Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/5E8DCB70272711EC88E40644C4F9AE02.roa
File: 5E8DCB70272711EC88E40644C4F9AE02.roa (raw, json)
Hash identifier: Sr9s+nFWBicEBRovuQ85jZF/6wwdb+QBSzSU/2nowag=
Subject key identifier: 56:E8:E3:16:1C:24:AF:8B:D8:B7:8F:36:15:9E:A5:67:F1:DC:9B:D4
Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial: 0277
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/5E8DCB70272711EC88E40644C4F9AE02.roa
Signing time: Wed 17 Aug 2022 15:22:03 +0000
ROA not before: Wed 17 Aug 2022 15:22:03 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 141008
IP address blocks: 103.154.196.0/24 maxlen: 24
103.154.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Validity
Not Before: Aug 17 15:22:03 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=62fd079b-46f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:27:7e:a0:37:be:db:e4:61:d3:1f:21:b7:
7a:d6:9d:42:60:c3:a0:29:ae:95:ab:2c:e1:57:fe:
5c:67:24:4c:80:ad:ed:88:88:f6:1b:7e:95:18:c5:
06:14:23:f0:e8:b6:84:1f:4e:aa:01:f4:b0:88:b7:
ec:61:7c:8f:b6:94:ad:fd:97:ca:76:84:05:9d:d1:
1d:19:a9:8b:fa:a5:69:79:04:e9:a1:4d:66:61:62:
2e:f3:1c:3a:02:4f:9d:95:6b:ef:6c:49:b9:6a:be:
98:31:f4:0a:32:d9:93:93:32:37:ff:4b:52:6b:6e:
34:d7:fa:f5:40:b8:12:66:fd:98:1a:c1:e1:a6:a8:
05:c8:5e:5b:00:70:4d:e8:72:1f:f8:5d:4c:03:4f:
49:22:0b:80:88:6d:ce:11:e9:ac:e8:3f:9b:63:2d:
cd:ba:8f:5f:8c:7c:7a:2b:d2:79:75:39:9d:b7:6e:
36:97:b1:2f:49:ae:18:74:c9:35:ec:53:17:08:36:
bd:04:b5:68:16:a7:a8:a9:e8:8c:48:cd:07:ad:b2:
68:9e:0e:f9:e7:fd:21:d4:82:c0:e1:fa:78:10:23:
d9:74:b5:4c:39:b6:3b:23:e3:30:83:3a:10:73:02:
1f:df:b9:0d:29:a2:11:05:80:64:e8:97:bf:5a:7c:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:E3:16:1C:24:AF:8B:D8:B7:8F:36:15:9E:A5:67:F1:DC:9B:D4
X509v3 Authority Key Identifier:
keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/5E8DCB70272711EC88E40644C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c3:45:ea:e1:88:d2:79:75:52:7b:cf:be:28:fe:f9:02:62:
a9:04:1c:dd:65:15:a7:15:53:03:ec:75:8a:f8:69:00:b0:a2:
b4:1b:38:af:e6:2e:c8:6b:6c:55:69:03:38:12:df:d3:a5:d0:
25:4f:c9:11:34:fb:8f:ae:e1:7a:77:f0:b3:72:a1:ce:98:3b:
75:a8:28:f0:f6:df:d1:01:41:ca:52:6d:8e:54:f4:28:5d:a4:
17:12:94:ec:89:53:5d:de:b1:01:80:43:45:42:0e:ad:c8:d6:
b3:89:7a:67:bc:4f:67:6d:29:07:f1:f9:c7:68:f4:a1:ea:7a:
fd:46:48:8c:07:71:ca:ab:e6:3b:ac:57:fb:aa:82:08:97:45:
15:28:cc:2b:9d:f9:e5:9c:9b:c3:5f:21:12:18:67:16:b6:4d:
23:38:af:ae:fb:8d:18:ed:bc:f1:d1:af:3e:e7:ab:f4:1d:0c:
f8:7d:1b:eb:63:89:21:bd:16:6e:03:1d:6e:24:b4:99:9b:8f:
e3:71:55:b2:ad:63:6e:4b:4d:5e:2e:75:3a:c9:94:fa:22:34:
eb:c7:1f:5f:b2:d0:65:55:52:a6:b4:e3:66:0e:f7:91:b7:d2:
b5:71:d2:d0:02:a7:c2:c1:e2:14:05:42:54:c7:43:89:54:ef:
00:2e:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-fra.rpki-client.org