Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/A794EFFEEE4211EDAC5C4E7AC4F9AE02.roa
File: A794EFFEEE4211EDAC5C4E7AC4F9AE02.roa (raw, json)
Hash identifier: 7da1AqW5i+d7N6Yl53p24QLWgyHJE3rrbqWuXABUDzw=
Subject key identifier: 31:F4:30:6D:6A:AB:C5:7A:B0:D6:D3:CB:9A:FE:93:4F:E5:31:75:3A
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 0456
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/A794EFFEEE4211EDAC5C4E7AC4F9AE02.roa
Signing time: Sat 03 Jun 2023 02:40:50 +0000
ROA not before: Sat 03 Jun 2023 02:40:50 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.151.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Jun 3 02:40:50 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647aa831-6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:cb:69:7b:e6:81:f5:fa:e0:56:80:72:3a:
41:2b:4a:1d:7a:03:2d:02:ad:fc:67:f4:4b:60:d2:
f9:62:cc:e5:26:39:f7:8b:29:29:2d:33:44:34:16:
09:d3:86:98:63:65:ea:1f:ab:90:9b:ea:45:7c:30:
28:85:9a:1b:34:2f:d2:af:b5:2d:3d:29:59:ad:df:
1d:75:ef:67:30:35:cb:83:b7:b2:54:8b:a6:d5:4b:
8f:88:5c:11:4a:2f:7c:78:0f:99:80:8d:74:94:d8:
e7:8c:24:5d:f5:e8:26:7c:f9:56:2e:33:ae:50:ba:
de:7d:f9:16:9b:2e:b6:b5:3a:42:f6:d2:f6:aa:9a:
5b:f6:35:36:2e:41:71:0b:f2:f5:6d:24:b2:a7:a7:
84:21:f1:6a:6e:07:d5:cd:21:cb:dd:e7:17:7c:bf:
12:d8:a4:fe:39:88:3c:4c:8d:a9:29:5a:92:b8:0f:
16:36:e8:37:c2:66:3f:ac:56:9d:67:a3:88:d8:7f:
ac:a7:5e:a7:55:00:48:46:8a:23:c9:20:28:79:6e:
c2:c0:13:c2:5f:ed:4b:1d:5e:25:af:0e:33:f3:1e:
5f:24:0c:dd:a8:47:0a:24:c3:08:c2:fd:e6:01:91:
a9:73:80:ed:db:cb:94:de:49:a5:f8:5c:18:19:eb:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:30:6D:6A:AB:C5:7A:B0:D6:D3:CB:9A:FE:93:4F:E5:31:75:3A
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/A794EFFEEE4211EDAC5C4E7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.42.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:2f:84:6c:2c:8d:f9:e7:63:6a:b2:1c:f9:7e:bc:f0:5f:f0:
76:90:39:83:80:3d:f9:0f:89:5d:bf:72:b3:c1:fe:00:83:a5:
91:98:0a:98:73:3e:4c:92:b5:e4:c1:d1:0b:e9:26:34:35:00:
f6:c4:65:61:e1:eb:e6:a0:16:5d:33:01:01:ec:dc:1e:8a:fe:
e3:9c:9f:95:16:3b:c4:1e:58:65:16:7b:6d:fc:4e:38:0d:84:
f2:17:d4:e9:6e:2b:8c:b5:fe:4e:75:04:d4:45:ca:45:75:b4:
e7:c8:69:0d:c8:ee:15:7b:7c:62:7b:04:02:b9:57:c9:71:d0:
fd:ba:1d:d6:5c:80:62:44:3a:26:a4:ba:70:83:36:1a:a9:0a:
4e:0f:f1:cf:60:9a:40:1e:50:22:05:74:62:02:84:75:0d:ca:
6d:91:22:f3:90:06:31:2d:b9:5e:54:6d:58:af:e0:44:3e:a3:
56:7f:e6:45:6b:d6:19:21:94:38:f4:a4:01:49:63:d8:72:20:
89:5b:f8:1d:24:22:51:e9:c3:11:86:7b:af:4f:ed:9e:f8:74:
bc:2a:10:99:d2:44:5a:fd:13:c2:b5:fb:8e:fa:ed:ec:e7:cf:
ac:8f:45:f5:ae:30:0a:a3:e4:b4:9c:df:c6:a0:42:fd:ca:eb:
05:3a:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 11:39:19 2023 by rpki-client on console-fra.rpki-client.org