Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/890D646A91B511ED8BA25C80C4F9AE02.roa
File: 890D646A91B511ED8BA25C80C4F9AE02.roa (raw, json)
Hash identifier: FQMMJ0QiizIinsNRLvflNl8T6EHcova2z48vbe5ZpNc=
Subject key identifier: E8:18:23:0C:53:E6:AB:41:A4:9F:7A:75:52:9D:B2:A2:07:47:D9:54
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 0556
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/890D646A91B511ED8BA25C80C4F9AE02.roa
Signing time: Sun 23 Jul 2023 09:40:50 +0000
ROA not before: Sun 23 Jul 2023 09:40:50 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 135341
IP address blocks: 103.162.50.0/24 maxlen: 24
103.162.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Jul 23 09:40:50 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=64bcf5a1-7610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:54:3d:23:2f:5b:ac:a8:40:60:b8:04:68:
aa:fb:40:9c:4b:a5:e3:b7:c8:9b:16:e7:dd:a0:fd:
a4:4b:d2:39:be:65:16:74:8d:dc:c2:91:8b:03:ce:
43:ae:e3:92:ab:9d:47:aa:08:41:0a:9c:af:3c:7c:
0c:91:36:2e:f5:7e:2d:ce:b6:67:10:60:57:d8:77:
67:f8:fd:37:39:7d:88:a1:6d:c4:ec:bd:f2:1b:6e:
73:6f:d0:ee:2b:e0:2a:63:34:75:19:b7:0f:3f:4f:
4a:ee:86:37:26:3e:cb:d1:48:f9:8b:21:d4:b6:01:
eb:94:8b:44:1d:91:74:72:28:72:4e:84:e9:17:35:
8b:94:73:85:0b:87:ea:b5:7f:b1:03:44:98:47:4b:
81:5f:1c:4c:db:fb:ba:38:91:8c:03:58:58:a3:58:
6a:8e:a9:1d:e4:c8:36:87:04:52:17:c7:49:13:4c:
ac:9f:ca:ac:01:96:ab:89:28:f5:44:0e:a3:6c:f2:
97:23:fa:bc:96:2a:76:e7:bb:b0:f0:2a:ec:35:a8:
cb:8a:23:71:f7:b7:e0:b8:a9:66:c4:e2:78:0d:18:
04:48:09:f4:16:34:db:c6:9b:4f:3a:fe:9f:88:73:
f2:38:8f:ef:86:9c:af:cf:40:24:1f:22:23:cd:5c:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:23:0C:53:E6:AB:41:A4:9F:7A:75:52:9D:B2:A2:07:47:D9:54
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/890D646A91B511ED8BA25C80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.50.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:54:1e:0b:e7:30:5b:cf:34:76:d9:7f:a7:e0:26:0b:ab:c7:
4a:65:f6:df:c2:3c:54:b8:c7:5e:ae:51:1d:4e:7a:e5:de:bf:
14:22:6c:37:b0:32:89:6c:27:4b:aa:53:07:a9:c8:0a:a2:e4:
82:67:ef:9c:cb:04:fe:d3:a8:7b:9b:77:cf:e5:6f:6d:a7:4c:
95:03:46:1e:e3:b8:f5:a7:b0:55:c8:82:4b:f2:4d:a9:27:6d:
66:0d:b6:1d:ec:a0:39:e3:96:83:99:c5:f6:0c:c6:4a:da:df:
da:ef:08:df:3f:2d:f7:3a:b2:69:24:a0:d3:b1:8d:c6:79:d4:
3b:2c:a9:50:c6:38:ef:a7:70:ee:62:72:50:69:0c:23:d5:b2:
17:80:98:97:39:d0:82:84:00:60:a7:24:5b:f5:28:4f:a1:5c:
13:12:34:c2:8d:ac:ee:5d:9a:9b:30:73:84:4a:a3:00:31:7d:
81:4d:bd:cd:7a:dd:be:93:54:20:09:36:f6:72:03:81:51:94:
d2:50:a0:45:f8:80:b2:50:4c:f7:cb:80:11:30:7f:6e:0d:05:
fd:4e:af:c6:8f:5e:e0:5d:91:7c:59:97:9c:3d:91:c1:7a:c2:
91:af:40:c7:10:9b:a5:a2:ed:0d:86:41:da:a0:f7:12:f0:ba:
f3:29:32:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 13:42:08 2023 by rpki-client on console-ams.rpki-client.org