Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77D9E6EAE2F711ECAA4F4C71C4F9AE02.roa
File: 77D9E6EAE2F711ECAA4F4C71C4F9AE02.roa (raw, json)
Hash identifier: H6fEd+wGVCgfHsvRufssodoF4hevHqEpNZeXlwvgn7o=
Subject key identifier: 56:AF:F8:C1:27:E9:DD:84:A5:37:82:86:BE:84:76:75:E5:E0:9F:31
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6C4A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77D9E6EAE2F711ECAA4F4C71C4F9AE02.roa
Signing time: Wed 10 May 2023 16:23:49 +0000
ROA not before: Wed 10 May 2023 16:23:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136295
IP address blocks: 103.111.112.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27722 (0x6c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:23:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc514-44ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:5d:03:5b:86:4f:5c:0b:58:b0:6a:69:2d:
17:6c:36:90:0c:8a:a5:17:6c:5a:af:af:df:45:47:
c9:92:40:b2:a9:f8:f9:d4:3b:da:1d:d9:fe:4d:bd:
7a:89:9d:1d:83:09:17:d0:be:10:76:81:a2:42:d0:
15:a2:8f:2e:fd:e6:63:44:d1:6a:ff:f6:71:47:57:
66:27:31:3b:73:43:af:77:b4:33:ae:af:04:31:1a:
38:f9:e1:be:ab:9e:7a:26:49:68:e4:94:e3:0f:9a:
09:43:56:47:a5:89:86:69:b2:0b:f9:8a:90:88:ec:
20:4d:d7:5b:82:50:c3:e1:3a:f1:a2:77:10:a1:79:
64:a8:36:42:55:ca:f9:12:75:71:d4:b2:de:86:e7:
bb:58:c4:b0:6f:a2:3e:d4:7e:e4:59:ca:93:35:53:
9f:3e:5a:57:19:74:6d:00:8f:c5:8a:80:2c:ee:b3:
cc:b6:97:81:06:ba:56:bc:81:83:70:a8:fd:90:eb:
db:05:03:93:2c:80:70:78:ed:c7:dc:aa:5e:de:77:
9f:49:77:8e:e8:24:6e:04:f3:5b:34:40:7a:14:d1:
52:5b:c1:15:98:a8:20:00:49:b8:f5:e7:41:88:ea:
5c:42:2a:f3:4c:6d:36:b6:70:b8:62:9f:cd:e2:67:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:F8:C1:27:E9:DD:84:A5:37:82:86:BE:84:76:75:E5:E0:9F:31
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77D9E6EAE2F711ECAA4F4C71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:0f:7f:54:d6:10:1f:44:5f:71:b0:32:1f:44:25:10:93:6a:
31:f6:34:57:ba:2a:1e:77:67:57:dd:b9:6e:1c:4d:5a:dd:42:
1a:b7:7b:8f:d3:0c:2c:e6:52:fe:05:32:8f:fb:19:20:fc:b8:
13:f9:ff:10:80:62:5d:9c:15:86:9d:47:cc:d2:41:79:68:aa:
69:77:ba:15:cc:14:2c:9e:af:64:c9:5e:7d:9a:43:0d:51:65:
89:cc:1b:fe:1d:31:fc:20:16:64:ca:65:b1:1e:3a:b1:9d:df:
d6:50:1a:ff:ec:73:c6:c0:13:3a:cb:b4:fd:37:53:20:33:74:
f6:9f:6b:6e:df:15:f9:90:8b:e7:f3:a6:6b:de:09:9a:28:65:
58:26:49:7b:bd:83:e4:27:a5:59:21:1c:d4:b9:c3:1d:11:ec:
a5:68:e8:8c:56:f4:21:6c:6a:d3:aa:fb:30:73:1f:48:9e:11:
0b:d2:4a:96:f4:d6:c8:81:24:6b:55:29:d9:ee:f4:7b:a3:fc:
38:85:30:c8:d0:41:6d:87:c4:0a:c5:f7:ec:f8:9d:fc:63:00:
ac:fd:23:42:06:34:3d:fd:32:4d:d3:17:dd:6d:0a:8c:06:ae:
d2:67:cc:7e:e9:d0:ba:b9:ed:07:00:3e:72:c4:ea:5a:bc:df:
b1:6e:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 06:33:35 2023 by rpki-client on console-fra.rpki-client.org