Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3F4994CC5B4911ED8862970DC4F9AE02.roa
File: 3F4994CC5B4911ED8862970DC4F9AE02.roa (raw, json)
Hash identifier: cQqxHD21YHjW6v1FSCEVseKwor+m6OA3KfRKUsfPmSc=
Subject key identifier: 70:93:7D:60:1A:ED:97:E6:40:06:31:24:39:64:02:64:E2:64:27:40
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 05FA
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3F4994CC5B4911ED8862970DC4F9AE02.roa
Signing time: Thu 03 Nov 2022 07:29:27 +0000
ROA not before: Thu 03 Nov 2022 07:29:27 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 134176
IP address blocks: 103.40.100.0/24 maxlen: 24
103.40.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Nov 3 07:29:27 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63636dd7-1239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:62:e4:8c:9d:e6:bf:3b:65:f9:38:8f:b5:
87:2b:c7:c2:f5:9a:12:95:94:6a:05:3f:bb:cd:15:
90:5f:84:41:c1:10:fd:c2:d4:99:44:e0:67:b1:84:
6c:2c:a0:50:d4:16:97:c6:46:2a:45:dd:08:ca:4c:
fc:65:30:69:ec:75:c8:ff:a4:14:ff:ff:e2:bf:26:
bf:0c:86:82:bb:89:ed:32:e8:a2:ec:1d:4c:31:a1:
56:8a:f5:24:c5:2a:3e:ef:1e:31:a7:58:b4:d1:9f:
f2:2a:9b:23:f4:83:e9:2b:b8:3d:7c:62:61:cc:0c:
3a:bf:05:a2:60:d6:82:c4:fb:ee:87:81:a7:2f:45:
c5:80:f5:ef:92:ac:44:38:c7:73:5c:c1:ec:e9:d9:
16:3e:c8:43:1f:b1:d7:96:06:dd:b0:73:f2:a9:31:
70:c3:c1:ca:18:0c:4c:a1:a5:05:bb:1f:0b:04:3c:
52:47:89:10:af:5f:a1:20:90:24:94:67:b6:57:3b:
aa:5e:a5:c9:63:b9:06:03:92:52:64:cc:0a:1a:c8:
10:72:8a:68:c8:67:e0:b8:cb:60:9d:e9:4d:82:f2:
70:48:55:8c:ee:b0:48:20:20:ba:2d:59:8b:11:d4:
21:8c:38:7c:bd:ed:a5:cc:89:a1:80:46:5a:62:9f:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:7D:60:1A:ED:97:E6:40:06:31:24:39:64:02:64:E2:64:27:40
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3F4994CC5B4911ED8862970DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.100.0/23
Signature Algorithm: sha256WithRSAEncryption
95:19:62:4a:a9:c9:e8:4f:8e:5a:b7:a3:c8:86:f1:2c:9a:a9:
d2:a0:8d:fb:66:9d:cb:de:96:4e:8a:b6:db:ae:39:85:19:f2:
60:71:02:6c:88:aa:0f:99:53:5c:f1:82:1f:8d:31:7c:f6:9f:
ac:7a:a1:a4:5c:a7:62:b2:51:c4:c2:16:fe:9e:86:39:7f:bf:
30:cf:2a:20:ce:67:c7:66:e9:06:43:cb:ea:43:50:5b:d4:3f:
39:58:c9:20:8e:8f:bd:ab:91:c2:a1:d1:50:73:94:fc:5a:2b:
a5:84:b0:09:7f:cf:4f:37:b6:49:68:ad:8b:90:a6:2e:6d:c5:
9c:ec:03:e6:3c:37:34:1c:37:4e:4d:7a:ca:51:5f:87:ab:5c:
be:44:97:80:95:dc:42:00:93:99:e5:39:2c:60:0e:b5:69:65:
9e:73:da:d4:cf:d2:8b:c4:f9:41:3e:90:8e:ea:ef:f3:f1:14:
ec:09:4a:4d:9c:9c:22:ef:73:b7:fd:e2:c8:78:28:d6:87:1c:
b1:27:d8:f4:65:39:fb:65:3b:b1:8d:82:0d:3a:93:ae:79:49:
11:f6:14:1c:2f:6e:8c:90:f9:d3:16:72:6d:51:78:b3:ab:9b:
a9:07:79:16:df:41:d4:7d:0e:f1:d1:8e:10:1c:04:ec:eb:90:
09:87:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org