Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/5E426C3A051911EEBDF47B46C4F9AE02.roa
File: 5E426C3A051911EEBDF47B46C4F9AE02.roa (raw, json)
Hash identifier: TpIqB5txvuTtllwEGSQCUriEcLZ7r2MOJ0OvoHSYXaA=
Subject key identifier: 67:A4:04:4F:EF:3A:1F:52:76:21:65:03:FF:E2:63:A3:24:2F:67:73
Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial: 06C5
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/5E426C3A051911EEBDF47B46C4F9AE02.roa
Signing time: Wed 28 Jun 2023 21:42:16 +0000
ROA not before: Wed 28 Jun 2023 21:42:16 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 141723
IP address blocks: 103.66.178.0/24 maxlen: 24
103.66.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Validity
Not Before: Jun 28 21:42:16 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649ca938-e75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:7a:ce:55:28:53:af:bb:49:a4:a5:f3:64:
29:a0:9c:0d:3f:99:1c:4a:01:b9:67:23:27:12:72:
5a:fc:93:c4:90:8c:85:f2:8f:ac:8e:ed:06:43:f8:
7f:30:7b:ef:d0:73:38:09:fd:e9:dc:c1:5c:f3:bf:
1d:f2:bd:ce:45:26:86:1b:7b:c0:77:d8:52:51:9f:
c6:f1:e3:c3:0e:5a:cf:50:51:ae:6a:04:d4:2f:60:
29:4f:5e:ab:6f:3c:fc:6b:56:f5:3d:b4:db:33:49:
09:64:e8:ad:08:44:9e:46:94:bf:9d:90:46:43:31:
57:85:4d:63:9f:f0:06:0b:db:5c:0e:ce:52:8d:ab:
f4:c3:a0:3c:84:ce:a7:74:ed:40:2b:5b:34:05:d3:
59:db:98:09:67:81:24:f5:e9:f7:8d:9a:46:46:8f:
ef:e5:58:64:1a:2f:2e:a0:0c:48:df:ed:46:32:d1:
a8:fe:f1:b7:d4:97:64:ea:13:bd:86:f4:54:02:33:
7b:cc:21:b5:1b:ad:29:ed:ef:f4:5c:2a:e7:08:5b:
1a:ad:e2:15:41:3b:41:4e:a4:ee:5e:58:51:08:ef:
22:e9:70:e7:2f:97:1f:0a:ae:d0:96:83:f9:97:8d:
bf:77:85:a4:74:58:65:4a:1d:e4:7f:3d:07:3c:06:
e1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:04:4F:EF:3A:1F:52:76:21:65:03:FF:E2:63:A3:24:2F:67:73
X509v3 Authority Key Identifier:
keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/5E426C3A051911EEBDF47B46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:38:b5:16:e4:0f:a9:12:3e:6a:44:ec:62:4e:b1:ed:76:7c:
e3:2e:67:87:27:dd:7e:33:d9:28:b9:f5:ce:bb:58:5c:b0:ca:
e9:b3:5e:e4:d2:12:5b:2e:1b:ea:90:a6:dd:b3:ed:7f:9d:15:
2a:86:7a:be:07:9a:f3:9c:11:0a:b1:a7:61:98:52:ae:1a:80:
12:a3:da:fc:18:bb:2a:8d:bd:d2:ea:76:4e:cd:7c:11:ae:ba:
f5:05:13:31:8d:3d:dc:19:0d:66:b7:6e:e9:6b:69:b4:3b:7e:
47:30:8c:23:92:49:18:e8:28:ba:2f:e3:a9:0d:df:59:49:9e:
ec:b9:14:bb:ee:9e:a0:04:bd:00:ef:23:ad:d3:bb:e6:83:4e:
33:f8:83:c4:d4:da:ee:69:fc:5e:96:9d:14:c5:31:9c:f4:fc:
fc:51:ee:e6:5b:62:dc:6f:ae:52:92:50:33:9b:3e:85:9b:ea:
3a:23:a4:58:78:fa:3b:b6:a3:76:44:28:a5:6d:89:55:24:ea:
06:df:67:2f:c3:ae:c4:cb:cc:c8:1d:47:2a:36:2e:74:e7:b1:
d6:a8:85:69:1b:fd:05:6b:73:1e:8b:93:2d:cc:de:6d:31:a4:
c5:f9:67:b6:37:ed:70:d9:a6:4a:13:ee:9a:ac:e7:f5:e7:79:
8d:f7:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 18:30:44 2023 by rpki-client on console-ams.rpki-client.org