Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/BE50B3FC38AF11EDA9A01982C4F9AE02.roa
File: BE50B3FC38AF11EDA9A01982C4F9AE02.roa (raw, json)
Hash identifier: +FZ+lK7w7pDeUMZfCvt3P5RlQpzJ/CvZtjUIjQmnwuo=
Subject key identifier: 74:C0:7D:C9:2E:9B:7D:5D:EB:D8:B1:C1:BB:35:5E:E8:7B:12:F9:44
Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial: 91
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/BE50B3FC38AF11EDA9A01982C4F9AE02.roa
Signing time: Tue 25 Oct 2022 00:54:32 +0000
ROA not before: Tue 25 Oct 2022 00:54:31 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 147001
IP address blocks: 103.190.178.0/24 maxlen: 24
103.190.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Validity
Not Before: Oct 25 00:54:31 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=635733c7-050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:7e:02:18:7b:fd:ae:1e:1e:ee:0c:dc:cc:
dc:ef:89:2b:4e:71:b2:75:a4:47:5e:d3:f5:01:22:
58:54:61:53:21:2f:ac:b3:a3:f4:69:8b:4e:3f:eb:
83:95:41:dd:1b:02:af:fd:cb:a6:a6:09:81:84:5c:
0e:08:d0:4e:91:d7:9e:eb:2a:e9:b5:f7:16:37:43:
2c:7b:df:47:6c:d8:4a:24:8b:e8:b8:be:49:ad:c4:
de:3b:ba:e4:5c:9f:ce:65:c8:7a:c6:78:84:3d:a2:
47:87:1e:f5:5f:11:f1:02:18:04:f8:61:f8:3e:6c:
8c:64:61:82:c8:5f:77:f7:b7:6d:0e:8d:c0:00:6c:
64:d6:4a:53:f9:cc:6f:e0:9f:5b:b8:6e:7d:7c:be:
86:26:37:db:49:e0:c1:5d:71:2b:af:96:af:1b:f5:
07:6d:eb:1b:e8:87:59:7a:fb:58:7e:26:9c:96:c0:
92:26:da:7a:96:d8:b0:71:8a:b9:c7:24:8f:06:59:
43:f1:38:4d:6b:0a:af:bb:39:46:ec:47:e3:4c:9e:
ce:37:d8:9d:8e:64:b8:72:5b:02:1c:73:28:aa:09:
27:cf:9d:c2:c9:e6:39:88:cf:e5:05:36:4e:cf:20:
62:57:e0:c6:04:a4:36:f8:f9:37:31:d1:ea:bc:dd:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C0:7D:C9:2E:9B:7D:5D:EB:D8:B1:C1:BB:35:5E:E8:7B:12:F9:44
X509v3 Authority Key Identifier:
keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/BE50B3FC38AF11EDA9A01982C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.178.0/23
Signature Algorithm: sha256WithRSAEncryption
20:c4:a5:e1:84:73:28:5b:63:d7:1f:1c:97:85:4c:92:fd:e4:
63:3f:eb:73:f5:aa:39:2d:b2:ad:3d:dd:5f:b6:64:2e:f6:75:
78:c3:1f:b0:c6:84:10:87:37:15:bd:8f:4b:cb:13:02:c4:90:
6f:01:fe:3c:7b:4e:69:78:91:4b:0a:a5:61:ce:3c:e3:12:f7:
d6:f3:42:70:7d:c3:00:32:b7:0d:25:90:fc:08:40:46:66:1f:
97:0b:a9:85:47:a6:fe:70:22:53:a9:dc:eb:f2:72:5b:98:6c:
18:63:91:fd:f1:d4:27:ca:2d:60:80:11:0c:e3:6e:d6:5c:0f:
3f:56:84:52:bd:88:9a:d8:1a:28:37:4d:34:a8:85:0e:0a:2e:
31:9c:9e:52:ec:49:fa:6e:00:14:b1:cf:f5:ef:01:d2:68:8a:
4d:02:c4:ef:87:09:ac:6b:5c:3d:b6:cb:00:99:a2:32:b4:86:
4f:7a:50:93:41:d0:cf:26:d9:08:f3:d4:86:47:38:05:02:67:
13:34:c5:f4:8d:ca:d0:fb:98:5c:fe:a3:95:f6:06:d8:95:46:
9d:7d:c3:cd:09:49:f8:31:56:88:8d:04:43:8b:1b:bb:42:64:
27:db:09:89:8a:ef:fd:80:f9:67:65:c6:c8:73:fe:fa:77:66:
1f:b0:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org