Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/A1DEC36CC6BC11EDAA95C11EC4F9AE02.roa
File: A1DEC36CC6BC11EDAA95C11EC4F9AE02.roa (raw, json)
Hash identifier: xUKFPgDAuAQ+0Iln5fJpk87IkyCRt5abIC+FVvd4wFM=
Subject key identifier: 35:F5:17:32:B9:88:E2:76:9B:0E:A4:FD:80:67:1F:66:59:7F:3C:F4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: EE
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/A1DEC36CC6BC11EDAA95C11EC4F9AE02.roa
Signing time: Tue 18 Apr 2023 14:46:09 +0000
ROA not before: Tue 18 Apr 2023 14:46:09 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 17941
IP address blocks: 103.102.124.0/24 maxlen: 24
103.102.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Apr 18 14:46:09 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=643ead30-bc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:13:1c:0a:d3:8b:0d:6b:48:66:60:24:0c:
62:cb:a1:03:d3:07:97:51:ec:e3:c2:79:13:38:c1:
9a:b8:6e:e1:3b:dd:71:7d:2c:3f:df:27:51:9b:fd:
4d:d7:32:41:13:b9:0c:6f:04:b9:2a:b6:de:f7:48:
3a:7b:b0:b4:ba:ad:52:48:75:bd:d2:fe:02:96:e3:
5c:f3:de:39:e2:25:87:08:93:3c:2d:99:6a:7a:47:
0f:52:94:9f:d3:d3:2b:ea:2b:ed:b5:9d:a7:1a:78:
18:43:10:9e:16:b6:e3:1f:12:81:d3:d6:23:d7:64:
66:35:e7:d3:b0:f5:d0:35:56:18:7d:77:6b:50:91:
5d:e4:d1:62:08:54:c6:c7:91:a6:2c:13:64:06:cc:
16:1d:1a:81:ca:9b:cc:ca:7b:f9:72:61:3a:11:85:
ca:ab:04:5e:ae:ae:a4:13:83:be:23:e1:be:fb:fb:
35:bb:70:71:47:e9:cf:fc:41:fb:04:81:9a:b8:0f:
97:2d:fc:9a:c5:b5:04:85:1f:18:7c:c6:cc:51:9d:
3c:b7:f7:35:4d:59:e4:d6:7d:42:b7:e3:7d:b6:42:
9b:f7:0d:09:45:b3:b7:94:fd:22:c3:f9:de:0f:0c:
49:25:bb:fe:ca:1f:fd:84:74:2a:4b:b6:23:42:86:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:17:32:B9:88:E2:76:9B:0E:A4:FD:80:67:1F:66:59:7F:3C:F4
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/A1DEC36CC6BC11EDAA95C11EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.124.0/24
103.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2b:74:01:f9:58:38:33:31:95:15:62:c8:fd:f9:55:8c:87:
75:94:5c:c5:79:7f:c3:41:09:f2:e5:53:4e:f6:99:5f:3c:14:
ea:74:92:92:e4:f2:4c:e4:68:9d:34:ee:56:4a:84:a0:59:ff:
31:14:19:f1:b4:fc:21:e7:f4:21:25:ad:12:a2:08:b1:97:9a:
f3:76:d4:07:13:05:ae:d6:b4:84:bb:05:5c:3e:1c:70:66:12:
db:7f:6e:9b:65:c2:8f:6c:c4:35:f1:44:12:e8:ac:1e:0b:ae:
b2:7c:74:df:5d:62:e3:4d:8c:12:44:b6:23:f5:39:31:4f:11:
38:89:4c:3a:b1:dc:39:65:a2:6d:5f:5d:d6:88:8b:19:e4:f2:
36:c6:bb:79:f1:c6:49:fd:4b:4a:57:6a:2c:9f:f6:8d:37:b3:
43:e6:63:86:df:57:4c:ce:5e:a6:0d:1f:a4:6f:35:51:7e:7e:
dc:5e:52:1d:d5:c5:86:b7:e4:d1:46:ca:8e:fa:91:67:7a:67:
32:e3:16:77:63:69:6e:af:48:50:c8:48:69:6b:1a:38:97:dd:
79:4b:93:bb:2f:67:7b:5b:5c:dc:31:41:c8:b1:cf:02:5f:50:
3d:ba:8d:1e:fd:33:e9:97:9e:d8:27:34:14:f5:89:c1:da:81:
04:97:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 10:49:31 2023 by rpki-client on console-ams.rpki-client.org