Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/E6C9BB5AD0FC11EC9D831E2AC4F9AE02.roa
File: E6C9BB5AD0FC11EC9D831E2AC4F9AE02.roa (raw, json)
Hash identifier: f47l+yZbtx6UrhJ+k/vPTTwgr+agUaDUdnhpzf2FbaU=
Subject key identifier: 71:83:D1:DD:25:6B:40:3F:0C:3D:E8:B2:F7:A2:C3:92:57:07:38:56
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: CC
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/E6C9BB5AD0FC11EC9D831E2AC4F9AE02.roa
Signing time: Thu 11 Aug 2022 05:33:37 +0000
ROA not before: Thu 11 Aug 2022 05:33:37 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 132422
IP address blocks: 103.215.126.0/24 maxlen: 24
103.215.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: Aug 11 05:33:37 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62f494b0-0f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:93:27:1d:9a:fe:09:da:3e:34:92:de:be:
54:d6:d0:a6:17:ec:8e:33:58:47:10:3a:5b:37:1a:
ed:8d:2a:c1:4c:56:8b:e7:be:89:61:72:7f:bc:0a:
f8:dc:b0:b2:16:40:ec:6a:4b:72:73:cd:41:b9:c2:
66:f7:ce:90:10:03:c1:56:18:63:9e:8b:a6:a4:52:
c2:b6:52:3d:53:62:e8:b7:2a:7e:b7:da:d6:63:42:
67:2c:e4:ab:d5:94:84:75:b7:38:16:40:e9:58:07:
58:8e:15:14:a5:08:66:06:0f:41:dc:77:eb:6a:50:
d6:6b:30:57:0a:62:49:e5:d6:5d:49:21:2b:db:6c:
f0:b7:40:4d:2f:11:ac:a2:52:5c:7a:8f:b9:18:9e:
15:c5:47:7d:9e:0d:f7:d5:b5:0e:89:2b:54:10:aa:
fe:15:c7:ef:c4:0f:5d:85:af:bb:f8:f9:52:75:a1:
3f:54:90:4c:99:38:68:70:4a:d9:bc:5a:4c:9f:d7:
3a:bc:7d:6b:ab:e3:50:34:de:eb:34:af:9f:dd:33:
7c:e4:a2:8b:5d:0b:a0:ab:b8:b1:bc:20:d0:07:e6:
f4:56:db:30:62:66:c6:91:cb:ca:0d:e8:9d:bf:c7:
21:bb:7c:14:46:15:e8:87:b8:e4:c6:47:9e:65:a5:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:D1:DD:25:6B:40:3F:0C:3D:E8:B2:F7:A2:C3:92:57:07:38:56
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/E6C9BB5AD0FC11EC9D831E2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.126.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:0d:8b:f6:dc:89:b0:d0:b2:91:6f:70:df:17:a8:b9:28:a7:
91:c3:a7:c3:05:11:a9:a2:fa:8a:0f:23:f8:d6:aa:36:6b:bf:
12:62:33:8e:a8:58:dd:f2:74:ca:09:03:93:37:d1:9c:42:52:
47:fe:3c:fb:ae:85:9f:d4:18:d0:e5:62:4e:fc:ea:5c:15:09:
87:b8:9d:b5:af:08:ab:da:a3:e5:1b:fb:b3:38:f0:3d:5d:71:
f8:73:ea:7a:3e:6d:e9:0f:50:fe:90:d2:f0:7b:12:6c:9d:90:
ae:b0:f0:64:e9:94:70:da:2b:a0:b8:4f:4a:6c:9a:05:4b:09:
8a:f2:97:3b:24:02:11:2c:a1:fa:f0:80:0e:30:4b:8b:2e:7b:
e3:a9:3c:c5:ff:80:51:20:40:1b:35:36:4c:36:fe:14:4e:31:
4f:94:32:9a:44:28:48:00:39:a9:d9:b9:e7:32:63:0d:b9:64:
59:a8:0a:d2:db:59:25:c1:b7:c5:51:af:52:2a:ec:57:df:a7:
61:fe:f9:8e:9f:dc:1f:11:79:01:3a:4e:f5:36:95:0f:ab:9e:
96:e8:fc:b6:bd:d0:26:df:3c:45:fa:34:d3:73:1b:f4:3d:19:
60:8a:f6:13:89:e4:ea:de:22:1c:a5:d5:0e:a9:6e:0b:f2:f2:
0e:25:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org