Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/DA6EB454BB9C11EAA056C665C4F9AE02.roa
File: DA6EB454BB9C11EAA056C665C4F9AE02.roa (raw, json)
Hash identifier: MrLIjrYbym+7Y3GASKiBk/H/GTIS0bzouDAcQBF6PIk=
Subject key identifier: C0:FE:13:3B:4F:BE:26:20:E8:B0:F8:AA:ED:74:FD:96:E8:64:AD:7A
Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial: 0682
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/DA6EB454BB9C11EAA056C665C4F9AE02.roa
Signing time: Thu 25 Aug 2022 22:38:23 +0000
ROA not before: Thu 25 Aug 2022 22:38:23 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 64315
IP address blocks: 103.253.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Validity
Not Before: Aug 25 22:38:23 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6307f9de-9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:c7:7a:2e:5e:35:a8:3d:c1:73:31:50:18:
2b:89:b5:ca:63:e0:e0:e8:5a:22:7a:a2:7f:d1:a9:
b4:c2:d8:20:84:18:89:82:10:5a:00:af:87:6d:0c:
15:67:7a:eb:a4:33:83:1f:de:5e:bd:2e:6f:c4:b6:
38:2e:1c:1d:de:ed:0f:e6:cd:5a:8e:2d:0f:3a:d4:
79:90:2d:fd:a7:9d:ba:bc:e3:6b:be:46:f5:25:cf:
52:1a:40:34:64:d4:5d:06:85:f5:7a:ac:02:1b:dd:
0d:b7:6e:69:b6:4b:ff:85:0a:f9:50:ed:ea:4d:1c:
39:64:ac:c7:d4:cb:c9:55:ad:2c:6c:a3:b5:b6:cd:
aa:50:da:35:6d:77:69:79:ad:b5:75:0a:a6:a8:02:
71:1e:33:3b:de:25:20:34:2f:03:61:da:d3:26:da:
0c:a9:6b:44:e0:06:c9:6a:64:7b:cc:5a:c2:fc:2a:
d3:d9:4c:dc:69:96:93:80:f5:4d:56:fe:7f:0a:b2:
54:f9:4e:55:bc:38:b8:49:c3:36:4f:f6:90:8e:ae:
1e:f7:4c:f4:4d:a7:7d:99:c5:25:7f:f1:06:b1:0c:
31:24:80:2f:44:36:42:16:fe:61:7a:ea:ac:55:32:
55:52:66:41:87:0d:73:d4:aa:1a:7c:ab:57:40:d5:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:13:3B:4F:BE:26:20:E8:B0:F8:AA:ED:74:FD:96:E8:64:AD:7A
X509v3 Authority Key Identifier:
keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/DA6EB454BB9C11EAA056C665C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.253.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:89:cc:9a:60:0b:46:39:44:e8:23:db:db:36:bb:dc:f6:c5:
7d:fb:10:dd:50:67:ef:9a:93:b2:8b:44:f9:1d:87:d6:9b:cf:
aa:74:99:4f:95:16:32:67:15:59:ef:03:bd:07:a1:03:4d:ad:
4a:48:f5:cf:78:27:26:15:5b:8b:1e:9b:7e:fc:c9:53:4c:73:
4f:bd:7b:d3:29:7a:f5:d6:ad:0a:c8:f2:ca:be:45:41:ae:6e:
59:18:0c:2e:2d:78:00:c2:c1:43:c9:87:c1:97:ad:83:8a:68:
bd:66:83:cf:fb:3f:3e:87:f8:1b:32:70:08:97:92:42:0a:0f:
8a:ea:df:8f:8a:05:71:1e:69:33:05:b7:83:0d:0f:73:fa:b3:
42:e5:21:2b:53:3a:ad:8a:cd:48:22:74:06:73:cd:85:3c:09:
54:30:2d:80:a9:96:26:21:f9:ad:d2:06:b0:46:68:7b:5e:b0:
e1:05:ee:a6:77:4f:1d:fe:1a:94:73:5a:28:1f:56:e6:90:b3:
9d:86:95:80:cf:09:ab:b1:ed:1a:3b:6c:0f:a8:80:a0:86:f2:
f7:b5:cb:80:ee:f4:3d:f3:6c:cd:48:85:ed:87:ec:bd:17:ec:
f3:e1:43:c0:b7:b1:bc:85:64:fa:c1:ae:2b:48:88:a4:92:b9:
7c:d0:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org