Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/662BFF76737811ECA44A8086C4F9AE02.roa
File: 662BFF76737811ECA44A8086C4F9AE02.roa (raw, json)
Hash identifier: eYwfzVwKF5DqAGlBUB4JPFB48wsfk96+WDLWxbl+vts=
Subject key identifier: 51:19:58:FE:51:C2:B0:E5:58:83:3D:92:02:91:2B:0C:3B:80:55:EE
Certificate issuer: /CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Certificate serial: 01B9
Authority key identifier: 0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/662BFF76737811ECA44A8086C4F9AE02.roa
Signing time: Tue 16 Aug 2022 16:22:51 +0000
ROA not before: Tue 16 Aug 2022 16:22:51 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 40065
IP address blocks: 43.255.38.0/24 maxlen: 24
103.239.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91946AB/serialNumber=0B198D3B8D1CD2AF5BFCE4BC36D0868D6740B491
Validity
Not Before: Aug 16 16:22:51 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62fbc45a-479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:ea:b5:06:31:82:31:d3:54:89:67:5a:8c:
31:b6:bb:fc:31:69:d8:1f:42:bd:3b:27:a4:1a:07:
01:60:79:d3:b4:bf:0e:88:4e:21:1c:2c:e4:a6:cf:
d2:61:d9:7b:ff:bb:be:d8:49:61:63:26:be:98:8b:
ce:81:6a:84:b2:99:c0:2c:c8:71:74:d6:67:72:a1:
7f:58:73:65:92:2d:49:4f:c3:1d:ba:bb:cd:19:07:
1d:21:2f:15:98:05:13:51:62:84:fc:e2:88:d7:74:
bf:3a:77:be:22:04:f1:2e:c9:3f:f8:7e:11:03:67:
b8:d3:71:de:e5:54:e0:f8:85:77:52:15:a4:18:c4:
c6:ff:06:53:81:10:d1:36:e9:e0:23:02:72:b0:fb:
93:04:13:44:33:6d:68:46:2b:5a:d4:30:a5:13:3b:
58:f1:30:ef:00:00:28:2e:c4:ae:f7:16:9d:13:90:
e9:f6:7f:39:6c:de:98:c0:dd:33:e4:06:35:66:ae:
c6:ac:fa:7e:34:89:5d:86:13:f5:2a:e9:6f:79:97:
6b:6a:a5:a0:a5:4e:19:d6:f1:20:ed:5c:21:86:a6:
e3:5b:a1:3a:1d:fd:b4:89:02:bb:a8:3b:2b:bb:1e:
a3:41:29:52:e2:30:c9:cf:21:b5:01:85:e5:c1:fa:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:19:58:FE:51:C2:B0:E5:58:83:3D:92:02:91:2B:0C:3B:80:55:EE
X509v3 Authority Key Identifier:
keyid:0B:19:8D:3B:8D:1C:D2:AF:5B:FC:E4:BC:36:D0:86:8D:67:40:B4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/CxmNO40c0q9b_OS8NtCGjWdAtJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxmNO40c0q9b_OS8NtCGjWdAtJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91946AB/8534E9AE737411ECACAFE832C4F9AE02/662BFF76737811ECA44A8086C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.38.0/24
103.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bf:16:fa:00:b3:24:23:c2:d2:0d:35:db:d8:88:c2:3c:83:
77:00:f6:15:63:4d:48:cd:2c:17:43:10:3c:f9:40:62:f7:84:
71:57:cc:6f:29:cb:33:7a:c6:25:6d:40:28:1e:2b:2e:8e:5c:
17:c2:c7:c7:b9:22:a6:b5:2e:4e:41:50:21:15:29:d9:40:5e:
6a:f1:ba:82:ac:6e:f6:d9:37:17:a3:f2:b9:b4:3a:6a:1a:78:
bc:69:c2:11:91:04:cc:10:4f:8f:62:c9:b7:ff:d9:87:b9:de:
71:b4:fb:18:83:31:34:0d:f8:79:27:2e:ee:09:39:bd:32:74:
ad:e5:3b:5e:e0:9e:32:44:cc:51:ed:b3:8a:cd:e7:c4:ba:38:
26:fc:42:29:ca:1c:ba:27:ca:cf:8c:4d:86:1b:4c:1a:fb:06:
28:58:fb:21:70:16:69:13:ca:0e:3f:3e:00:5e:52:b6:3a:29:
d3:5d:ec:16:1c:13:ca:a1:e6:61:e5:a7:bc:f4:f0:16:47:8d:
3b:1a:91:0c:82:aa:0b:0b:2b:04:09:b8:07:00:25:82:19:44:
43:59:02:26:a7:fb:79:c8:06:e8:57:50:60:f0:8c:fd:ee:ec:
5e:ce:e8:8c:cf:c9:55:e2:d5:80:b1:23:99:89:c8:9d:35:a9:
d7:4b:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 06:15:51 2023 by rpki-client on console-ams.rpki-client.org