Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/6EF0C8D66F8E11EDB871503FC4F9AE02.roa
File: 6EF0C8D66F8E11EDB871503FC4F9AE02.roa (raw, json)
Hash identifier: Pk138xtOIM1GW0gjmO8/iRt7rObEoPpFjxkHZ9wmoxo=
Subject key identifier: F9:AA:12:F5:F6:FE:79:52:B8:3B:C1:BF:C4:E1:90:6B:FE:1A:F0:7F
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 02
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/6EF0C8D66F8E11EDB871503FC4F9AE02.roa
Signing time: Tue 29 Nov 2022 02:35:06 +0000
ROA not before: Tue 29 Nov 2022 02:35:06 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 147001
IP address blocks: 103.46.184.0/23 maxlen: 23
103.46.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Nov 29 02:35:06 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63856fd9-82fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:e9:82:0d:77:ad:c6:c3:b8:9d:0c:2a:2d:
5c:67:d7:e9:16:e9:72:ec:43:2e:fa:7a:f8:da:77:
82:95:e6:df:5f:88:15:b7:50:dd:b3:79:bc:0b:5a:
c2:83:da:e3:84:00:fd:e7:af:51:5d:0b:ef:39:12:
f4:c1:13:8e:e8:c0:d4:27:50:e5:fd:b0:39:11:e9:
0e:99:7d:5f:b8:fd:51:93:12:7b:3b:2e:7c:43:a1:
93:6b:39:6b:9e:2e:07:9b:7c:ec:e5:0c:3c:a7:a0:
4d:80:29:0a:f5:f9:77:4a:66:af:98:22:c3:c6:3c:
86:e2:3c:da:b6:50:f0:e4:69:5f:d6:4d:a0:f4:10:
ac:1f:1c:ce:3b:ed:fe:66:2d:f8:b0:a1:18:ef:9e:
11:89:a8:b4:82:bd:bf:63:6b:3b:72:12:09:d5:7d:
e7:34:ab:3f:a1:7c:3a:f4:02:aa:2a:0d:52:e5:fb:
51:af:ef:9d:68:48:5f:ba:a5:8c:a9:47:8b:60:36:
49:84:d0:17:bf:af:35:52:59:c1:a3:f6:86:e3:d0:
a6:03:b9:e9:c8:59:5a:29:4b:f5:a7:0c:7e:23:76:
1e:14:3e:a4:8b:28:9b:2e:6c:3e:84:c4:74:00:b2:
2f:7d:7a:e2:c1:02:c5:8d:07:11:70:50:c6:1c:24:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AA:12:F5:F6:FE:79:52:B8:3B:C1:BF:C4:E1:90:6B:FE:1A:F0:7F
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/6EF0C8D66F8E11EDB871503FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.184.0/23
Signature Algorithm: sha256WithRSAEncryption
64:41:2d:48:1a:d8:9d:4f:ec:8b:ee:6a:44:eb:42:54:9c:96:
c9:22:be:04:90:1f:9a:70:63:8f:4e:10:d1:15:17:f9:01:54:
5c:e8:b4:ee:81:6d:c0:87:ac:b5:f1:db:05:06:da:cb:56:56:
79:2d:6e:7c:c1:34:4e:7c:4b:7d:02:f8:48:b0:cf:ff:08:bf:
85:e2:57:d9:41:e1:6e:8c:d9:6b:24:51:c8:80:42:83:5e:71:
65:60:25:0b:b0:07:16:e4:af:02:94:0e:16:47:88:34:0f:39:
41:f6:aa:f2:16:b3:bd:46:19:6f:18:4b:c4:75:97:6c:01:49:
8c:5d:c3:eb:94:7f:df:4e:92:e0:57:36:cd:d4:fd:34:f9:ef:
c8:3f:e4:36:99:d4:3c:92:3c:12:db:51:ab:86:b3:cd:c8:b8:
02:27:05:d3:41:28:a0:2e:16:09:84:bb:28:e9:5f:67:88:81:
ab:3f:51:0e:cf:f7:0f:d2:db:62:82:3e:02:5a:23:f0:a0:27:
85:3b:11:bc:3c:1e:58:a4:65:ef:b8:a2:5c:68:6f:12:3f:1f:
f3:6d:4d:61:d8:9d:63:d1:97:94:f6:e3:97:0a:be:76:d4:8e:
25:21:90:4a:a3:73:16:b4:df:7d:ed:e3:c1:90:26:98:e0:08:
c9:e2:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-ams.rpki-client.org