Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/4155B84A5B4911ED8862970DC4F9AE02.roa
File: 4155B84A5B4911ED8862970DC4F9AE02.roa (raw, json)
Hash identifier: YfeinwodUk2AfeRt8l0l4hufMwIGB5uWGSMz+Hin6mk=
Subject key identifier: B7:7B:68:72:62:68:6C:A8:43:C8:C7:03:9A:1F:A5:9B:CE:41:07:3D
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 05FC
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/4155B84A5B4911ED8862970DC4F9AE02.roa
Signing time: Thu 03 Nov 2022 07:29:31 +0000
ROA not before: Thu 03 Nov 2022 07:29:31 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 140733
IP address blocks: 103.40.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1532 (0x5fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Nov 3 07:29:31 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63636dda-129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:4e:83:b8:e1:e5:e8:e8:b5:25:06:9a:2a:
79:ea:ec:63:aa:79:54:ac:c1:9d:3b:28:a5:24:e1:
a9:f0:65:b7:e6:c6:8c:4a:48:5b:bd:ab:2d:3c:b2:
d1:58:c9:49:65:3d:6a:a8:aa:01:91:7c:bb:5f:60:
93:13:00:fe:0f:98:79:88:77:52:81:36:ad:79:2c:
d5:2e:ad:f7:73:33:a3:be:1b:6b:d5:b9:49:0f:9b:
a4:26:bf:60:f7:f4:8b:c3:4f:bd:97:91:31:80:84:
f0:9c:e2:20:fb:c3:c0:6d:a2:79:77:38:7b:83:5f:
03:00:fc:7f:e6:95:1d:f9:24:71:4b:76:0c:f5:19:
ca:4c:c5:d7:a4:97:0c:2f:a6:f5:26:0e:51:97:6b:
87:60:7c:ea:37:54:d0:83:90:a0:36:10:62:c6:09:
13:20:a3:f5:ea:77:aa:92:94:b9:95:d3:7d:e4:b4:
59:ec:d3:08:76:07:64:52:62:0b:e6:99:c9:39:50:
a5:04:59:5c:26:b2:d0:6a:a8:4a:64:87:93:2f:ea:
0e:59:f5:05:8c:ba:aa:3a:6c:e9:fa:80:88:8f:24:
8d:6c:21:ee:91:59:70:a0:a1:e5:7e:e0:28:9b:86:
94:52:34:23:4b:b2:54:76:4d:9d:02:fd:c4:d5:08:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7B:68:72:62:68:6C:A8:43:C8:C7:03:9A:1F:A5:9B:CE:41:07:3D
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/4155B84A5B4911ED8862970DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b3:e9:5d:ec:5b:5b:22:17:51:62:06:d0:02:20:74:52:ec:
47:54:cb:9b:21:8b:f8:ec:1e:cd:dd:36:6f:41:91:8d:f2:a9:
af:99:8b:c5:60:1d:4d:66:38:a4:3b:3c:37:35:da:f4:b2:bb:
b9:46:b8:2e:67:4d:4d:24:ec:03:db:d3:3e:10:67:a2:d1:71:
e8:7d:ba:e6:5f:57:09:41:78:c4:53:b7:c4:31:a1:b9:ba:7c:
98:ef:48:f7:5a:29:19:92:80:ec:8f:5d:3b:64:c5:0b:15:2b:
26:6b:98:7d:15:90:70:c7:f4:20:b0:55:b5:72:c0:a8:e9:cb:
43:98:d4:49:cf:9e:71:b6:53:71:63:11:09:63:49:45:aa:13:
bf:6f:86:dd:99:df:a0:2e:eb:35:eb:0b:a3:51:fb:a3:dc:7e:
21:4b:1c:82:73:3a:19:89:00:90:40:e2:2d:ad:f9:97:9d:a1:
cb:2e:37:d3:d5:70:f6:41:c8:c1:dd:36:8e:b8:f1:f8:92:38:
4c:1c:b4:fe:e6:04:14:3a:4b:ac:d9:71:91:b3:9b:da:24:73:
3c:a6:88:e1:b7:07:f0:c1:de:e9:f6:64:c1:fe:62:e3:78:b6:
4f:ca:a2:29:25:ef:64:d5:8c:db:a9:56:22:75:57:43:c2:b0:
25:c6:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org