Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/0A511E42A6DB11EDAC813B4AC4F9AE02.roa
File: 0A511E42A6DB11EDAC813B4AC4F9AE02.roa (raw, json)
Hash identifier: lC+Cp8FPll34aWxFV4Rj3UNbrUcINx8LAK02yEZ0xmY=
Subject key identifier: 32:8F:C0:F4:D7:7F:73:C2:8F:8D:F8:49:25:EC:95:9C:E5:DF:11:BB
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 040E
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/0A511E42A6DB11EDAC813B4AC4F9AE02.roa
Signing time: Tue 07 Feb 2023 11:32:02 +0000
ROA not before: Tue 07 Feb 2023 11:32:02 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 7018
IP address blocks: 103.79.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Feb 7 11:32:02 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63e236b2-c71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:ac:2d:20:df:b6:47:db:fc:cf:20:06:2b:
4d:e7:c9:84:75:55:1a:f5:71:bf:8f:df:94:cc:0a:
c6:34:e9:69:41:dc:74:16:df:f7:42:1c:da:e3:70:
8c:fb:fd:dc:bd:fa:11:2c:25:3c:44:8d:e3:79:f9:
8b:93:83:81:77:4e:f1:f2:fb:02:23:b2:c2:fe:18:
eb:ff:26:5f:5f:63:fe:18:a8:c9:92:96:7d:30:36:
b7:92:c5:98:62:5f:55:35:39:a8:3d:e9:9a:70:a9:
5a:01:26:07:13:42:80:10:b4:94:05:8b:b7:44:94:
41:74:fa:20:12:b5:e1:79:d7:6a:43:22:11:59:be:
6f:39:9d:55:bc:67:ce:f6:e1:05:5e:5f:c9:4f:1b:
73:f2:9b:59:de:5e:f4:ae:74:a3:dd:e6:a6:d6:1f:
59:28:aa:5a:89:4e:eb:b2:67:47:22:67:e5:9c:9d:
52:fa:8f:d7:7b:02:59:32:05:52:ce:04:5f:6d:b0:
d2:0d:6b:ec:63:b2:d2:14:c7:6a:ee:21:4c:7e:eb:
b1:b0:e1:2e:b8:a6:c4:72:ec:bc:08:b0:86:c7:aa:
f0:9b:36:9e:b5:d1:1c:87:3e:27:46:73:c1:5f:45:
fb:c6:e0:94:55:f8:13:5c:61:46:ab:d4:15:3b:79:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:C0:F4:D7:7F:73:C2:8F:8D:F8:49:25:EC:95:9C:E5:DF:11:BB
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/0A511E42A6DB11EDAC813B4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:24:64:c2:a0:c1:3e:e3:c8:9b:6b:bf:14:be:a7:72:01:26:
37:0f:2a:e9:28:3a:e2:6f:dd:37:fa:a1:2b:49:2f:91:12:bc:
32:84:08:01:9d:f0:a8:c8:60:be:43:1e:19:c8:a0:ce:01:a8:
72:df:1b:db:f7:02:af:66:d3:c2:77:fa:dc:33:38:6d:0a:64:
7a:e6:9a:1d:e1:b1:af:9a:8a:78:c0:f1:9a:93:46:19:11:32:
38:b8:73:3a:c9:97:66:7e:69:66:83:35:75:f2:37:01:fb:c9:
eb:1a:80:96:99:a1:09:8d:5e:2f:85:2f:9c:a7:01:1e:6a:16:
2b:91:12:27:97:46:08:5a:e6:44:40:d1:73:37:94:7f:6b:9c:
9b:a0:3c:50:68:b8:b6:4d:13:d8:a7:f6:43:36:ef:fb:9d:ff:
b6:dd:a5:0c:47:3a:d2:c4:9c:b6:d6:01:d6:cf:0a:31:8d:36:
1d:7e:c9:f2:a9:9e:81:73:b4:b2:9a:90:ff:c0:c1:5f:b2:32:
3c:54:e4:10:5e:c8:36:cb:2a:1e:4b:96:01:30:55:3f:b8:2b:
e2:77:f8:1b:ba:d0:51:c0:fe:dc:ee:7f:c0:33:08:90:22:ba:
c6:d5:1b:55:35:5b:81:49:10:ab:84:d6:53:d1:5c:0e:41:2b:
6b:7b:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org