Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E56C0DFED3E311EDB0E7CA45C4F9AE02.roa
File: E56C0DFED3E311EDB0E7CA45C4F9AE02.roa (raw, json)
Hash identifier: YtYSUG8yHnV+jV0WaJdTw9w91jgYiPDbqDCa1oRZlEg=
Subject key identifier: F1:D8:73:AD:50:C5:B7:13:60:C5:3A:AA:2B:8B:12:61:24:59:46:EC
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 078A
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E56C0DFED3E311EDB0E7CA45C4F9AE02.roa
Signing time: Thu 06 Apr 2023 22:39:40 +0000
ROA not before: Thu 06 Apr 2023 22:39:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212953
IP address blocks: 103.112.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Apr 6 22:39:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642f4a2b-2421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4e:00:d3:21:81:63:a6:2f:88:9f:d2:be:7b:
6a:cd:41:b4:95:b1:e6:10:d2:0e:8c:62:10:9a:90:
62:b0:7d:03:4a:24:45:15:ea:c0:8e:5e:ff:78:8e:
56:d5:83:21:a9:eb:62:e1:09:97:56:60:33:ed:2b:
2a:d1:51:9b:f7:7d:91:ef:0c:2d:79:3b:b2:94:1b:
9b:6a:ba:67:df:13:93:f7:d0:9f:3f:a3:82:36:20:
2d:99:84:1a:f7:eb:87:fc:5b:25:32:04:bd:53:42:
97:12:10:8b:42:6f:6b:25:6d:74:d8:bd:1d:50:77:
50:c2:5e:87:cd:91:27:55:d9:cd:20:f3:a1:f5:7f:
ea:c0:67:80:24:89:0a:4f:ea:a9:af:14:98:43:b5:
81:38:05:59:8a:31:f8:65:9c:fb:8c:85:23:68:57:
44:c8:ed:0a:cb:d5:11:87:a2:54:f9:06:45:ba:fd:
30:54:28:18:c4:2d:5b:4a:8e:20:b3:4a:ec:43:65:
da:92:8f:f7:a4:24:57:80:83:de:f0:bc:6f:aa:b1:
87:b4:65:e3:02:24:b0:9e:52:a0:07:df:ee:c8:00:
ef:61:7a:fa:84:6e:90:39:ef:fa:b9:8d:02:01:00:
b8:7d:b4:9a:fb:27:5a:7e:52:42:5e:15:9f:10:5f:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:73:AD:50:C5:B7:13:60:C5:3A:AA:2B:8B:12:61:24:59:46:EC
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/E56C0DFED3E311EDB0E7CA45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.1.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e1:53:c1:ba:2c:63:c7:24:a2:dd:d6:bd:eb:66:33:df:93:
ac:cf:7d:d4:87:d8:c6:b9:91:cb:6b:72:2b:5d:29:ff:0d:4a:
f4:7a:ff:5c:32:ef:ed:53:b9:b5:ad:f1:0e:6f:3e:9b:91:68:
04:99:49:26:95:fd:4b:4b:06:c8:cb:72:f6:17:a6:84:5b:d7:
ba:cb:ef:eb:a7:17:49:49:41:e7:2d:ae:48:cf:95:ec:e0:0f:
93:3b:55:0b:db:ff:f4:4e:6b:4e:4d:5b:1a:37:e0:af:ac:62:
a4:e7:b6:81:70:eb:16:3b:5f:96:dc:3a:c6:f9:82:c2:66:0b:
7d:17:f9:c8:ef:69:f3:99:81:d4:03:2c:13:e8:34:80:46:15:
e7:82:c7:45:9a:6d:05:21:cd:7d:11:59:47:4e:42:d0:b7:8b:
43:71:0d:57:a3:9d:f0:44:ec:dd:06:a8:27:f3:e3:1f:4c:c9:
08:8a:10:ac:b2:41:13:81:c0:f6:b9:57:a0:10:ec:63:56:b6:
88:d8:87:48:63:2b:55:f2:9e:8d:d0:32:24:cd:a6:74:fa:49:
73:d1:6d:2e:46:04:c8:ca:3e:2d:6e:b6:3f:35:a0:1e:9f:e3:
50:03:87:1b:a9:ad:5f:ca:49:7e:7d:82:1f:a3:e5:3c:82:65:
67:1b:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org