Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7B9A91FCDCAA11EBB87DAD44C4F9AE02.roa
File: 7B9A91FCDCAA11EBB87DAD44C4F9AE02.roa (raw, json)
Hash identifier: AAgVuUZT9l4SSOkgvKpPt7wk+5mo8dQhA0ttLzq3A10=
Subject key identifier: 5E:4B:FE:8E:7C:34:8D:CF:66:92:F9:AC:06:6B:FD:6F:35:9D:1A:7C
Certificate issuer: /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial: 033F
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7B9A91FCDCAA11EBB87DAD44C4F9AE02.roa
Signing time: Wed 24 Aug 2022 02:21:31 +0000
ROA not before: Wed 24 Aug 2022 02:21:31 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 138385
IP address blocks: 103.169.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Validity
Not Before: Aug 24 02:21:31 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=63058b2b-5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:79:d7:51:fe:1f:df:6b:67:33:81:f8:ee:
d5:4d:27:d7:21:de:45:0c:1b:98:1a:de:10:b5:fb:
43:31:ef:41:d5:74:d0:5b:83:e9:24:b5:56:bb:c4:
6c:cb:8f:f3:ce:b2:98:cc:78:db:ea:46:dd:ad:69:
6a:83:4b:26:20:ff:c2:7f:7c:75:bd:76:72:c1:83:
3e:fb:7d:76:cb:b9:83:a5:39:46:b2:17:c0:c9:5c:
8c:38:02:17:f3:02:aa:77:83:1f:68:ab:75:c2:b7:
08:e2:53:4e:ec:12:9f:a8:0d:99:87:af:34:c3:38:
c7:3a:ba:ed:d9:b0:1a:45:a7:c8:61:d2:b7:c2:07:
62:ec:07:2e:59:30:ff:42:1a:a7:e2:93:d6:c3:6a:
24:f0:70:0e:64:61:bf:05:61:93:29:7b:b5:cb:72:
97:f8:06:21:0d:f6:61:fa:b4:54:12:1f:70:31:cc:
99:7d:da:49:af:8e:af:47:dc:c7:fd:68:9e:00:ed:
98:f2:a0:45:1b:c4:f5:80:f3:d4:20:47:a3:7f:25:
4e:8f:62:82:4e:0f:0d:6d:aa:05:cf:1e:ec:4e:71:
f1:48:41:2d:9d:26:df:69:07:19:4a:88:11:61:de:
8e:c9:b8:a6:7c:6b:e6:c7:df:73:92:7d:d3:ec:37:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4B:FE:8E:7C:34:8D:CF:66:92:F9:AC:06:6B:FD:6F:35:9D:1A:7C
X509v3 Authority Key Identifier:
keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/7B9A91FCDCAA11EBB87DAD44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.95.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:cb:d3:bf:db:26:a2:87:ce:9c:cb:52:07:da:6a:5e:ca:ed:
dc:b8:db:1f:b1:92:47:ad:41:80:57:ca:73:bf:88:94:53:5f:
e5:50:12:f8:4f:86:96:6d:88:66:76:e9:51:61:a3:39:9b:04:
6c:6e:59:76:10:a7:dc:c3:17:31:7d:cb:02:ec:ec:e7:e7:80:
67:ed:88:c0:cf:49:f1:69:a7:18:d2:11:30:5c:0e:cb:80:91:
7c:23:2c:ac:2a:20:bc:6f:70:22:b9:ef:40:47:cb:9f:93:12:
ae:61:9f:a4:aa:35:81:82:e5:c5:e9:eb:92:a6:bf:fd:37:5f:
fe:5e:7b:29:9c:40:dd:23:b4:95:fd:c1:83:6c:af:10:b1:b5:
53:32:a8:a6:e9:7c:69:ed:74:cd:58:ad:f0:a8:e7:34:27:67:
70:d0:84:1e:fb:08:5d:a9:77:55:04:93:a2:4e:6f:09:05:2b:
b7:fc:cf:1e:89:a5:c4:c8:5a:bd:67:76:43:c1:f1:cd:0a:82:
80:a2:1d:96:ee:cc:98:a0:30:e7:c6:0d:7c:cc:de:19:2e:3a:
6f:54:c4:71:ee:37:88:a5:36:a8:ae:77:51:14:01:57:67:2f:
fa:f7:f9:7a:30:b5:28:51:2e:8d:03:d3:0c:00:39:be:50:4d:
cd:7c:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org