Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/07F4286ED06D11EC8D683336C4F9AE02.roa
File: 07F4286ED06D11EC8D683336C4F9AE02.roa (raw, json)
Hash identifier: fAhMn5HXSGFA4JdTVcRHmpBU5iaeYtKK35nQTUASWTw=
Subject key identifier: DE:D9:99:07:17:6C:8A:E1:6F:95:60:8C:1E:15:C9:B9:F4:06:4E:24
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 1033
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/07F4286ED06D11EC8D683336C4F9AE02.roa
Signing time: Fri 04 Nov 2022 18:24:45 +0000
ROA not before: Fri 04 Nov 2022 18:24:45 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 140096
IP address blocks: 103.102.4.0/22 maxlen: 23
103.102.4.0/24 maxlen: 32
103.102.5.0/24 maxlen: 32
103.102.6.0/24 maxlen: 32
103.102.7.0/24 maxlen: 32
182.255.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Validity
Not Before: Nov 4 18:24:45 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=636558ed-232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:25:28:63:aa:57:ff:b9:f8:da:e5:ae:40:
48:0f:ae:b3:46:d6:46:ef:f4:43:2e:bb:aa:4a:f6:
fe:91:67:a0:89:ff:7f:b2:b7:70:7c:b0:9b:bc:6f:
d5:13:ff:59:0e:7f:c7:0d:18:86:f8:f7:40:70:be:
8f:5c:3f:bb:41:1a:73:32:c2:19:c9:d2:41:33:6e:
2d:95:fb:a3:67:f9:b0:e9:ab:94:e7:7f:89:f4:ed:
7c:f1:de:1c:30:53:e6:22:67:37:63:07:89:55:db:
af:bc:95:12:df:2a:06:58:cc:2f:fb:d8:6e:85:f9:
a7:53:86:cd:d8:0f:c6:d8:d8:59:5e:3a:e8:bd:99:
d7:be:40:16:f7:38:71:31:13:d6:b4:5d:3c:8c:15:
4e:aa:1e:ce:37:2b:63:c7:c4:fd:fd:26:a6:58:b6:
c9:56:be:77:96:f3:e2:e5:82:62:39:48:81:24:0c:
7d:e2:8f:87:40:ac:73:d2:77:28:83:4b:46:98:d1:
91:5e:a1:5e:74:07:6f:33:14:ac:6d:6b:98:ff:c1:
0c:aa:83:c6:ba:55:61:cf:bf:bf:4d:cc:3e:a2:2a:
3f:5e:f3:3d:61:1a:43:31:5d:5a:fb:94:bd:9e:35:
e9:42:ee:2f:05:c0:74:cb:a4:58:77:c9:bc:e9:01:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:99:07:17:6C:8A:E1:6F:95:60:8C:1E:15:C9:B9:F4:06:4E:24
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/07F4286ED06D11EC8D683336C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.4.0/22
182.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
77:9b:d2:cf:c4:70:38:9c:56:3f:19:77:7b:8d:5a:e0:b1:04:
00:32:09:20:12:ce:8d:e3:bf:3e:ea:71:a7:06:e6:e5:4d:01:
f2:fa:b4:cf:46:2f:fc:36:ce:73:8b:f6:01:0e:4b:9c:a6:96:
e4:2f:13:a7:07:f2:37:4d:a0:bd:c0:50:ff:49:68:e5:42:8a:
0c:50:c9:4f:8d:7f:05:dd:35:3e:22:f6:0a:7f:62:f4:e1:a1:
de:1c:92:2b:9e:27:45:69:e4:c9:07:ec:f0:63:b7:74:60:a8:
dc:c3:39:50:67:00:bc:9b:17:b6:2c:35:54:5d:e9:b6:9e:5b:
a4:44:11:01:2a:31:9e:9f:78:42:05:73:1e:7d:11:be:74:e9:
45:65:08:62:49:f3:2e:9b:c3:6e:cb:a5:13:d8:23:f3:15:75:
ed:a0:89:3c:9b:79:24:ea:34:b7:a5:bc:2a:8e:ea:31:cd:49:
2c:70:7a:fc:9b:a2:5f:76:bf:09:a2:98:1d:9b:05:6f:c0:5e:
75:2f:ed:09:ce:0b:8d:8c:43:1f:c2:76:18:f6:5b:ea:0e:65:
54:7f:83:02:67:a3:b8:bd:2c:d1:8a:65:47:6d:44:01:bb:d1:
f6:15:6c:71:8e:c3:0a:4b:d0:dc:8c:44:68:52:ad:b9:7f:b8:
c4:93:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org