Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/7A8630AED33F11ED86A08735C4F9AE02.roa
File: 7A8630AED33F11ED86A08735C4F9AE02.roa (raw, json)
Hash identifier: BVG+zQmrztMKigWOOT39aVOI25eolg7JZYyt2WqEqDc=
Subject key identifier: CF:F2:EC:15:0B:BA:A3:18:2D:E5:EE:E2:53:13:7E:50:87:56:18:25
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 051D
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/7A8630AED33F11ED86A08735C4F9AE02.roa
Signing time: Tue 04 Apr 2023 23:21:51 +0000
ROA not before: Tue 04 Apr 2023 23:21:51 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 150178
IP address blocks: 103.162.50.0/23 maxlen: 23
103.162.50.0/24 maxlen: 24
103.162.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Apr 4 23:21:51 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=642cb10f-a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:a3:81:97:16:bf:35:89:a2:d9:09:44:65:
81:0b:09:0b:88:41:4a:3e:f7:ce:59:43:0c:83:ae:
2d:e3:2a:ac:96:ad:af:00:1d:60:be:45:b5:fa:7c:
7b:71:01:b6:f9:db:1b:7a:44:14:dd:72:e6:4a:72:
0e:76:76:5a:50:0f:e0:62:95:9c:78:d4:74:82:37:
13:40:11:5d:34:b5:64:00:5f:50:eb:5e:fe:97:c6:
86:8e:50:34:0e:86:71:8e:cc:fa:db:5c:43:90:01:
f3:3d:fb:af:bb:30:60:0c:97:bf:23:11:6f:58:ce:
58:b2:38:cb:fc:9d:c3:64:51:32:7f:f1:ce:66:d7:
81:23:7c:c5:27:0e:de:59:3e:1a:86:12:c1:fd:fa:
d3:f9:d8:46:72:3e:d2:84:99:56:c6:31:01:c8:e2:
f6:e1:75:a0:c1:d9:c1:d2:7b:dd:13:1e:f7:22:6b:
bf:35:6c:17:87:1c:d1:94:d3:70:10:51:d5:62:c6:
78:fa:43:2a:4c:c5:9f:7a:72:1f:b0:fb:0e:67:fa:
5f:24:7e:1a:c0:51:21:81:65:ff:0f:44:85:81:66:
c6:2e:33:5e:89:05:86:66:ea:20:d6:bd:18:76:06:
df:6e:60:0c:a1:5b:a0:14:0f:10:38:c0:b6:5a:a4:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:EC:15:0B:BA:A3:18:2D:E5:EE:E2:53:13:7E:50:87:56:18:25
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/7A8630AED33F11ED86A08735C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:55:b1:e1:45:d4:40:4b:68:4b:3a:97:0a:2d:77:74:0d:8c:
1a:52:a3:ba:77:a9:0a:60:b3:c0:ec:ee:d3:c4:c0:41:43:05:
cd:33:33:28:c9:fa:e8:16:d0:39:3c:b0:20:dc:c7:95:ae:f0:
a3:2b:61:67:be:e9:b1:11:2a:67:91:52:8b:09:3e:13:f5:f1:
2e:51:fa:b3:f9:ce:15:dd:37:33:fa:8e:1b:c8:32:c7:64:fc:
2d:d9:cf:55:e1:e9:c3:d5:ea:3c:f5:fa:46:fb:cd:98:33:bc:
32:e3:ca:3c:e4:35:08:7a:90:72:9a:28:66:27:72:ef:26:4c:
2e:bc:5f:af:47:ff:43:fa:c8:0b:99:d0:18:05:1d:7c:44:10:
8a:c1:d9:6b:1e:44:7a:d9:5c:08:a5:70:d0:21:6b:b6:2f:81:
65:1a:70:a8:48:94:0a:73:34:9f:8c:8f:92:f7:4a:a5:8f:f2:
fd:fc:1f:8a:15:6a:5c:ed:b4:96:06:7d:d6:11:c5:f7:f3:35:
10:8c:4a:96:a9:55:07:9a:d7:75:4b:46:5d:c1:d9:44:a8:91:
8c:49:25:25:17:f4:eb:2c:4b:6d:66:2c:e7:b3:c9:15:b3:a9:
96:da:f3:9d:f1:85:00:bd:68:0e:d8:4d:50:19:6c:72:a9:d2:
dd:27:45:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 13:32:36 2023 by rpki-client on console-fra.rpki-client.org