Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9A4C6EEC74AE11EEBB62C70DC4F9AE02.roa
File: 9A4C6EEC74AE11EEBB62C70DC4F9AE02.roa (raw, json)
Hash identifier: I+SgqGBTtS6o/Xmimhqe8zs9NKQhccGe8e077WdMZWU=
Subject key identifier: 35:1D:BD:C8:89:CD:07:BA:1D:87:F6:FC:62:23:34:C6:5F:3E:2C:6E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 405D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9A4C6EEC74AE11EEBB62C70DC4F9AE02.roa
Signing time: Thu 02 Nov 2023 16:10:07 +0000
ROA not before: Thu 02 Nov 2023 16:10:07 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 131353
IP address blocks: 45.117.80.0/22 maxlen: 22
45.117.176.0/24 maxlen: 24
45.117.178.0/24 maxlen: 24
103.28.36.0/22 maxlen: 22
103.57.208.0/24 maxlen: 24
103.57.209.0/24 maxlen: 24
103.57.210.0/24 maxlen: 24
103.57.211.0/24 maxlen: 24
103.101.160.0/24 maxlen: 24
103.101.161.0/24 maxlen: 24
103.101.162.0/24 maxlen: 24
103.101.163.0/24 maxlen: 24
103.124.92.0/22 maxlen: 24
103.159.50.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16477 (0x405d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Nov 2 16:10:07 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6543c9de-4049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:5f:14:58:dd:35:2a:62:e2:04:83:8a:fe:
d7:68:cf:24:fa:b6:1e:fe:e4:f4:10:93:3b:0a:71:
23:33:95:ba:b7:f6:e9:20:ac:b9:c5:d8:fb:e3:f1:
49:e4:c0:16:ab:d6:5c:82:22:ef:9c:f1:20:f8:6a:
b4:48:71:c3:b5:af:22:ba:81:b4:ae:e4:f7:65:57:
12:f3:05:de:1e:33:3b:ae:00:66:bc:c4:21:4f:23:
d7:14:02:f8:1a:9e:ae:61:9d:7b:94:e5:b4:d2:93:
66:40:c6:98:c9:2f:cd:e6:d0:85:34:a2:30:45:d7:
3d:26:5f:41:4a:da:6c:e6:4e:7b:1e:fb:a0:22:0c:
0d:dd:7b:fb:1d:76:11:2a:9c:30:a5:5c:70:fe:32:
cb:80:b6:dd:a6:df:36:2f:90:f6:d8:88:7a:c8:c1:
21:8d:33:91:51:67:ab:ae:ed:93:c5:66:d8:6d:8a:
a4:d0:fa:43:62:db:71:33:3f:e7:78:b4:f1:eb:4f:
5c:20:cb:7f:a4:72:c1:80:d1:85:3c:a4:4f:11:50:
64:a4:69:80:ce:1e:38:5b:68:84:6b:49:ff:87:03:
04:4d:1d:29:63:db:8c:4e:2f:42:da:7a:3f:2e:5a:
8d:82:71:7d:1b:3c:f0:d3:1c:cb:82:a9:42:b1:3a:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:BD:C8:89:CD:07:BA:1D:87:F6:FC:62:23:34:C6:5F:3E:2C:6E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9A4C6EEC74AE11EEBB62C70DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.80.0/22
45.117.176.0/24
45.117.178.0/24
103.28.36.0/22
103.57.208.0/22
103.101.160.0/22
103.124.92.0/22
103.159.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:5b:03:b7:d1:4a:df:77:5b:98:5b:2f:31:e2:23:54:58:ab:
af:1d:f0:e9:fa:bf:65:cd:f9:3f:5a:63:69:43:cd:96:7d:29:
e9:4b:c3:2a:13:8a:bf:37:91:02:98:4e:a3:74:c5:9a:40:06:
30:3e:83:ae:77:e0:d4:6e:82:48:07:bd:96:f3:08:2e:45:bf:
48:9e:13:74:29:01:fe:85:b5:46:bc:71:03:de:47:cf:b0:68:
7f:48:6a:94:e8:66:ee:c8:ee:fd:53:5a:f3:19:e6:18:fe:0c:
84:b8:f9:73:74:b0:75:23:ab:c6:5f:13:f7:8a:52:49:8e:9d:
f6:77:1a:52:d3:37:11:ec:1d:25:c5:4b:b9:03:af:c8:31:df:
65:3d:5e:f0:6f:f9:98:49:0c:8d:2b:f5:de:35:2f:a5:18:9f:
69:6b:dd:c1:f7:4f:fc:7c:06:92:86:b7:07:61:de:94:1a:d7:
45:6b:34:b7:e7:77:b3:8b:80:24:8e:41:03:61:b4:89:41:40:
f4:c5:6c:0b:4d:05:ec:b2:05:8b:9c:4f:ee:26:35:c7:e1:15:
5e:b0:7c:e9:55:21:82:16:c8:51:b7:9d:6c:f5:ea:4e:39:99:
ab:14:90:99:c3:b0:5d:b1:09:da:f3:98:3a:08:77:e4:b9:3b:
e2:76:b0:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 9 16:22:13 2023 by rpki-client on console-ams.rpki-client.org