Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/FCD914DCA55211EE97FDA21DC4F9AE02.roa
File: FCD914DCA55211EE97FDA21DC4F9AE02.roa (raw, json)
Hash identifier: Zj5/+T2GtHLnXdM+sCBgeg+K9Nbb9R0+ShGzIHIjCn8=
Subject key identifier: FD:56:E5:4C:6B:25:7E:E2:03:2E:97:F9:18:56:38:BA:9B:3C:50:8F
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 66
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/FCD914DCA55211EE97FDA21DC4F9AE02.roa
Signing time: Thu 28 Dec 2023 07:30:35 +0000
ROA not before: Thu 28 Dec 2023 07:30:35 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 139493
IP address blocks: 103.237.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Dec 28 07:30:35 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=658d241a-9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:94:cf:c2:2e:b8:02:6c:38:93:f7:d7:d2:
6c:52:ae:e5:9a:b8:85:a6:71:3e:6b:9b:93:f1:61:
45:44:4d:e6:f4:be:ff:11:8d:df:29:70:1f:63:30:
07:03:0d:5b:f0:8e:82:0c:60:7a:be:e9:7f:03:81:
3c:5e:57:1e:24:ef:44:33:1d:ea:83:0e:20:3e:a7:
21:f2:90:dc:22:5f:92:6c:a0:9b:3f:56:80:03:ce:
f9:5f:b4:92:c5:dc:35:d0:c1:e9:61:5c:6d:ca:34:
c3:85:b3:e7:02:a6:2e:7a:fd:f2:23:33:68:a9:9d:
c5:5a:bc:18:d2:5f:6b:f7:55:83:d3:c4:1b:9e:78:
ec:73:86:4b:f5:64:74:9f:6e:89:b0:f4:3f:9b:05:
5e:53:b5:4b:c9:1c:01:34:45:67:06:cb:df:df:7b:
98:8b:53:ba:1b:a1:ea:22:9c:d8:5a:b3:d7:1d:6d:
95:a9:2c:fb:84:ec:bf:d1:fd:13:d9:3d:ea:bf:a6:
bb:b2:9d:5d:ce:c2:94:41:70:32:59:5c:2d:ac:e3:
b8:fa:42:a7:08:58:56:0d:ec:a6:e7:29:04:27:a2:
22:02:6b:0b:c1:f7:e4:2d:65:48:b0:54:69:cf:4e:
3b:b1:d5:aa:c0:91:0d:33:14:d6:fd:8e:ef:cd:e8:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:56:E5:4C:6B:25:7E:E2:03:2E:97:F9:18:56:38:BA:9B:3C:50:8F
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/FCD914DCA55211EE97FDA21DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.115.0/24
Signature Algorithm: sha256WithRSAEncryption
77:97:41:9b:a8:17:0b:26:99:b3:89:f1:87:5e:cf:11:c7:e8:
17:fe:05:86:66:88:8e:bd:7c:9b:48:6f:89:7a:48:4f:bf:6b:
c2:d5:10:a0:5f:5c:09:68:46:56:e3:09:6a:7e:fe:11:8e:27:
ca:8f:eb:0d:7e:e6:0f:65:68:d3:a4:31:cc:bd:c1:92:21:86:
b1:ca:43:69:b4:7f:89:72:d4:10:5f:62:81:73:8f:52:ca:13:
83:50:c8:eb:9b:05:62:f6:52:c2:1e:d0:76:c7:54:b6:84:f1:
cb:65:71:f1:58:8d:17:b8:7b:1c:5c:a1:d7:c5:60:21:0d:77:
c1:48:b7:b1:01:cb:17:0e:64:f7:d8:73:bc:c4:7d:cb:2d:21:
65:7f:31:4d:7c:14:bb:83:83:ee:29:16:e4:ea:d0:75:c4:c3:
f8:f2:b9:06:e6:dd:56:4e:b8:e4:af:ce:cd:2a:cf:fc:dd:88:
fa:84:be:4e:76:e4:81:6b:30:37:e8:f9:a4:70:24:92:26:69:
43:92:c1:38:7c:be:c2:ea:32:21:a1:c0:9b:e6:2e:16:91:64:
c4:de:49:b0:4a:32:a7:76:15:5a:4b:19:fe:a7:56:92:dd:1e:
ac:5d:08:b4:d7:31:ec:1a:47:4b:08:bb:f2:90:f1:37:27:cf:
47:94:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:52:40 2024 by rpki-client on console-ams.rpki-client.org