Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/6CAFC9BABD9911ED86363B7AC4F9AE02.roa
File: 6CAFC9BABD9911ED86363B7AC4F9AE02.roa (raw, json)
Hash identifier: w9rFIRuSSr/cWpoZRB7Jdq2XiI0YGeOG1on3qijps8E=
Subject key identifier: 4F:62:1C:51:18:31:FD:C5:3E:3A:93:43:D8:68:CE:B2:D4:7C:AC:F0
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0609
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/6CAFC9BABD9911ED86363B7AC4F9AE02.roa
Signing time: Wed 08 Mar 2023 10:10:17 +0000
ROA not before: Wed 08 Mar 2023 10:10:17 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 147186
IP address blocks: 103.238.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Mar 8 10:10:17 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64085f09-c48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:97:e3:6f:65:79:92:d7:1d:94:10:09:22:
9e:f4:36:28:a0:1e:c4:b1:76:f1:28:f0:e8:1f:8a:
f9:f1:11:a8:30:d3:ed:e9:3b:b2:ea:0a:28:e8:6c:
11:60:af:b3:e1:6d:e1:ef:b5:97:0c:de:47:28:0e:
8c:00:84:54:e8:a5:57:3c:0c:35:9f:89:7d:df:25:
03:51:74:00:ff:18:db:59:fb:d2:28:75:3a:70:7a:
76:ab:f4:87:6c:d1:58:49:d5:47:ec:d3:40:a9:bd:
17:17:2a:e8:90:40:83:5b:49:2e:c2:fc:b2:86:53:
5e:e9:38:7f:00:86:40:cf:85:8a:1e:b2:a4:6a:07:
ba:18:e7:8e:04:ad:e5:f2:7f:62:b3:ee:3d:51:39:
b3:66:d9:fc:56:9c:4c:a7:45:a8:97:76:59:57:9a:
07:39:98:e2:87:7f:11:68:55:26:8a:70:85:32:51:
41:ad:7d:a2:6c:84:82:d4:8c:d1:d9:cc:a3:2d:4f:
9c:87:37:31:4d:87:e5:77:c9:fe:f1:0d:54:9f:2f:
db:cd:be:9b:a1:12:23:d7:a3:eb:e5:09:59:90:8e:
8b:4f:8e:94:fb:3e:ca:ab:e5:45:b2:da:67:8a:24:
be:c1:f1:0f:c3:2c:f1:72:8b:a8:ae:c5:d8:2e:5f:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:62:1C:51:18:31:FD:C5:3E:3A:93:43:D8:68:CE:B2:D4:7C:AC:F0
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/6CAFC9BABD9911ED86363B7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
da:85:24:a7:ea:f0:e5:80:94:d2:02:1e:2c:9b:dd:f0:04:5e:
0c:51:0b:df:a3:e6:f9:36:16:80:12:07:49:39:3b:8d:90:41:
7a:83:7d:8c:84:ed:76:49:45:a6:fe:a4:3f:ae:24:f0:bc:61:
50:8c:4a:2e:62:77:a1:67:d6:0c:d0:30:3f:79:a7:33:bc:52:
29:d5:78:a9:c3:36:51:be:96:04:8c:dc:8a:06:f6:d3:d0:cb:
43:5e:4e:37:bd:20:84:59:71:32:5c:c5:8c:bc:87:ae:83:16:
e1:ad:e5:50:6c:84:78:57:7f:1b:5a:0c:f6:ac:e4:52:10:6a:
d9:6e:ea:6f:50:4d:86:90:38:47:59:32:e2:89:08:c8:1d:7a:
11:4a:21:ec:50:95:6b:d1:98:10:ab:a3:4f:6a:2b:66:4a:3d:
d7:cb:ce:ce:93:eb:fc:27:7a:21:ca:56:e3:48:d4:ee:12:0c:
ce:59:c2:87:d8:14:94:61:aa:57:7f:fc:e7:09:95:bb:5d:da:
95:0e:c1:49:7c:56:41:de:da:2b:b1:ef:81:da:d3:e4:c8:6c:
fb:1e:8c:ed:1c:53:4d:b5:68:40:04:eb:5b:cc:0e:4b:41:a4:
7e:3e:54:dd:58:e0:a8:43:3b:c3:b4:53:f0:e2:28:3f:9b:db:
45:49:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org