Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/A78A8D98ECCB11ED9504E23FC4F9AE02.roa
File: A78A8D98ECCB11ED9504E23FC4F9AE02.roa (raw, json)
Hash identifier: gwkTVzVzlA5ECz525Vui4+5GVqSs/vUzxjLm6IWZ6Rs=
Subject key identifier: C9:52:41:D6:FF:5A:DE:D4:5D:37:1D:EE:D0:31:8B:90:F5:D4:04:B3
Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial: 0958
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/A78A8D98ECCB11ED9504E23FC4F9AE02.roa
Signing time: Sun 07 May 2023 11:38:16 +0000
ROA not before: Sun 07 May 2023 11:38:16 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 150744
IP address blocks: 103.136.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Validity
Not Before: May 7 11:38:16 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64578da7-871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:2d:14:62:f7:2a:0e:51:42:a4:a1:a1:16:
7d:cd:f0:80:16:4c:96:1d:15:e7:2b:ab:e3:e0:2e:
c7:d2:4e:1e:2f:e6:0b:4a:d0:73:cd:9f:94:c8:0e:
3b:7c:87:58:a1:94:3a:e5:9b:80:6e:90:cb:49:2a:
cd:22:d4:61:d5:e7:d7:a4:34:ac:fd:f8:c9:7a:61:
6f:e0:39:62:b7:97:48:3b:3c:18:36:16:6a:2c:8f:
df:57:dd:b6:69:d6:02:1c:00:5c:ca:39:00:27:c5:
94:32:cb:b7:cc:bf:2f:be:e4:fd:16:6e:97:82:bb:
75:6e:bd:92:2a:d0:34:df:7b:ed:1f:a4:89:37:83:
c3:b0:27:6f:66:45:d3:9c:9b:7e:0d:93:0c:ab:2b:
dd:66:d0:62:c4:f3:cd:78:d0:6a:7b:b7:ce:10:be:
75:be:77:39:6a:6d:44:24:e0:89:e8:af:31:2f:30:
8a:80:71:51:55:c4:4a:7c:b8:60:47:7e:05:64:04:
77:80:31:f4:ae:23:9a:cc:0b:fc:6a:f9:e0:bf:e9:
be:d5:5b:02:ba:a6:a9:4e:96:4f:46:77:4b:f6:dd:
34:d9:6e:ad:fb:f5:ea:23:dc:ee:9a:48:a6:15:38:
12:08:08:1f:4a:e6:9a:1c:a7:e2:57:5c:26:15:8e:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:41:D6:FF:5A:DE:D4:5D:37:1D:EE:D0:31:8B:90:F5:D4:04:B3
X509v3 Authority Key Identifier:
keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/A78A8D98ECCB11ED9504E23FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.159.0/24
Signature Algorithm: sha256WithRSAEncryption
47:56:db:cb:82:9a:76:5a:7f:0f:37:59:c6:ea:ff:b7:79:a8:
31:19:7f:44:8f:23:65:8d:bb:20:93:32:0a:8b:47:e7:3a:ca:
06:2d:26:17:38:eb:cf:f9:4e:b2:37:cf:14:62:e6:df:fd:02:
cc:df:f8:bf:28:88:a9:88:83:1e:ee:1d:6a:49:36:f4:1d:09:
73:92:6f:eb:9d:83:e5:cb:a2:93:b1:5b:b5:ef:e6:e8:93:01:
5c:56:29:78:4e:47:dd:c0:45:83:85:32:24:81:9f:19:ef:fa:
a7:2b:68:69:55:7b:ca:5f:30:d9:66:e9:7b:72:7a:ce:13:92:
de:b5:39:62:df:d7:ea:ce:e2:c6:c7:30:1b:a1:40:f1:c5:39:
3b:49:e9:0e:d1:9c:bb:b2:e2:c4:1c:bc:db:48:ac:2e:86:0b:
39:bc:be:29:32:63:74:bd:4b:14:8e:c9:28:b5:b5:c5:00:36:
5e:f6:22:c0:29:33:9c:fc:53:08:8f:58:32:48:39:da:f1:68:
55:e0:77:4a:bc:da:8b:a3:85:4e:d6:0b:a4:fa:0f:f1:ce:69:
60:7a:7a:3a:76:2c:9e:a4:94:cc:8b:0f:6a:2e:7a:7f:00:2c:
c3:78:34:9a:a6:98:b7:38:ff:87:88:e3:e8:85:9e:fa:1a:c8:
16:27:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 11:40:37 2023 by rpki-client on console-ams.rpki-client.org