Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/E06E37F23E5911ED92B46653C4F9AE02.roa
File: E06E37F23E5911ED92B46653C4F9AE02.roa (raw, json)
Hash identifier: i8iOECncVfvHkDAKp/o/FEfDUDpwvKpP4k+PR3tNHY0=
Subject key identifier: 63:46:69:E8:04:BA:78:8A:24:0E:BE:A4:10:C5:68:35:AF:04:F4:88
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: 27
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/E06E37F23E5911ED92B46653C4F9AE02.roa
Signing time: Tue 27 Sep 2022 11:45:26 +0000
ROA not before: Tue 27 Sep 2022 11:45:26 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 209584
IP address blocks: 103.1.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Sep 27 11:45:26 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6332e255-88df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:81:92:8d:53:19:67:41:26:57:54:68:73:
bd:25:74:04:36:ee:a6:b4:bd:12:f8:8e:ef:05:ec:
45:21:6f:3f:70:28:cd:26:6e:0d:e6:f5:a3:bc:6d:
e3:7e:ae:f7:e2:90:0d:01:d6:d0:95:24:7f:d7:47:
01:3f:9d:b0:d4:f5:a1:8f:9e:35:1d:24:a6:c7:89:
ce:b2:fd:0f:bb:a0:67:ea:98:3f:13:84:89:fd:18:
c3:74:f9:53:86:ce:d4:1d:92:36:06:e3:62:ca:69:
6c:4e:e4:49:8d:40:9f:d0:13:50:fb:23:68:38:a1:
cc:9f:84:dd:7d:59:d0:34:b0:f1:ef:e2:5c:d9:b7:
f5:b2:b8:59:09:df:14:ba:35:08:2b:b9:82:07:fc:
97:b1:fb:03:a2:c9:dc:3e:4b:21:a8:11:c9:1f:92:
72:67:12:79:bb:52:48:34:e3:1d:80:df:06:d5:49:
13:de:af:77:3f:b0:f6:04:2c:06:89:f3:25:13:bd:
95:65:cb:19:b4:b5:d8:1a:86:f7:b9:ca:ef:d1:30:
60:a8:a0:5b:78:ef:c9:c1:41:aa:29:75:d8:1f:8e:
48:b6:1c:85:2d:c0:04:dd:04:0b:17:12:2b:90:d1:
08:ba:ee:76:49:ea:c6:aa:75:90:fd:4c:3e:e2:2d:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:46:69:E8:04:BA:78:8A:24:0E:BE:A4:10:C5:68:35:AF:04:F4:88
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/E06E37F23E5911ED92B46653C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.158.0/24
Signature Algorithm: sha256WithRSAEncryption
15:09:c9:0e:c6:02:9c:0f:40:d5:fa:49:fb:3d:a8:26:f1:02:
e4:01:23:ce:a3:44:89:79:e4:96:bd:6c:13:a3:13:be:ff:0e:
ce:b7:be:b4:d4:c4:c6:f7:00:0e:eb:20:1b:71:66:d6:54:16:
ce:83:ad:eb:09:e4:56:1c:4e:ba:ae:5d:f7:d1:a6:f0:c3:8f:
01:8a:a9:d2:db:25:dc:ef:ef:80:77:54:70:5f:82:90:6b:4f:
d7:a3:dc:85:9a:73:d9:bc:d6:36:9b:f8:cb:d7:61:7a:21:af:
53:4c:a0:42:92:76:15:78:23:19:cd:6f:5f:e3:a2:8d:2f:65:
ab:b3:9d:ce:bf:17:d4:ec:a9:11:e7:ff:47:61:b4:60:5d:d8:
3d:c0:1f:12:34:62:63:90:74:02:fc:3a:c8:11:69:7b:ac:f4:
00:fc:80:7b:b8:02:a3:78:01:97:29:ba:22:7e:4d:03:8e:d5:
35:ee:9c:97:c4:bd:83:38:78:14:02:4a:e6:65:9a:05:a2:e0:
98:a7:93:00:97:a8:07:29:4a:8b:73:de:b2:1e:d2:08:e0:cf:
c1:2f:17:a9:12:06:42:83:4e:c5:19:03:99:61:c3:18:89:2e:
c1:d5:c6:44:ee:86:00:5a:d9:43:39:f4:07:4e:aa:55:ab:7f:
50:4d:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 16:34:10 2023 by rpki-client on console-fra.rpki-client.org