Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/3555741E252911EDBEF5C985C4F9AE02.roa
File: 3555741E252911EDBEF5C985C4F9AE02.roa (raw, json)
Hash identifier: 3rFuUC91FzLAfIr1EXOo3OGHFNsoxnb4BpScidifL24=
Subject key identifier: 78:E0:78:36:6E:EA:D9:93:EF:99:F2:49:DE:F9:EB:B7:67:12:3A:39
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 04
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/3555741E252911EDBEF5C985C4F9AE02.roa
Signing time: Fri 26 Aug 2022 10:24:04 +0000
ROA not before: Fri 26 Aug 2022 10:24:04 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 139300
IP address blocks: 103.205.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Aug 26 10:24:04 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63089f44-c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:73:70:5c:f0:61:88:25:3e:a2:12:c3:43:
8a:68:47:90:1f:d9:46:35:bd:a5:9a:58:6f:68:b5:
fa:cd:b3:2d:b9:59:dc:a7:1d:19:1f:74:ac:a0:17:
34:f0:e8:34:5a:81:8b:9a:10:22:aa:38:f2:a3:5f:
c1:da:c1:ad:f4:f4:e3:d8:fd:d0:8f:22:df:97:d2:
40:7f:b5:e8:92:32:31:e1:83:d7:ef:68:e0:2e:d2:
e1:26:29:8c:fe:09:38:77:45:64:bd:f5:9d:84:12:
1b:8e:a3:2b:26:cd:a4:bf:f1:5d:19:28:51:6c:e4:
9e:5f:0e:5b:9b:f5:f7:ea:b4:22:bd:a3:aa:81:2e:
07:7d:08:cb:1b:6d:b7:3e:3d:12:db:9b:09:69:50:
e2:8d:83:69:a4:64:b8:d7:27:09:d2:d9:9c:3c:ef:
93:95:71:fd:de:f8:d4:10:83:9d:75:63:29:8f:f5:
5c:46:cd:c0:cf:40:97:42:50:90:5c:dc:af:b9:a3:
56:c1:7d:c1:a0:9a:da:5c:b3:1a:5f:aa:f8:ef:15:
ec:08:ce:57:81:94:da:5f:91:94:d2:aa:99:bd:c5:
9e:be:90:24:f8:0a:e3:c7:17:de:8f:05:a3:b8:ef:
f1:4a:8f:66:20:c5:d6:42:16:4e:bb:c9:46:08:2d:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:78:36:6E:EA:D9:93:EF:99:F2:49:DE:F9:EB:B7:67:12:3A:39
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/3555741E252911EDBEF5C985C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:88:cb:ad:71:cc:dd:11:4a:1a:6f:58:2a:4b:58:e4:27:6c:
78:3d:8c:b1:00:96:a3:ee:a1:3c:e6:7b:bf:b2:9d:00:95:39:
36:24:46:b1:96:df:9e:03:e1:ff:e5:74:2d:f5:4f:18:ea:63:
f5:2e:77:c1:07:d9:73:af:75:0c:02:4b:cc:f1:63:55:a3:33:
cb:34:ed:74:18:ce:f0:0c:1a:0d:b3:68:30:cf:c7:4a:c0:ae:
95:c5:a9:99:6b:b9:1d:8c:4e:09:5b:50:48:d2:ad:bc:77:19:
6f:a4:3d:d1:4e:1b:a9:bb:9d:1a:29:e0:6b:68:2b:d4:64:f7:
57:e0:c4:55:c7:5b:d8:60:b7:dd:3d:1b:1b:5c:bd:a0:6e:6d:
52:d7:25:81:c7:29:43:18:10:29:6c:37:5e:f7:90:7d:8f:8d:
ab:66:a8:21:6f:97:72:5a:06:3b:3e:f6:c5:22:c9:b7:a7:9f:
4b:8f:4b:af:c5:74:d2:39:b8:1a:05:9a:c0:58:a4:04:63:ea:
2b:8e:cf:7c:01:b2:19:ea:cc:90:cd:54:36:9b:21:c7:e7:18:
e9:21:3e:46:7d:97:c3:d6:bd:e6:c5:3c:d4:6f:40:da:37:25:
4e:df:55:a9:cb:b5:65:4e:63:e2:67:a1:9b:7d:f2:3d:6b:9a:
68:35:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org