Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55E3/2467F3E0E99911ED99DFEB58C4F9AE02/17AC8B3AE99D11ED97620551C4F9AE02.roa
File: 17AC8B3AE99D11ED97620551C4F9AE02.roa (raw, json)
Hash identifier: DxbC4XLvddhF/gJ+3HjJnkJqP1RPOx32Vj4AdTu85zQ=
Subject key identifier: 46:DF:3A:D1:6E:4D:42:51:A0:C7:59:BF:A3:75:41:5B:F9:97:53:41
Certificate issuer: /CN=A91C55E3/serialNumber=B735926E47BD25DAF59E0619CC14533C32B16F81
Certificate serial: 02
Authority key identifier: B7:35:92:6E:47:BD:25:DA:F5:9E:06:19:CC:14:53:3C:32:B1:6F:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzWSbke9Jdr1ngYZzBRTPDKxb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C55E3/2467F3E0E99911ED99DFEB58C4F9AE02/17AC8B3AE99D11ED97620551C4F9AE02.roa
Signing time: Wed 03 May 2023 10:27:24 +0000
ROA not before: Wed 03 May 2023 10:27:24 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 133499
IP address blocks: 103.119.108.0/24 maxlen: 24
103.119.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C55E3/serialNumber=B735926E47BD25DAF59E0619CC14533C32B16F81
Validity
Not Before: May 3 10:27:24 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6452370b-dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:d7:86:f4:e9:26:c0:a3:cf:d3:7a:6a:24:
6f:02:c9:83:94:ed:3b:16:a0:a0:3c:10:4e:9e:0b:
21:48:13:1b:cc:a6:44:f3:8d:08:12:58:e5:5b:76:
57:bc:c6:4a:88:f6:9e:c3:2d:59:a9:3c:43:4c:c9:
ed:c7:ae:81:0b:68:70:8a:3e:c3:04:3b:f1:1f:90:
f9:1f:00:b2:fb:95:da:20:4d:61:05:80:72:33:ff:
00:ff:d1:c1:3d:f2:91:fc:22:f1:1a:4f:27:7e:7e:
7f:c9:b9:a5:21:62:e3:25:3c:4d:25:e9:2d:6c:d3:
d1:2b:61:86:a7:89:46:30:d9:12:32:14:20:c0:2c:
0e:fd:b1:78:e8:1a:0e:89:58:7c:a5:18:05:58:1b:
5f:6b:73:6b:86:3d:50:2a:b7:5f:01:3f:30:80:cf:
8b:54:17:79:09:e8:64:a7:3e:7d:86:57:56:3e:73:
f6:30:bd:5e:56:66:2c:cc:28:67:e6:32:5c:c9:56:
02:1a:96:2a:5a:97:16:21:1d:d5:a6:ac:00:8a:ec:
45:8f:2f:19:49:bc:b4:0e:1a:88:c5:fe:c0:2e:3e:
0b:03:45:66:f0:17:48:c9:1e:9e:f5:c7:a0:e9:92:
66:3a:8a:9e:a0:4e:16:1e:1d:d4:53:42:0c:84:49:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:3A:D1:6E:4D:42:51:A0:C7:59:BF:A3:75:41:5B:F9:97:53:41
X509v3 Authority Key Identifier:
keyid:B7:35:92:6E:47:BD:25:DA:F5:9E:06:19:CC:14:53:3C:32:B1:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C55E3/2467F3E0E99911ED99DFEB58C4F9AE02/tzWSbke9Jdr1ngYZzBRTPDKxb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzWSbke9Jdr1ngYZzBRTPDKxb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55E3/2467F3E0E99911ED99DFEB58C4F9AE02/17AC8B3AE99D11ED97620551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.108.0/24
103.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b6:a9:4b:4f:48:01:8c:7c:a9:a3:6a:70:ed:ec:e4:b9:e9:
2c:c0:96:30:44:8c:79:43:61:c1:46:5b:d9:0c:2e:ab:34:88:
bc:64:58:77:9c:96:ec:2f:0b:7b:dc:b2:bd:28:31:9a:cd:80:
05:98:4e:45:da:38:5b:55:55:30:76:6b:d3:d8:c2:c7:d1:15:
c4:c7:aa:b2:e2:1d:2b:a8:b7:f5:13:71:b4:4b:58:e6:1c:71:
83:81:ae:e7:9c:b0:05:b9:3b:a7:48:21:91:2e:f7:e9:00:38:
3d:aa:23:3c:f2:2f:f5:35:b5:2f:d2:45:15:d3:e1:80:18:c4:
c4:71:b1:a6:a5:9d:21:d6:af:39:01:23:ed:0b:f9:da:7f:41:
b8:78:7a:c4:64:7a:9a:e4:a6:51:41:67:11:a8:9c:c9:51:57:
f8:7a:e2:1b:e8:f4:37:ce:36:3e:d8:51:20:e8:ba:8f:65:c7:
71:b0:3d:2a:f6:9a:c5:d8:e4:cc:62:f2:cb:87:8d:b7:30:4e:
ea:9b:36:f2:ec:92:f1:a2:14:3d:d3:dc:44:b2:56:8b:ea:5b:
43:cc:8d:76:93:91:f7:68:12:9e:48:c6:c8:41:d7:52:25:b9:
ac:ec:54:9c:d6:e9:1a:e4:f9:71:e8:dd:28:a4:56:d2:9d:41:
b5:ca:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 05:51:20 2023 by rpki-client on console-ams.rpki-client.org