Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/AD34F9C8E38D11EDA7A5923FC4F9AE02.roa
File: AD34F9C8E38D11EDA7A5923FC4F9AE02.roa (raw, json)
Hash identifier: ooLb1Ic31DZbe9HR10XEpfCrd3mmIaq3kmPgODMoTVI=
Subject key identifier: 2E:59:AC:31:B5:A1:54:AA:30:63:B6:7E:4F:51:96:74:3C:46:F6:FC
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 0501
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/AD34F9C8E38D11EDA7A5923FC4F9AE02.roa
Signing time: Tue 25 Apr 2023 17:21:56 +0000
ROA not before: Tue 25 Apr 2023 17:21:56 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 150296
IP address blocks: 103.151.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Validity
Not Before: Apr 25 17:21:56 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64480c33-108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:44:3b:cd:9c:7c:c5:3f:04:d8:33:69:61:
7e:9f:36:92:4f:da:45:55:1f:99:a7:de:b9:98:7e:
f2:2f:c5:1e:b2:31:25:fc:e5:87:4e:6f:43:59:19:
13:e9:05:61:f5:dd:a5:e5:1f:40:1c:62:93:c1:70:
42:90:00:4a:53:95:50:93:ac:82:45:c8:8a:16:17:
25:9f:3e:69:8f:07:a2:92:fe:ac:5b:7d:11:a8:3a:
5b:10:55:9a:ca:a5:3b:a9:7e:46:c9:7f:6a:d2:d1:
a7:b5:72:02:79:e9:28:46:ad:a2:5c:ae:0a:cb:54:
90:57:13:76:7e:26:a3:64:b6:b9:80:b8:d0:31:5e:
2b:68:6b:d4:62:43:e3:27:fa:4f:6b:eb:8d:66:10:
4b:4d:ad:c1:03:ec:b1:7e:4e:86:c0:d8:8b:ac:2d:
70:b5:00:3b:a4:ff:6b:f5:7d:0c:81:cf:23:f7:b6:
b4:7c:85:80:1f:9e:c0:7f:7d:46:2e:fc:78:f4:50:
f8:6c:4c:60:45:23:da:ed:29:88:bf:1f:fc:6f:f9:
73:a6:29:34:b7:40:40:bc:64:c8:ff:fb:f6:9c:42:
57:b5:70:6f:eb:ea:b0:53:b2:63:16:b3:85:b9:75:
82:96:10:a4:91:66:49:a3:69:df:34:1d:2b:0a:3d:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:AC:31:B5:A1:54:AA:30:63:B6:7E:4F:51:96:74:3C:46:F6:FC
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/AD34F9C8E38D11EDA7A5923FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f4:24:b7:0e:4c:70:bf:0c:12:2e:b4:d0:31:44:ef:2a:bc:
1c:d8:98:d9:32:55:96:8a:22:2e:f6:d8:35:0c:9f:21:74:94:
89:bd:2a:77:69:44:ac:95:ce:26:f2:99:92:44:a9:56:2a:9c:
40:14:d1:23:fb:e4:d2:19:87:e2:f0:6b:fa:74:b6:a2:4f:36:
10:2f:1c:67:7d:13:32:86:9a:7d:c8:3b:cf:fa:dc:54:04:3f:
bd:6e:86:78:d7:86:bf:03:6e:df:d8:94:93:5b:14:ff:a1:67:
68:d3:c9:b2:d8:40:d3:01:68:7a:3e:48:88:40:91:a4:da:82:
0d:ed:c6:d9:68:75:23:37:27:d9:f8:b5:43:4c:01:47:14:40:
56:14:5f:9a:f4:77:ee:2c:09:5c:05:82:62:5c:56:27:2a:9a:
89:e2:1d:bd:3b:d9:30:67:f5:5a:08:70:a1:26:69:10:64:a2:
b4:0f:36:48:3b:cf:f6:bb:b9:f1:14:81:f1:96:57:5d:4e:a2:
48:8c:56:c5:2a:75:cc:8c:bd:da:15:2d:0f:93:bc:06:bc:91:
07:57:37:e7:d8:ba:b1:ea:56:ff:a2:d3:7e:42:62:52:c3:99:
ad:8a:e7:5e:79:3e:28:db:f2:09:7c:77:03:57:68:37:07:ff:
c1:90:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org