Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/DA7BBF94306B11EA828E5D32C4F9AE02.roa
File: DA7BBF94306B11EA828E5D32C4F9AE02.roa (raw, json)
Hash identifier: DOHm3F7wmrbDTEAsh3CSscEts9o9yphDj1jm9cdxQx8=
Subject key identifier: AB:07:87:E7:CE:8D:21:3E:42:D2:29:E7:C5:C2:86:70:8C:46:CD:A9
Certificate issuer: /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial: 0A12
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/DA7BBF94306B11EA828E5D32C4F9AE02.roa
Signing time: Fri 28 Jul 2023 19:56:34 +0000
ROA not before: Fri 28 Jul 2023 19:56:34 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 10137
IP address blocks: 103.92.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Validity
Not Before: Jul 28 19:56:34 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64c41d72-065d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:19:9e:19:65:2d:17:91:62:22:3d:76:8d:
e3:bc:f4:1a:10:b7:4a:3d:23:8d:5a:4f:71:fb:f5:
27:3c:35:fb:cb:1d:d1:0d:98:da:7b:18:37:3e:26:
69:a9:14:2c:5f:b6:07:19:df:5d:35:0f:98:11:65:
72:a9:b5:0b:3d:58:8b:e2:42:80:e5:e3:87:0b:bb:
55:b6:21:9f:38:2e:78:ce:21:43:cc:4d:a8:7a:ec:
a1:7e:d3:9d:9a:d3:08:f1:7a:81:e8:18:19:c2:f5:
65:ec:c6:45:7d:6d:4e:ca:bd:4c:67:52:d4:80:e2:
58:0f:06:b1:f7:f0:8d:94:21:5f:a2:38:05:7f:a5:
ce:27:49:14:7f:e9:cf:53:e8:c4:e2:04:76:65:4f:
6d:10:8e:6c:b6:a0:77:17:69:dc:7f:bb:fd:07:c2:
a4:06:dd:bb:47:1f:b9:ff:48:10:44:cc:2a:53:ae:
9a:22:b0:21:b0:e8:be:6b:bf:ff:7e:87:2d:06:f0:
21:88:44:82:71:28:2b:16:2f:a3:25:07:13:2c:46:
c2:de:ee:46:a3:5a:11:d7:00:bd:32:12:e4:36:e1:
e0:15:85:c2:1c:26:9d:3f:c3:53:e3:12:3d:04:07:
ee:05:2a:95:32:9f:41:a7:28:45:9c:03:e6:d3:75:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:87:E7:CE:8D:21:3E:42:D2:29:E7:C5:C2:86:70:8C:46:CD:A9
X509v3 Authority Key Identifier:
keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/DA7BBF94306B11EA828E5D32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.36.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:0b:8e:ac:12:43:f0:6e:b1:cb:81:8a:ed:eb:6f:81:b8:98:
45:78:5f:c5:81:39:e5:83:33:37:27:10:a4:77:bd:b5:fb:7d:
91:d2:79:8e:c9:6a:bd:d9:6a:e9:09:b6:9d:22:f7:34:b8:31:
47:7e:ae:f9:89:d8:8a:99:48:64:88:34:41:0f:ba:b8:eb:04:
1d:82:43:5c:39:bf:68:c3:32:87:af:2c:20:5a:57:28:19:bf:
d0:2d:da:c6:87:d9:9c:a9:cd:52:ed:ea:e9:2a:48:d5:eb:c3:
3e:d5:59:d8:d7:34:55:01:43:75:11:1e:13:87:3e:33:e2:46:
21:5a:ba:3b:7e:70:fa:2f:12:4d:20:0d:2b:b7:af:7c:18:50:
cd:d8:3a:94:e8:64:69:e0:09:27:63:82:20:ba:6a:96:1b:a3:
53:01:ca:b4:4c:6c:91:5d:12:12:e4:5c:17:45:48:8e:24:0d:
49:56:8c:8c:ec:6b:48:f2:6b:27:dd:fe:0c:d0:e2:13:e2:15:
0d:dd:98:b1:3f:42:09:9a:6e:cc:31:a6:9c:15:33:cd:e9:36:
ab:77:0b:89:45:01:c0:7d:0a:0c:ef:a5:25:a4:47:d9:ac:b0:
03:d5:bf:a7:11:ab:4b:66:2b:6b:5f:6d:24:54:3c:74:05:b7:
1a:31:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 09:02:40 2023 by rpki-client on console-fra.rpki-client.org