Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/B7F22F2A68D511EE9C77D754C4F9AE02.roa
File: B7F22F2A68D511EE9C77D754C4F9AE02.roa (raw, json)
Hash identifier: vtbt40owis7w1DS+LMEC+eZflz1l8AF+B0urkl6G6Q8=
Subject key identifier: 67:B8:38:B3:5D:5D:CE:55:85:81:06:CD:80:D2:37:CF:1D:11:D7:6D
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 04AD
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/B7F22F2A68D511EE9C77D754C4F9AE02.roa
Signing time: Mon 16 Oct 2023 15:10:35 +0000
ROA not before: Mon 16 Oct 2023 15:10:35 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.79.16.0/22 maxlen: 24
122.50.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Oct 16 15:10:35 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=652d526a-5f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:61:78:ae:0e:09:6c:6d:89:a3:0f:ff:60:
35:88:12:af:9a:38:34:61:33:09:0a:b9:54:09:51:
a4:70:b7:6e:c3:6d:8f:bc:53:25:70:0d:60:00:01:
b4:bf:98:f9:74:25:80:c9:a2:68:8a:e1:ae:84:86:
0f:14:33:10:c5:53:df:36:bc:8a:fe:be:65:5b:48:
0e:cc:73:f0:f1:57:08:c7:fa:c8:c1:ee:de:07:ac:
07:8a:4d:72:0a:6f:d0:a6:76:a3:89:44:43:a2:21:
33:d2:08:97:38:38:bc:0a:4f:8c:7d:d1:95:8f:e5:
2c:4f:f4:7b:f8:db:d2:f1:41:ea:48:e9:bc:c6:93:
b7:ce:2f:eb:98:2c:fd:40:91:a5:39:1c:38:b8:8e:
74:44:8e:cf:ac:3e:e4:e3:96:6d:11:df:1c:d4:fc:
89:b7:74:1a:40:51:8c:16:87:38:d4:49:39:62:08:
e4:1b:70:15:87:ab:51:32:dc:f4:5f:09:35:06:c5:
f4:64:1e:56:df:93:09:ba:65:9f:6f:4f:74:49:fd:
b7:96:e7:70:5f:3d:5f:39:9b:44:a5:56:e2:3d:19:
cf:40:ea:81:fd:95:c1:b5:dd:d1:03:b1:55:c2:92:
37:8e:16:a4:fe:d4:42:7c:1b:90:97:cd:6b:5d:42:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:38:B3:5D:5D:CE:55:85:81:06:CD:80:D2:37:CF:1D:11:D7:6D
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/B7F22F2A68D511EE9C77D754C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.16.0/22
122.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:86:24:9a:2a:e8:75:df:72:c2:a7:01:9a:de:11:56:b2:7f:
af:a3:23:c5:77:08:cc:2f:f4:c6:22:fe:75:e4:75:5f:7a:30:
b5:0d:9f:91:37:f7:2b:56:f7:09:1e:0b:db:57:94:c2:08:aa:
a0:a9:f2:8e:ab:e2:e0:e5:4b:98:85:64:46:81:83:86:7f:50:
42:39:78:ca:9b:f5:a0:37:7a:db:77:d7:ea:76:b6:2d:6c:0e:
c4:af:ed:4a:34:10:5a:4f:7a:88:eb:8a:ed:a4:e0:8b:a8:92:
80:8a:4d:9d:c2:2c:46:c8:68:2d:17:a4:81:06:e8:1c:9c:b2:
ba:9d:6d:5e:3c:18:92:bc:5a:30:b7:64:b1:17:5c:71:80:db:
d9:d4:4e:58:2d:69:6d:41:6b:39:6d:12:2c:4d:f3:cb:04:b2:
a1:ed:9e:33:aa:78:cc:fc:80:74:ec:29:da:c3:62:92:bf:ea:
aa:75:0d:7b:65:64:20:af:dc:6b:66:b9:4a:00:85:e6:a6:bd:
22:0c:c9:86:05:fd:a0:9f:ef:30:cc:48:39:2a:4e:0d:a1:c5:
66:48:a7:35:40:cb:27:34:03:50:15:02:04:5a:43:b7:e3:5a:
9f:45:af:63:09:c3:5c:e6:3d:03:c1:24:b6:89:fe:f5:7e:eb:
fc:49:bb:b7
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 3 23:10:19 2023 by rpki-client on console-ams.rpki-client.org