Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/DC75AAA0372D11EDB1059640C4F9AE02.roa
File: DC75AAA0372D11EDB1059640C4F9AE02.roa (raw, json)
Hash identifier: N/tcQVENkTaGbRPGWIvT79+0HqOodEkmuv9IFOTZciA=
Subject key identifier: 41:2F:FC:CE:4F:E0:93:6C:8E:B7:37:B8:D3:20:7E:F2:D6:31:48:36
Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial: 0392
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/DC75AAA0372D11EDB1059640C4F9AE02.roa
Signing time: Sun 18 Sep 2022 08:42:43 +0000
ROA not before: Sun 18 Sep 2022 08:42:43 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 138998
IP address blocks: 103.168.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Validity
Not Before: Sep 18 08:42:43 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6326da03-5a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:90:d1:60:0e:30:46:2d:5a:3a:77:0b:9c:
3c:bc:0a:f9:9d:2d:0a:44:01:92:fb:2d:ff:6a:6d:
0c:b8:b3:90:5e:39:b5:7e:db:99:8d:7c:58:a8:67:
9e:17:25:bd:e9:e6:99:6e:34:32:86:47:b8:d9:8c:
72:38:7f:9f:81:4c:7d:0d:3d:66:2d:c7:7a:95:a3:
9f:0f:4f:61:78:51:0b:da:13:0c:83:8f:70:1d:08:
7a:d5:65:a1:c7:df:78:5e:81:81:3b:50:30:87:52:
d4:86:86:d5:b3:ec:37:ec:2a:11:18:42:f3:2c:4c:
5e:fd:f5:c9:e3:8b:e8:de:b8:18:8e:4b:57:dc:29:
04:ba:91:01:fb:96:f8:a1:b8:72:58:4b:58:1a:8d:
90:16:5a:94:38:23:24:a3:22:53:66:61:24:8f:5c:
ba:7b:69:d2:e4:e3:f5:9c:26:c6:44:26:b1:66:e2:
3b:09:cc:2a:38:4e:2f:e6:e4:f1:9f:3d:e7:30:cb:
af:8f:67:4f:b8:65:66:22:cc:87:2d:c9:9a:7d:e7:
b0:ee:b1:f3:25:59:c5:27:33:3a:0a:36:25:f2:24:
cf:76:8b:e6:96:e2:37:3e:89:66:34:50:a6:bc:54:
89:35:8e:31:ea:8d:97:bc:f3:85:0e:b6:ba:b0:7f:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:FC:CE:4F:E0:93:6C:8E:B7:37:B8:D3:20:7E:F2:D6:31:48:36
X509v3 Authority Key Identifier:
keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/DC75AAA0372D11EDB1059640C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.91.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d5:ab:86:fc:80:20:41:d2:5b:8b:68:9c:e0:bc:02:d8:3d:
6c:70:9e:fb:bb:57:8e:f6:34:8d:e1:8e:93:1c:2b:fa:2e:2c:
43:8e:df:de:ef:6d:40:11:32:3f:85:b4:2a:a1:3d:d8:51:09:
61:72:cd:60:d2:54:5c:5a:67:87:7b:e6:5d:19:fc:cb:15:2d:
16:72:0f:42:cf:a1:88:c8:a8:56:5f:2d:4c:12:44:9b:56:54:
13:82:1b:a4:da:b4:ba:94:4a:d6:35:2c:53:6d:c9:d1:8f:33:
25:2c:71:96:71:be:5f:44:09:ce:b5:01:31:9b:53:9e:5a:7f:
6e:0e:89:b5:85:13:90:23:11:24:4a:88:ba:32:62:1c:e9:29:
6f:e7:af:04:25:7b:74:54:14:64:44:cf:99:e0:b2:69:22:26:
ce:0b:48:a6:f3:46:6b:b1:85:cf:93:b5:52:fa:0a:29:03:07:
c4:3c:95:0a:9f:4c:64:45:6e:17:a1:5d:c6:40:df:53:51:23:
4c:fd:73:a7:bc:f9:f1:3e:d7:a4:8a:25:33:ae:e8:0e:a5:37:
b5:7e:50:d6:7f:6f:ab:0e:00:71:f3:3a:9b:bd:36:cb:64:ff:
50:e5:d4:e2:1e:27:d5:a3:b1:40:40:d7:f6:55:af:07:23:30:
ab:2a:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org