Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/A97F07B051F511EA9A11762BC4F9AE02.roa
File: A97F07B051F511EA9A11762BC4F9AE02.roa (raw, json)
Hash identifier: 4Urco1YicnJKrj275mgNGugYbSPQT/IY6t1xBAGSee4=
Subject key identifier: D1:B0:85:DA:65:D2:11:84:5B:19:FF:CE:C3:45:13:EE:9E:A1:D2:7A
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 09F8
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/A97F07B051F511EA9A11762BC4F9AE02.roa
Signing time: Fri 06 Jan 2023 20:57:01 +0000
ROA not before: Fri 06 Jan 2023 20:57:01 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 15695
IP address blocks: 103.104.98.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Jan 6 20:57:01 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63b88b1c-b405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:5a:c7:2a:43:a1:be:99:04:7b:e6:eb:17:
58:b7:9f:ce:75:be:d2:fb:e5:3f:b0:b1:52:2a:3a:
8b:bb:be:cb:0e:99:e2:55:2b:4e:03:b8:19:6a:10:
53:8a:0b:e2:b9:98:ff:cd:26:e4:35:4e:cf:bb:52:
22:1d:b4:27:23:41:3c:a7:9e:18:0e:69:ad:cd:af:
3f:53:28:0e:c4:d0:88:c0:b5:9d:23:e3:8c:f1:59:
b6:d3:6d:70:67:ea:72:6c:91:33:47:20:8c:d7:87:
44:a4:c1:d0:f7:3d:3f:fc:e1:20:2f:49:73:4e:c1:
4a:5a:27:a4:8e:4e:78:8b:cd:21:5a:e5:8d:a5:5a:
2d:5a:70:b2:73:c8:0d:d6:f2:7e:9f:de:ef:4e:0d:
fb:31:0e:a0:e5:d3:62:11:2f:6e:d4:e9:dd:6a:65:
b9:a1:c2:1a:3a:0d:9f:25:70:28:6d:c4:bb:c3:cc:
08:33:3f:e0:b8:40:0a:e2:83:1c:32:cf:08:be:94:
33:30:54:cd:10:a7:29:c8:fb:d8:7e:92:af:f5:71:
1c:47:9a:4a:8c:92:40:fb:af:7a:7e:d7:e7:ea:78:
1e:cc:10:bd:fd:b9:25:a9:cc:e5:40:77:80:0b:65:
a8:da:58:f3:8f:02:b0:d8:08:59:15:c7:b6:f6:c6:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:85:DA:65:D2:11:84:5B:19:FF:CE:C3:45:13:EE:9E:A1:D2:7A
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/A97F07B051F511EA9A11762BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.98.0/24
Signature Algorithm: sha256WithRSAEncryption
68:46:4d:40:50:ee:fb:0c:35:7d:98:a1:ae:09:1c:38:0f:e2:
01:58:88:71:55:9a:a5:10:d9:d2:7e:0f:ce:12:65:1a:93:28:
c2:5b:4c:9d:03:e2:e9:bc:fc:97:e9:e9:7d:40:59:f4:6b:d0:
40:a9:20:71:d1:8c:06:c3:56:d8:3f:1b:4f:3f:9f:67:85:5d:
44:5c:6b:d4:67:3c:59:68:8c:c7:4c:05:90:db:ca:66:0d:4b:
1f:0c:a1:8b:64:57:15:c1:92:b4:24:86:e7:57:78:7b:ed:06:
83:10:8a:ed:4f:e8:05:ae:17:5a:7c:a6:9e:2d:3c:11:46:18:
25:d2:06:5c:e0:79:04:3c:99:da:42:b2:35:8e:42:cf:d9:0a:
8e:c3:c0:ad:5e:ba:8a:4b:d7:e9:bf:de:f3:68:68:5a:1b:18:
98:e5:f6:d0:63:4d:32:45:02:7f:dd:69:8c:cd:44:56:e2:c0:
95:dd:59:ce:2c:64:bd:26:98:76:4c:75:28:5c:92:97:19:7d:
0c:29:8d:a8:da:9b:45:90:02:1c:f2:ce:53:d4:d7:f3:6f:69:
3e:5d:91:4b:09:c4:0a:48:f5:57:a9:95:b7:be:d3:35:e2:a1:
05:db:6e:55:88:6c:d8:cb:76:d4:61:0f:25:f0:e2:c7:3b:ca:
f3:4b:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org