Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6447A868632911ECACBD2A34C4F9AE02.roa
File: 6447A868632911ECACBD2A34C4F9AE02.roa (raw, json)
Hash identifier: ejyPO9x09QOkUIoeExTCsWACFenXn3q8Btr5tkw5BI0=
Subject key identifier: 3F:AF:52:D3:0D:81:1F:37:F1:0D:D5:3B:13:17:0E:AA:3B:1C:79:C1
Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Certificate serial: 08B9
Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6447A868632911ECACBD2A34C4F9AE02.roa
Signing time: Sun 08 May 2022 20:46:40 +0000
ROA not before: Sun 08 May 2022 20:46:40 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 137434
IP address blocks: 103.138.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Validity
Not Before: May 8 20:46:40 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62782c30-4fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:9e:f1:7e:08:66:c4:7a:24:43:c4:0c:7b:
4e:07:3f:38:9e:cd:84:1c:ba:2a:d0:7b:11:13:a0:
48:77:e5:ae:41:ef:3b:7f:74:97:42:2e:9c:8f:60:
31:a2:52:de:28:fa:3b:3b:b2:63:70:2c:3e:55:9d:
bb:68:f9:56:e6:35:12:ab:84:83:cb:aa:42:f5:e8:
c1:9b:0f:61:f3:b1:2d:25:6d:c3:2c:de:9d:6d:fb:
8d:8e:e6:38:15:f3:0f:96:23:d7:ab:04:95:1c:e1:
39:69:17:4f:cd:b7:d0:70:74:22:5d:cc:bd:01:95:
85:ec:e2:0b:fb:4e:08:d6:13:f9:8e:26:12:20:f3:
65:69:79:fb:7e:80:e5:ba:2c:5f:18:48:5d:2d:f0:
eb:be:57:17:26:99:9a:42:e6:35:d2:42:dc:fa:5d:
2b:d6:26:d1:f2:fe:d2:42:aa:a1:78:3a:5e:09:f2:
52:50:d9:f7:37:c1:70:43:48:cd:63:91:c2:2f:a1:
78:d6:d3:9a:66:95:a6:2a:42:b8:ef:62:0f:5a:bc:
8c:79:9d:2c:a8:4d:13:54:f2:ce:69:89:ae:a5:79:
7b:13:23:71:4a:6a:4f:26:22:4e:12:48:c8:34:54:
5d:99:67:db:6b:37:02:df:a8:5a:89:d3:b8:ee:c9:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:52:D3:0D:81:1F:37:F1:0D:D5:3B:13:17:0E:AA:3B:1C:79:C1
X509v3 Authority Key Identifier:
keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6447A868632911ECACBD2A34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:37:59:a6:43:83:7d:23:ed:a5:c2:82:3e:93:42:37:4f:8e:
cf:77:58:64:06:6d:a2:e3:00:f9:ea:bf:c1:f2:18:7e:f6:19:
0c:e1:c5:ce:46:77:17:1d:e2:b9:c8:82:03:a5:b9:3c:f5:34:
9e:bc:c3:4f:89:ca:c3:91:41:b8:e4:3e:05:b8:94:ac:84:a8:
68:41:cc:fe:a7:ac:46:6d:6d:7b:f4:ac:72:a7:c7:40:19:84:
cc:11:38:85:e2:d7:17:7f:9e:a5:19:cd:7a:af:a3:72:71:bb:
5e:5b:2c:a4:3a:57:ab:2a:3c:89:b5:cc:c9:2b:32:56:5a:c1:
33:22:16:8a:c6:bb:52:cf:31:4f:d6:e8:87:c5:81:81:37:4e:
aa:7e:e2:57:7f:8a:fd:e9:66:4f:9e:ae:88:10:fc:71:b1:e1:
0e:97:80:98:c1:6c:4c:57:31:91:1e:97:82:dd:8c:23:7d:28:
8b:43:d7:97:a3:81:f7:65:bf:77:44:38:0b:93:fe:54:7f:2a:
c0:ef:cf:9f:b6:50:29:e9:a3:77:1b:36:8d:68:0d:f0:7e:55:
95:4b:64:31:44:53:eb:7f:c3:41:8d:7f:75:2d:72:a2:8d:12:
03:d3:39:4a:3b:b3:24:10:27:62:fc:a8:c5:b4:d3:de:c4:31:
17:22:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org