Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/5B62908C253411ED90F4A159C4F9AE02.roa
File: 5B62908C253411ED90F4A159C4F9AE02.roa (raw, json)
Hash identifier: BFZcbBnRG82Mv/4ApbMeEWyNnUh1LRu0Hl0/RDTQz1w=
Subject key identifier: FF:56:90:B8:0F:C8:4F:E6:E8:BE:DD:63:CA:A5:75:BE:3F:76:6A:E1
Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial: 35
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/5B62908C253411ED90F4A159C4F9AE02.roa
Signing time: Fri 26 Aug 2022 11:43:52 +0000
ROA not before: Fri 26 Aug 2022 11:43:52 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 147001
IP address blocks: 103.188.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Validity
Not Before: Aug 26 11:43:52 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6308b1f8-37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:6d:80:73:ac:da:d3:31:90:40:ed:87:11:
99:57:9a:e1:bc:a3:4d:bc:2f:56:95:70:fb:1e:b9:
83:17:87:eb:09:a1:9d:e7:e7:02:5a:52:00:12:92:
4f:5d:5d:53:25:9e:6d:88:f0:e2:d4:45:eb:6f:44:
78:dd:84:bb:84:6f:3e:bc:15:be:39:89:f1:d0:85:
4a:4e:23:ce:8e:05:e7:e2:ae:97:a6:a3:0e:d3:a5:
4b:8c:0c:27:e1:34:f7:87:af:0b:6b:b4:c4:1c:3c:
f3:bb:f2:2e:d2:e3:33:91:c9:91:3c:8e:44:fe:24:
0e:ff:d7:d1:ea:0b:73:2a:6d:48:66:fd:2c:8f:fa:
a0:eb:76:aa:c1:9e:13:26:3e:53:40:87:1a:70:dc:
a7:39:42:60:f8:f9:48:15:a1:80:2e:67:69:3e:b2:
cd:6f:a2:b4:ef:d4:f3:50:16:fd:ce:4a:6f:fe:88:
88:33:c1:36:58:fb:c4:d5:1f:e6:62:70:c1:f7:67:
24:24:d5:df:70:f2:a7:65:44:81:a6:c0:3e:13:ee:
a7:aa:ec:f2:89:4d:cb:c2:c4:49:b3:a0:0a:49:96:
3a:02:86:06:e8:84:07:f1:61:b7:58:1d:de:ee:01:
3d:be:3d:32:57:4a:26:49:c6:e8:b5:da:b4:e1:c0:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:90:B8:0F:C8:4F:E6:E8:BE:DD:63:CA:A5:75:BE:3F:76:6A:E1
X509v3 Authority Key Identifier:
keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/5B62908C253411ED90F4A159C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6c:78:89:5c:14:1f:66:6a:32:d5:65:60:6f:b9:c2:90:1c:
c3:3e:b7:83:c0:4d:6f:94:d0:eb:08:c9:ab:09:a5:4a:83:f8:
71:03:f8:2e:0f:32:e6:0f:5d:56:d9:2a:2a:5d:74:86:b7:25:
6e:e7:b7:cb:0d:11:0e:62:e2:dc:94:e6:b2:a7:97:e5:92:1a:
a9:1b:45:1d:8c:2a:91:cd:86:9e:a7:22:d0:89:2c:90:f5:dc:
8b:99:d5:91:47:6d:b9:e9:68:41:0f:d8:59:e3:35:cf:30:97:
50:07:03:d1:02:5c:93:9f:d0:c4:3a:96:00:06:10:ad:63:a8:
93:bc:d6:7d:5c:a9:5b:60:5d:cc:30:4b:b5:60:e2:b4:b2:c0:
12:a0:0b:56:ba:1b:4c:db:da:62:2b:73:4b:ef:31:c1:13:0b:
e4:25:0c:08:0c:45:8f:f6:4e:5a:e7:0e:0b:bb:d3:f4:01:15:
e3:39:20:51:89:ad:e8:e3:f9:1c:54:0b:b8:13:2a:47:5f:16:
a5:47:84:a6:f4:a1:18:c1:7a:3f:6e:90:37:e8:6c:f6:97:6e:
10:8f:f5:98:e0:9c:65:18:87:43:a9:5b:71:76:2a:7b:7c:59:
64:22:05:36:78:18:85:60:60:93:25:3f:d7:db:be:49:f0:f0:
10:5d:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-fra.rpki-client.org