Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D9603F6F60C11EC9C44077CC4F9AE02.roa
File: 8D9603F6F60C11EC9C44077CC4F9AE02.roa (raw, json)
Hash identifier: Li5LzG+cDw+D2kjMj2qRhe2SyThaNJKY7V5vHM/aTfo=
Subject key identifier: EA:06:A6:5F:A4:3E:58:CC:3A:69:46:B5:CE:97:C1:3F:25:43:9B:36
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3AD3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D9603F6F60C11EC9C44077CC4F9AE02.roa
Signing time: Tue 11 Oct 2022 00:20:33 +0000
ROA not before: Tue 11 Oct 2022 00:20:33 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 135918
IP address blocks: 42.96.0.0/22 maxlen: 22
49.236.208.0/22 maxlen: 22
103.14.224.0/23 maxlen: 23
103.28.32.0/22 maxlen: 22
103.74.100.0/22 maxlen: 22
103.139.154.0/23 maxlen: 23
103.149.252.0/23 maxlen: 23
103.151.52.0/23 maxlen: 23
103.153.64.0/23 maxlen: 23
103.157.204.0/23 maxlen: 23
103.160.2.0/23 maxlen: 23
103.161.96.0/23 maxlen: 23
103.161.112.0/23 maxlen: 23
103.161.118.0/23 maxlen: 23
103.161.180.0/23 maxlen: 23
103.162.24.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 24
103.176.250.0/23 maxlen: 24
103.178.232.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.183.120.0/23 maxlen: 23
103.190.120.0/23 maxlen: 23
103.231.248.0/23 maxlen: 23
202.158.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15059 (0x3ad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 11 00:20:33 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6344b6d1-aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:77:a3:f1:00:09:d8:ed:cc:d9:8d:23:35:
95:8f:72:b0:66:5b:27:d1:5a:3a:50:16:2f:17:31:
8a:60:91:aa:d5:fc:5e:f9:8b:13:58:36:f5:a3:26:
f9:d8:0f:a0:e6:4e:3f:81:4b:21:7d:36:a4:11:78:
f1:90:52:38:b6:7e:01:ff:af:cb:63:83:ce:db:9e:
a0:c3:ac:e7:a6:93:a8:20:41:86:4f:79:0b:ab:22:
0d:22:a2:98:b8:be:2e:be:e1:cc:28:4e:2f:f7:07:
17:bc:4f:fc:45:1d:13:30:fb:c6:66:b6:ea:d4:ae:
d0:90:4f:bc:9a:a2:cc:57:5f:a6:fb:a4:49:54:e9:
28:0b:1e:a5:c7:b0:65:40:28:53:95:33:80:75:c4:
26:5d:0d:2e:20:1b:44:41:9d:08:3d:a9:72:ea:7e:
c2:70:b1:b6:e6:0d:bb:07:3f:4c:ca:1d:84:d6:c9:
69:79:70:f6:f5:5b:e6:52:9f:31:f1:34:fe:84:4a:
1e:a9:6e:47:d8:b5:8b:ca:47:be:98:9c:52:b5:6f:
2d:76:de:22:07:84:3f:44:d3:07:29:16:d4:82:d4:
a7:82:f1:7b:e1:ea:bb:9a:c8:9c:3c:01:eb:22:f3:
25:b4:09:e7:b7:ca:f5:78:9b:81:63:9d:8a:65:1d:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:A6:5F:A4:3E:58:CC:3A:69:46:B5:CE:97:C1:3F:25:43:9B:36
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D9603F6F60C11EC9C44077CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.0.0/22
49.236.208.0/22
103.14.224.0/23
103.28.32.0/22
103.74.100.0/22
103.139.154.0/23
103.149.252.0/23
103.151.52.0/23
103.153.64.0/23
103.157.204.0/23
103.160.2.0/23
103.161.96.0/23
103.161.112.0/23
103.161.118.0/23
103.161.180.0/23
103.162.24.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.178.232.0/23
103.180.138.0/23
103.183.120.0/23
103.190.120.0/23
103.231.248.0/23
202.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:0a:33:77:fb:45:10:e5:c5:56:ee:5c:83:68:a8:cc:a4:cd:
50:dd:a9:2c:07:65:dc:10:4b:d6:97:1e:99:8c:05:a5:4c:1c:
ce:4f:bf:50:5e:05:2c:de:3b:61:fa:ed:7d:24:e3:2e:39:c5:
a7:f5:2d:cd:6c:89:12:7f:ea:af:05:a4:ff:c5:99:1b:03:85:
a3:88:8e:0b:c4:77:32:1f:03:82:37:42:06:87:54:7c:59:44:
50:e5:fc:f8:a0:de:93:93:53:9a:45:2b:42:78:8f:9b:22:02:
1c:6f:a1:e3:aa:c0:db:f2:6a:0c:be:9a:9f:a7:37:5e:69:de:
55:82:5f:ab:0a:a6:2b:3c:df:85:63:3a:17:33:f6:40:93:3e:
2f:d1:e9:3a:c9:4a:3b:aa:81:c4:71:d3:a3:21:c8:74:f1:3b:
71:35:f7:da:3e:15:0b:f4:5f:b9:3a:df:f2:15:20:3b:14:19:
05:7c:d7:95:47:82:d0:5a:f1:49:53:da:53:05:df:d9:ec:5c:
3f:a1:f9:1b:11:a0:f4:5b:01:a4:19:c8:38:01:9e:30:1f:c0:
a4:96:0c:66:ab:fc:fc:77:22:0e:97:68:5d:98:0f:1c:a2:6b:
a2:1d:7c:fb:bb:06:e6:4b:c5:5c:72:8e:d7:e7:fe:53:a7:5a:
9d:6f:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org