Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/B21B8DD6ECF711ECB10B0928C4F9AE02.roa
File: B21B8DD6ECF711ECB10B0928C4F9AE02.roa (raw, json)
Hash identifier: TUbCoLT7ZUyLqHMR6yZ6lGQBDRsCcd8B1SWj/590SAY=
Subject key identifier: 1C:01:2A:68:03:91:A6:03:31:0E:10:06:D8:71:42:E8:E4:24:C0:3D
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 033C
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/B21B8DD6ECF711ECB10B0928C4F9AE02.roa
Signing time: Sun 02 Oct 2022 03:22:27 +0000
ROA not before: Sun 02 Oct 2022 03:22:27 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 139043
IP address blocks: 103.123.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Oct 2 03:22:27 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=633903f3-a3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:e7:76:f3:5e:e6:62:7d:54:3a:ab:8e:74:
17:0a:24:11:fa:ed:47:55:e0:c6:ba:1e:0d:0c:44:
2a:e3:4a:ef:34:62:72:2b:17:86:43:1a:d4:d6:8d:
71:11:ed:4f:4b:56:34:60:bd:f0:3f:51:9f:f9:59:
1e:2e:58:48:2f:c9:5a:5e:a4:a1:3f:7f:3a:8f:b9:
34:b2:e2:7b:e7:07:7b:eb:ea:80:23:d5:4a:60:72:
04:8e:3f:28:0c:c4:1b:e5:c3:08:8f:bc:c2:e1:66:
0c:41:88:2e:0d:bf:6e:5a:0c:79:77:06:f9:4b:79:
6d:e5:6f:c6:74:9e:c9:97:8c:43:c1:0f:b8:37:7a:
11:d4:be:d2:d4:aa:01:89:a3:b8:01:c5:c5:ee:35:
21:02:fa:b5:a5:6b:85:76:ae:82:e1:76:70:c5:44:
91:55:8a:19:0a:60:34:96:0d:ca:6b:2f:0f:4f:aa:
b8:8c:dc:3f:db:af:d1:9f:e9:0d:e1:34:30:49:17:
c8:aa:4a:70:b7:b9:90:28:9a:fe:25:ac:69:16:2d:
49:e0:6d:0b:bf:b3:ec:7d:b3:b5:4b:30:a2:5f:f2:
43:2a:05:7e:d8:e1:1f:1f:7e:94:a3:f2:8c:66:80:
8d:4d:4b:a3:e6:1b:bd:ea:4e:82:f9:bc:47:8d:48:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:2A:68:03:91:A6:03:31:0E:10:06:D8:71:42:E8:E4:24:C0:3D
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/B21B8DD6ECF711ECB10B0928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d2:94:07:81:f6:0b:24:98:a2:95:5a:d3:09:09:9b:64:15:
bc:4a:6f:2b:cb:b9:b7:5a:9e:88:30:e9:8f:50:db:59:24:ae:
21:ef:31:54:40:bd:63:23:5c:79:de:1f:80:84:f6:bd:8d:19:
af:51:3b:e0:86:7d:1e:5a:40:dc:e9:0e:b6:ba:74:46:ea:fb:
4b:23:44:c8:69:10:c8:4d:f5:8c:57:b6:f3:2d:34:8b:2c:1c:
a8:d1:06:f0:ef:33:ca:3d:f4:9d:ed:bc:07:bc:b2:a0:a9:34:
a0:9f:9c:66:71:b2:86:0c:ca:9f:9d:bf:4e:89:14:74:1b:d4:
b2:f2:1f:25:da:29:10:d6:03:1c:78:96:83:9c:ac:4d:2d:dc:
c1:2b:e4:e8:e1:c4:77:43:4c:67:5e:07:0f:9c:cc:a7:1e:75:
bb:71:97:5c:2a:c7:74:89:4b:b6:ff:1b:a3:c4:36:20:5d:98:
0f:44:72:4d:6d:bb:fc:8a:47:aa:1b:51:e2:15:b8:82:df:e6:
16:41:f4:88:4c:9d:38:4a:ee:d0:87:2f:01:66:86:a7:f6:d3:
68:5e:5d:6b:0b:f3:c6:63:3f:a2:a2:cc:84:ff:c8:39:a0:78:
41:06:90:1f:df:ca:1f:82:c8:67:5d:df:00:ce:e0:8e:ad:c6:
ec:5f:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 20:04:39 2023 by rpki-client on console-ams.rpki-client.org