Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/AC817E8EE38D11EDA7A5923FC4F9AE02.roa
File: AC817E8EE38D11EDA7A5923FC4F9AE02.roa (raw, json)
Hash identifier: nzEhQy3/9CBsVWmNM2FDaXGPYt86m8Bso35c6bDhmmI=
Subject key identifier: 9F:F5:03:C9:B8:90:F2:05:24:6D:4E:5A:7F:FB:59:17:74:94:AD:E4
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 0500
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/AC817E8EE38D11EDA7A5923FC4F9AE02.roa
Signing time: Tue 25 Apr 2023 17:21:55 +0000
ROA not before: Tue 25 Apr 2023 17:21:54 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 148996
IP address blocks: 103.151.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Validity
Not Before: Apr 25 17:21:54 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64480c32-8ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:0a:62:27:ab:67:47:f0:a6:35:ef:c2:ac:
d2:84:03:6f:44:59:de:f4:10:5e:7d:88:2f:83:2f:
4f:18:58:c0:39:15:1a:b9:ff:8c:e0:30:df:ee:59:
ba:22:d9:56:38:97:a9:54:83:71:2f:2e:af:3f:8e:
4b:1b:7e:23:ba:fd:6b:06:e6:6a:22:55:d4:98:f7:
5d:44:c6:96:ff:13:f3:cd:62:82:3f:73:85:53:9b:
0a:82:bd:ef:d4:d1:75:55:0b:bc:d3:b6:60:9b:b6:
ee:39:f9:f1:20:2f:89:07:98:02:39:c4:27:7e:46:
5d:e6:43:02:21:ad:5f:c8:21:7f:f5:86:a4:e6:c5:
fb:6a:38:29:82:ef:90:2f:26:a7:66:a4:94:4c:aa:
a0:15:df:e3:c9:b6:b3:e4:dc:7d:05:80:37:7c:53:
ac:5d:ff:cd:84:9f:ec:5f:d9:ee:9f:cf:75:29:1a:
c9:d9:47:c2:aa:df:98:e6:89:b4:83:8c:ba:f9:89:
2e:14:77:07:3f:f6:04:68:b8:e5:21:e7:58:79:07:
97:79:a8:81:8b:e2:39:45:81:b1:65:fe:2b:0d:6b:
1c:5b:da:2e:62:31:f8:52:2b:93:5b:37:56:63:1b:
c5:de:5c:4d:bc:cb:8f:28:3d:2b:94:85:85:bd:4b:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:03:C9:B8:90:F2:05:24:6D:4E:5A:7F:FB:59:17:74:94:AD:E4
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/AC817E8EE38D11EDA7A5923FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ef:17:19:17:16:79:9b:a1:02:87:45:aa:6c:16:b5:00:2a:
f2:3a:eb:b9:8c:f7:14:53:68:15:a5:a0:9d:f8:f1:63:aa:cd:
15:05:cf:e9:19:52:0c:51:90:37:35:d7:75:7e:6d:b0:00:60:
c7:c1:3c:0e:a4:53:14:a5:f6:93:e4:b8:7c:6d:89:66:27:3c:
18:38:15:cb:2d:3a:73:67:f5:1b:77:5d:dd:4b:4d:a2:ed:74:
5b:6b:23:09:0a:14:16:a0:40:d3:9f:e8:9c:79:29:8f:d0:bc:
e5:06:06:e6:8c:65:bd:85:1d:e8:cb:65:19:51:c9:10:af:eb:
e1:36:3a:df:1d:01:58:63:0f:e7:d9:1a:20:b4:39:0f:00:33:
26:97:7a:7d:b3:b1:1d:f5:49:bd:6e:98:f3:79:5e:0e:cd:b9:
57:f4:08:ed:ea:aa:b3:7d:a4:a3:fd:d3:c8:5a:e5:9d:c4:56:
56:97:b2:9a:05:dd:c2:d2:29:2a:6a:61:fb:85:a9:16:02:35:
14:a1:d9:ab:79:81:55:d6:d1:e5:22:10:4f:1d:87:07:2c:8c:
cb:14:4a:bb:2c:2c:09:58:b4:77:81:31:84:48:7e:b8:20:54:
86:48:a4:68:3b:4c:62:f9:ec:42:52:5c:05:3a:9c:9f:fe:d1:
89:b4:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org