Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/6921CF92CC4811EDB852D03DC4F9AE02.roa
File: 6921CF92CC4811EDB852D03DC4F9AE02.roa (raw, json)
Hash identifier: 5PocypFCxaeN2x7yOPe1/c1+Qw7+ZgZDALQf43jEcTM=
Subject key identifier: 34:A7:D0:B4:C8:5A:A2:55:B0:A5:37:5F:6D:99:C6:94:45:B6:7F:D4
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 02
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/6921CF92CC4811EDB852D03DC4F9AE02.roa
Signing time: Mon 27 Mar 2023 02:38:09 +0000
ROA not before: Mon 27 Mar 2023 02:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151048
IP address blocks: 103.121.6.0/24 maxlen: 24
103.121.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Mar 27 02:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64210191-dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8a:0f:e7:b7:f2:60:bc:48:16:84:bf:a1:ae:
bd:2c:df:65:2b:2e:1f:e3:12:a7:7d:84:38:1c:71:
e2:bd:8b:82:84:07:46:37:e5:a7:f5:48:c7:e4:8f:
bf:9f:e0:b9:20:19:e1:5a:3b:c8:cf:ea:7a:22:69:
18:50:a6:c2:ab:88:12:2f:a9:64:c1:cb:09:af:00:
f7:3c:64:61:18:dc:19:72:e7:9f:97:20:03:66:d0:
b1:e1:ea:02:9e:d2:ce:b3:70:34:ab:ba:bf:46:d8:
ea:9b:cc:5f:0a:92:a3:36:5c:ee:3e:e4:7a:1b:fa:
74:14:68:ef:8d:f2:f1:97:62:64:21:1b:e2:95:cc:
dd:1b:4a:4a:48:4d:01:4c:cb:8b:a0:ac:ec:65:c9:
cd:39:3e:82:97:ea:0b:a8:48:29:f8:7f:80:25:16:
2f:74:81:4d:e7:f0:d3:33:27:72:52:bc:cc:d1:ed:
07:7f:a7:dd:3a:b3:7d:91:94:1d:b9:74:dd:38:c0:
e1:7a:2a:28:b3:15:85:f9:4f:ff:1b:77:5e:61:2c:
ea:16:2d:24:e2:ae:87:3f:52:a5:ec:9b:42:17:97:
c1:c5:dd:fa:2d:32:a3:90:b0:40:11:af:c8:7d:2c:
0c:e8:64:b2:d6:d8:41:42:a7:5a:90:d7:52:3a:ac:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A7:D0:B4:C8:5A:A2:55:B0:A5:37:5F:6D:99:C6:94:45:B6:7F:D4
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/6921CF92CC4811EDB852D03DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.6.0/23
Signature Algorithm: sha256WithRSAEncryption
85:57:5c:cc:42:71:68:ab:61:d9:3c:cf:e2:79:24:d1:05:5b:
eb:2f:b9:df:d8:86:cf:41:1d:9c:be:d2:5e:3c:fd:ce:f4:40:
cc:14:4f:04:3e:e9:0f:83:98:1c:fb:b1:bc:f7:70:1f:7c:ea:
20:09:31:28:4c:93:85:c9:e7:f3:b4:b1:50:b2:93:56:a7:74:
e8:78:09:cd:58:9c:09:7a:34:0e:de:60:39:40:9c:be:84:49:
75:97:cb:86:5f:4f:6c:eb:a9:aa:9b:dd:6f:eb:d7:33:4c:99:
73:50:c4:48:9b:91:c4:db:79:23:ef:66:80:52:32:4d:8c:9f:
9b:a9:e7:65:6f:c0:c2:ba:20:6d:88:03:6b:d7:3d:a8:25:fd:
87:a5:73:aa:e6:c7:4b:db:94:72:13:80:56:03:1d:aa:1c:3b:
24:02:87:12:40:2d:38:c3:d6:e5:a4:88:1f:60:b6:f9:7b:fe:
f9:c2:a6:bd:ea:2d:0e:6c:ee:b5:b0:7c:49:80:03:29:b0:ce:
81:bc:06:d0:2f:0b:69:d7:2b:23:a4:86:09:5c:30:7e:58:d3:
51:5d:c0:81:ff:fd:82:48:ef:be:4c:41:43:af:21:43:f3:62:
a3:8a:a0:fa:61:bd:6d:2f:64:63:2f:b7:7a:c0:21:ed:7e:47:
25:f8:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-ams.rpki-client.org