:5d:62:fd:88:d3:e4:fd:12:fc:42:61:2a:4b:b7:65:97:9b:
0c:5d:68:45:e7:f9:e7:ab:f9:a4:37:14:64:52:7b:69:e6:4b:
53:c7:be:80:1c:95:b6:65:45:73:11:96:e4:cb:4d:f8:90:5e:
81:18:0b:56:a6:5e:f8:ff:2d:22:3a:06:39:60:8a:65:80:84:
28:30:36:40:1b:39:db:71:86:57:a4:bf:12:a0:31:f2:ec:26:
a4:1a:4b:6c:f3:aa:70:53:2a:53:56:0d:f9:44:1a:a5:f7:cc:
6b:a6:e5:8d:55:3d:bc:4a:ee:a6:ae:5a:4a:dd:12:4a:35:f7:
31:3b:01:54:42:6a:7d:c0:ae:5b:91:90:4c:22:e0:d4:aa:b9:
ce:56:58:27:38:74:77:dd:c7:b2:35:1a:56:58:73:1f:14:af:
27:4e:b9:7c:00:9c:5b:ce:f7:4a:59:69:09:2a:80:ba:3c:68:
01:dc:12:85:c8:73:c3:37:d7:f9:83:83:ea:80:92:37:5b:df:
9e:e3:49:c3:6f:33:41:40:96:fa:be:b1:32:7f:b4:ba:8c:6f:
d7:e5:4c:98:0b:1b:88:1e:e9:cc:11:a3:de:02:58:8b:1d:b8:
fb:b9:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 02:27:43 2023 by rpki-client on console-ams.rpki-client.org