Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/AA37A06EC8C011ED86D98D6BC4F9AE02.roa
File: AA37A06EC8C011ED86D98D6BC4F9AE02.roa (raw, json)
Hash identifier: vMkevz1ccGW4zN9flVU4BBszZTyovZ0If9J8I9RWPKs=
Subject key identifier: B1:CF:68:E4:AF:49:9D:40:40:7A:47:95:60:2B:08:F7:01:61:FC:2D
Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial: 07ED
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/AA37A06EC8C011ED86D98D6BC4F9AE02.roa
Signing time: Wed 22 Mar 2023 14:48:54 +0000
ROA not before: Wed 22 Mar 2023 14:48:54 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 149009
IP address blocks: 103.194.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Validity
Not Before: Mar 22 14:48:54 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=641b1555-a1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:ce:35:5a:36:e6:2f:b7:a9:97:26:7b:c1:
5f:1d:e8:76:55:9c:43:91:1d:54:00:97:4c:83:6a:
7d:83:ad:d2:44:b7:c5:9c:b7:a1:d3:c9:cc:bc:2f:
43:ac:32:28:29:47:8d:94:40:e0:fe:0d:ac:45:8d:
ac:b2:91:3d:30:af:83:96:2a:41:1f:99:91:bc:aa:
78:99:f1:e7:09:f8:96:42:fc:a8:58:33:1b:44:10:
1d:33:39:78:6d:5f:a1:81:52:20:ab:ef:dc:49:3d:
33:59:31:ef:37:19:21:3b:97:7c:ff:4d:0e:46:43:
75:e4:aa:2b:8c:75:22:24:26:b3:55:ed:5d:e6:6c:
a1:8a:d9:96:14:7b:b0:6b:05:62:a1:4f:40:55:df:
f5:a9:11:e9:5f:d4:d5:52:86:10:f6:93:ca:01:9b:
40:08:a1:a2:82:25:84:0e:89:41:d8:2a:32:b2:e2:
ec:ce:41:5b:0b:e5:a5:79:35:8d:1e:74:6a:98:a0:
bf:cd:ae:e4:37:ff:c9:ad:28:e7:17:f8:40:dc:ae:
f0:92:cc:3e:9c:b9:5e:34:9b:62:6a:1b:0d:d0:f1:
e2:63:9a:d3:1d:9b:11:6e:08:f1:39:a8:e6:80:3a:
17:08:f0:a1:62:10:95:cf:a1:82:c1:29:d1:43:3f:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:68:E4:AF:49:9D:40:40:7A:47:95:60:2B:08:F7:01:61:FC:2D
X509v3 Authority Key Identifier:
keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/AA37A06EC8C011ED86D98D6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.194.92.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d4:95:47:cc:51:94:31:c2:0c:4d:ca:f8:d5:61:4b:df:e3:
cd:1b:c8:69:af:1f:f3:12:be:28:d6:05:ed:34:dc:5d:0f:06:
b6:ad:41:3d:48:9c:03:bf:2b:5b:7c:c0:3c:df:bf:98:a9:a5:
a3:23:66:5d:73:1d:d4:16:db:a0:f0:16:66:76:ac:16:20:6d:
83:5f:b0:66:3e:72:c8:a1:06:fa:cc:df:70:d5:96:32:2c:aa:
d7:b1:03:1b:38:47:47:76:a5:4a:d4:48:34:6a:df:9a:2a:f4:
1a:de:3f:0c:dd:11:43:02:a6:73:b3:d3:65:3f:f4:4e:d3:d1:
5f:d7:bf:1c:92:1b:65:b7:5f:42:29:4b:9d:a0:d8:1a:f5:3e:
71:5c:8f:1a:ed:d9:4e:bd:65:75:d9:18:72:27:cd:bb:e5:ff:
f3:40:6d:d9:0e:97:05:37:c5:7b:5e:b6:b4:f0:0e:f8:1e:2b:
a9:1c:3d:03:8d:d4:e9:92:db:8d:a7:51:10:e6:b7:0f:83:a0:
a1:2e:ac:81:1c:e4:54:ac:ec:e2:76:a0:53:4b:aa:9e:b5:f6:
27:21:76:e7:b3:0a:a3:e0:62:a3:d8:84:18:76:cb:dc:ff:ac:
a8:e2:3f:d7:8f:bb:07:89:c2:53:e5:a6:8f:80:7a:6c:f1:61:
8c:6b:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:01 2023 by rpki-client on console-ams.rpki-client.org