Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/AFD8F1F4134F11EBAD43D95FC4F9AE02.roa
File: AFD8F1F4134F11EBAD43D95FC4F9AE02.roa (raw, json)
Hash identifier: aDdK1qNRiDh3ZwkYJX/TtA5/2IMCuRt0hLgLibZaHzU=
Subject key identifier: 53:EA:71:9B:6C:F8:38:EA:C7:D5:A2:A3:50:FC:7E:CA:52:F6:B9:13
Certificate issuer: /CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A
Certificate serial: 07F1
Authority key identifier: 83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/AFD8F1F4134F11EBAD43D95FC4F9AE02.roa
Signing time: Fri 01 Jul 2022 09:28:20 +0000
ROA not before: Fri 01 Jul 2022 09:28:20 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 133201
IP address blocks: 103.142.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A
Validity
Not Before: Jul 1 09:28:20 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62bebe33-f3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:41:6f:e8:c0:ef:dd:84:36:50:55:20:a5:
28:93:e1:d2:b0:5b:0e:58:03:e9:17:5a:18:03:91:
8a:6b:7c:3a:1e:91:c4:b4:31:f7:af:7c:0a:21:95:
56:ed:72:f1:00:0d:30:5b:99:64:72:1a:cf:81:ec:
72:8c:90:42:41:4e:3e:5c:51:12:39:34:6d:65:70:
11:2f:fe:04:24:e4:35:c6:14:ba:0b:59:04:bf:0e:
4c:17:cd:40:8a:ed:9b:6b:cd:93:2e:6c:6a:96:d8:
d5:6b:6f:89:0e:27:67:dd:34:35:46:ce:e9:96:20:
f4:8f:5a:87:d3:80:f1:c9:56:ce:4f:c1:99:0c:34:
23:18:c8:2f:af:ea:43:10:97:ae:75:c2:ec:d6:11:
ba:5f:c9:50:ca:12:77:53:d6:88:2f:7c:83:c0:ed:
c6:82:fc:aa:61:4c:a3:c5:43:87:37:0f:29:1c:9a:
a8:6e:65:60:f7:2a:9e:1c:37:c3:6a:3a:53:3f:2f:
9b:23:ee:20:a2:6b:9d:26:e7:0b:0c:dd:d6:2a:20:
df:a2:e7:c5:8e:68:1c:db:48:fe:8a:48:40:a2:90:
73:86:b4:2f:85:5a:f2:f7:4b:a9:82:f0:24:50:04:
29:4b:9f:33:e6:bb:f6:75:0f:b8:e6:7a:bd:0b:bf:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:71:9B:6C:F8:38:EA:C7:D5:A2:A3:50:FC:7E:CA:52:F6:B9:13
X509v3 Authority Key Identifier:
keyid:83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/AFD8F1F4134F11EBAD43D95FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.230.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bd:81:c4:f5:a3:c2:34:6b:a5:9a:f8:3c:71:21:a9:a5:ac:
07:56:d9:d5:1f:32:ae:b1:ed:8b:4b:2b:8f:23:eb:2c:35:15:
2f:d7:a2:4b:1c:ff:20:c0:39:d6:66:77:bd:9e:34:e9:30:58:
c7:a5:4b:c8:33:83:92:c7:14:ae:58:4a:62:fe:67:f1:a5:61:
89:2a:bd:c2:d3:f7:5d:29:33:5b:00:52:aa:6c:2d:05:e4:d7:
c6:8b:8e:7d:07:f8:5a:38:e7:32:d9:6f:86:be:eb:7f:45:5d:
f5:e7:35:cf:4a:02:a6:9b:f1:a6:26:d8:a0:a2:ee:25:54:b6:
ef:58:b7:ca:e2:23:fe:05:76:3f:88:b1:d1:f8:19:93:16:ae:
dc:2c:32:66:d6:1c:a2:03:22:7d:0c:de:f1:3d:2f:d0:e2:7e:
0a:2b:92:4b:a9:1b:6e:01:7c:69:25:b4:92:36:10:99:23:62:
0e:29:12:6b:f5:fc:ca:ad:c1:58:85:6f:0b:2a:66:64:8a:f8:
e7:6a:66:31:7e:a6:ba:d0:4f:93:c2:b0:05:9e:58:b1:71:1d:
3d:8d:98:e9:c2:1a:0e:70:9f:53:b7:6c:29:2b:8c:d9:10:cb:
08:ee:24:4a:9d:4b:7f:a9:96:80:bc:c4:eb:c8:6c:83:29:0a:
05:2e:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:59 2023 by rpki-client on console-ams.rpki-client.org