Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6F21D64AACC311EBA28FAD5FC4F9AE02.roa
File: 6F21D64AACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier: /LZgRWHcRWoSijtrxQ+xqFh6DJHlkAxfGDQU96n/qoc=
Subject key identifier: FD:B0:30:48:BF:E1:CC:8C:CE:CB:A5:0D:3A:85:D4:19:8D:5E:5C:88
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0425
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6F21D64AACC311EBA28FAD5FC4F9AE02.roa
Signing time: Sat 29 Oct 2022 01:51:25 +0000
ROA not before: Sat 29 Oct 2022 01:51:25 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 18013
IP address blocks: 103.155.110.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Oct 29 01:51:25 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=635c871d-c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:5d:60:e9:e6:4a:3e:b7:cc:c9:55:07:29:
eb:dd:26:c9:bb:2c:1f:3c:e3:2b:38:65:a6:70:1b:
ec:33:0c:45:a0:31:e2:e8:2d:db:2f:88:7a:e5:86:
c3:65:98:4f:c6:75:b8:16:d3:e3:da:8b:9f:13:34:
1d:28:49:81:af:81:e1:fd:d7:cf:fe:a3:e4:48:62:
f1:0e:d5:93:16:e5:72:ed:00:1a:52:ad:68:50:f2:
a2:f7:43:b0:4d:11:ad:bf:07:39:ed:19:f6:5e:74:
f2:23:88:d9:33:e5:97:fb:dc:13:48:29:40:b4:6e:
3a:7f:dc:33:32:dc:6e:1e:ff:72:8b:d6:6b:7e:e5:
e0:cc:15:aa:8a:9f:b5:bc:19:f6:0e:5e:e2:93:ca:
3f:4f:29:a7:5b:d3:c4:6e:70:10:a3:95:a9:96:a9:
8d:fc:61:5c:24:61:f1:43:9d:d8:d2:a0:06:18:56:
90:f9:0f:59:44:2f:96:f7:2d:ae:83:ad:0a:9d:02:
c7:17:01:92:8f:34:77:0b:ac:e1:85:86:c6:fc:11:
eb:82:59:ea:54:2b:86:fb:7b:54:4d:8b:1a:d8:88:
8d:85:d7:a8:d6:0b:86:b8:a4:30:dd:27:27:e7:dc:
a0:2b:89:8c:d4:8b:68:7e:35:e0:31:b0:86:4e:de:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:30:48:BF:E1:CC:8C:CE:CB:A5:0D:3A:85:D4:19:8D:5E:5C:88
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6F21D64AACC311EBA28FAD5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.110.0/23
Signature Algorithm: sha256WithRSAEncryption
75:03:b7:2f:e3:4c:a7:d1:a9:42:e4:8e:9d:46:0c:41:90:b8:
d5:f7:01:09:30:92:da:7b:b4:36:88:22:a9:6c:1c:eb:da:12:
69:01:eb:4f:66:a4:b4:d1:f9:0a:b7:0a:b2:da:87:1f:12:fd:
82:73:d4:65:8a:70:37:53:da:ff:40:13:c0:26:a8:f1:79:1e:
b9:3f:c4:10:80:54:ed:0d:93:dc:cc:82:ee:ce:19:53:40:22:
8d:42:4b:55:20:7d:1d:32:86:95:e9:a3:ea:7b:16:e2:7f:01:
bc:af:62:b8:a6:32:62:28:f9:d3:ef:1d:46:33:6e:3b:8b:5f:
a6:5e:b3:74:de:b6:e4:13:db:9f:f5:a0:99:5f:67:fa:56:0d:
f2:47:9d:0a:c3:eb:b9:00:ac:86:41:bb:68:1f:79:b1:76:65:
07:f1:b3:9d:40:b5:b9:d1:e3:93:18:1c:84:16:05:1b:02:ca:
da:5f:99:db:db:d6:bf:84:bf:b7:20:a8:89:78:aa:64:31:f3:
02:e1:75:ec:da:ca:2f:04:c5:55:1d:76:b9:1e:c8:6d:73:64:
de:8a:e3:e5:63:76:29:96:3c:3b:fb:2c:e1:9f:8e:e1:6c:71:
82:86:21:82:7e:72:a9:f9:75:3e:78:63:b2:c7:31:cd:d8:1b:
3b:4d:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 06:30:58 2023 by rpki-client on console-fra.rpki-client.org