Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/A047040A55D611EBA17FDC4DC4F9AE02.roa
File: A047040A55D611EBA17FDC4DC4F9AE02.roa (raw, json)
Hash identifier: hoeP3jzeMq0tsnC6lBFs+PdZEh87zE9ACRSOROWFdG0=
Subject key identifier: B0:82:DF:34:DC:01:FE:64:63:00:49:90:CB:DC:8A:A0:0E:27:5B:8B
Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial: 0543
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/A047040A55D611EBA17FDC4DC4F9AE02.roa
Signing time: Thu 09 Feb 2023 00:50:33 +0000
ROA not before: Thu 09 Feb 2023 00:50:33 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134507
IP address blocks: 103.231.204.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Validity
Not Before: Feb 9 00:50:33 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63e44359-779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:3c:75:3c:c2:5f:a9:ea:5b:16:04:e6:82:
b5:b0:df:1e:8d:7d:d4:d1:75:c9:13:fd:53:c1:12:
b8:18:79:ea:b4:52:d2:73:8f:ef:7b:f6:99:b0:03:
5a:cc:ae:6e:8f:e4:41:43:df:da:d3:66:d6:74:32:
d7:77:7e:26:c1:5f:3d:6e:bf:04:c0:d8:be:4a:d3:
7a:cf:80:c6:f2:ee:25:cc:e1:c1:88:d5:21:ba:24:
22:f2:c8:3a:e9:ea:c8:f0:38:89:b4:35:03:c2:96:
d0:23:8b:9f:92:f1:80:8e:85:99:50:0e:1c:8f:d4:
84:a7:2d:6f:37:06:65:f9:92:ad:78:a5:e5:11:7a:
d3:67:11:0e:74:bb:44:de:d3:a0:83:48:3a:e8:41:
0f:e2:e8:0a:03:71:36:37:90:bd:5d:1a:b2:89:d9:
a2:dc:df:9e:7b:fc:6b:62:50:b0:9b:cb:5f:f2:9d:
6d:0a:4e:b1:f2:50:65:d6:42:65:1d:d4:90:c0:ae:
d9:54:9a:4c:5d:6c:21:fb:e1:36:e3:08:9f:76:91:
1f:3f:4e:c7:03:e6:3f:12:58:e7:e3:a3:58:c6:4e:
6d:b5:bd:e5:9a:64:48:e0:52:96:37:e2:29:8c:23:
94:c5:c0:0e:d4:a0:62:ed:38:bb:21:ee:45:22:88:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:DF:34:DC:01:FE:64:63:00:49:90:CB:DC:8A:A0:0E:27:5B:8B
X509v3 Authority Key Identifier:
keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/A047040A55D611EBA17FDC4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.204.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c9:0d:54:02:7f:04:aa:fd:62:58:63:d8:2f:a0:62:a6:5b:
ee:34:a5:c1:44:40:3f:8a:08:37:ca:15:0b:e3:ca:14:08:1a:
0e:7f:b7:b4:20:54:50:57:ef:f0:2a:54:5c:ef:d3:bc:5f:ec:
fd:2f:7f:88:19:e2:af:a4:01:ac:bc:48:ad:29:52:9d:9a:3d:
36:35:0f:6d:e7:6e:54:a4:23:14:34:a1:9b:20:10:6f:af:70:
8c:fa:63:d6:d2:53:32:be:08:bc:d4:88:03:02:9b:4f:9a:46:
5d:9e:7c:d6:a4:ec:88:38:1b:d5:9b:f7:8b:7c:6b:46:78:57:
18:32:a2:8b:95:41:6b:53:3e:72:e8:92:f1:6a:4c:71:38:5c:
ae:e0:a2:68:c3:9e:78:36:c0:59:fe:f6:7c:ea:f1:97:f1:34:
cf:0e:f3:06:a7:92:cb:7e:e3:b3:56:7d:b0:26:6d:c6:eb:ec:
9c:99:f9:f1:ce:16:93:d4:c8:12:42:23:18:f0:e2:1a:d4:cf:
0e:f6:34:b0:2d:2f:c0:53:80:12:c4:a6:3d:d2:87:6b:22:4f:
6e:f4:b4:a3:51:69:33:b3:c6:23:8f:41:3e:f9:d2:1e:c5:79:
32:73:0c:fc:d9:04:36:11:f3:d8:0b:78:d9:43:11:21:3b:28:
35:6d:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 04:33:00 2023 by rpki-client on console-fra.rpki-client.org