Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/8298DE3EB7CB11EDBB2DBC4DC4F9AE02.roa
File: 8298DE3EB7CB11EDBB2DBC4DC4F9AE02.roa (raw, json)
Hash identifier: xxMFmbeOQa2M8YLMygPSffVc9w99qk111OgMcUkaPzE=
Subject key identifier: C0:E2:6A:7C:1A:23:A3:10:A3:A3:A6:F4:D6:43:A1:A7:D0:AC:09:19
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 0334
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/8298DE3EB7CB11EDBB2DBC4DC4F9AE02.roa
Signing time: Wed 01 Mar 2023 00:53:42 +0000
ROA not before: Wed 01 Mar 2023 00:53:42 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 134711
IP address blocks: 103.12.188.0/22 maxlen: 22
103.46.220.0/22 maxlen: 24
103.197.144.0/22 maxlen: 22
220.158.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Mar 1 00:53:42 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63fea215-7a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7a:34:01:9c:a1:f5:5f:36:86:79:0e:e2:47:
b3:c7:1d:7c:04:30:18:42:11:2a:0e:0c:d8:a0:68:
05:0a:e1:82:3e:74:4c:7c:0d:1c:50:67:fc:97:af:
4f:70:b0:3d:b8:7a:5f:c9:d7:db:4e:71:36:f1:cd:
95:87:25:8e:45:61:d4:ed:fb:70:e2:d1:c6:6c:3d:
d0:69:99:64:51:c0:f4:68:ef:7b:4f:26:7f:a6:54:
24:b3:de:1e:24:99:da:fa:75:b3:b6:98:29:2d:97:
87:27:86:02:09:0e:97:aa:47:86:80:1b:c9:fb:14:
f0:29:e9:9c:20:36:79:ec:47:a5:99:58:b2:fd:e8:
2e:4d:d0:cc:b5:29:53:fd:3b:0a:29:1e:06:54:8f:
91:ac:07:c8:af:13:72:0f:7a:18:4c:ed:ac:0d:88:
13:ee:f8:9f:1d:9c:d5:c8:e7:09:d1:27:78:19:8f:
47:07:9f:55:8c:87:12:64:b1:cf:c4:44:12:a9:72:
61:3b:4e:6b:19:af:6c:ae:19:64:72:b5:f9:a2:69:
3d:f1:70:3a:2b:29:3c:90:71:31:ad:6b:7a:20:4e:
3c:2c:fe:2d:0d:87:05:6c:3e:8d:4d:a0:30:27:26:
d8:3d:4d:06:9e:45:9e:2e:d0:c4:84:4e:68:eb:90:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:6A:7C:1A:23:A3:10:A3:A3:A6:F4:D6:43:A1:A7:D0:AC:09:19
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/8298DE3EB7CB11EDBB2DBC4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.188.0/22
103.46.220.0/22
103.197.144.0/22
220.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e4:b8:63:34:40:96:3b:97:d3:97:fd:0e:eb:91:ab:22:68:
4e:ca:18:4b:13:b4:82:c0:c4:0f:24:bc:f0:51:03:89:47:35:
f6:da:22:3a:12:42:4f:e8:77:00:94:2b:80:31:91:fa:ff:f3:
cd:2f:d3:84:fd:bc:81:7a:31:5e:65:43:e2:e7:69:bf:aa:77:
79:59:8a:8d:9d:5c:01:c1:91:0e:90:e4:09:38:8b:f0:a0:02:
fc:4a:a6:6e:cd:f0:90:63:77:e4:9a:88:15:c6:66:38:2a:2c:
b5:b2:fb:84:b0:f0:30:8b:c3:23:10:2b:13:43:95:31:58:e7:
72:1a:58:6e:43:70:76:34:99:a8:fc:a5:09:69:86:4b:d6:91:
f6:13:a9:cc:2e:7d:a5:c0:c0:12:c4:9f:a1:55:9c:eb:0b:b2:
04:51:b7:48:4a:41:7a:21:7e:b3:02:ba:2f:c1:7a:6b:f7:4e:
a2:11:ce:22:ab:93:d3:fa:87:b5:b5:ec:14:80:da:42:74:e7:
5e:7d:c0:57:d6:33:1a:62:00:74:da:a7:17:bd:1f:01:06:12:
e4:1d:ba:92:e0:e9:ae:50:5a:ab:55:c9:ce:29:bb:a7:d2:ea:
6b:e5:04:02:6f:59:5b:7b:f3:5f:83:80:f6:2e:66:63:28:e8:
c0:e0:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org