Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/7C68A74CF51511EDB1103F6FC4F9AE02.roa
File: 7C68A74CF51511EDB1103F6FC4F9AE02.roa (raw, json)
Hash identifier: r81zbJ6D5W1Io+KwgwtRGzKJp3d4CslAwLVAXRtdCwg=
Subject key identifier: 73:9A:47:BB:C1:8B:D4:BC:D4:EF:BC:2C:B7:5D:B7:FB:5A:76:B3:31
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 0641
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/7C68A74CF51511EDB1103F6FC4F9AE02.roa
Signing time: Thu 18 May 2023 00:46:55 +0000
ROA not before: Thu 18 May 2023 00:46:55 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 198834
IP address blocks: 103.238.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: May 18 00:46:55 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=6465757f-0590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:50:9a:6b:5b:3d:46:14:e1:e3:ef:93:8b:
4b:bb:87:92:b8:6d:50:04:ef:01:a8:1e:01:e8:81:
ae:83:76:90:9b:e8:17:21:84:16:01:f1:5d:d2:ac:
e3:be:6e:ab:72:fd:88:b5:98:b5:f5:a9:03:80:b6:
8a:e2:59:93:ce:78:2e:b0:d6:42:66:ae:c2:7d:3f:
4b:87:50:00:bd:d4:ef:f8:4b:d9:82:b0:d5:15:3e:
93:78:8b:77:2c:33:1b:23:a7:a3:2e:3a:d1:05:e2:
9b:c5:59:b7:c1:5f:f9:f5:f0:32:31:30:22:a0:6b:
92:25:60:e6:30:09:4b:b9:19:6d:2d:67:5b:b9:88:
2f:e1:81:3a:80:a6:12:03:04:e9:78:65:46:c7:24:
06:48:f3:47:90:31:d8:e3:c6:9b:f5:c5:20:73:db:
10:b9:15:ab:ee:ef:07:1e:4b:65:22:59:a1:84:fe:
d6:6b:75:f6:87:80:7e:04:9a:f1:79:a4:0f:47:02:
1c:67:be:31:87:91:9a:a0:f4:20:8e:57:2a:d6:52:
06:2d:3e:f0:8c:55:36:e6:59:b9:95:50:dd:52:14:
e2:78:19:e5:eb:a8:bf:b6:8d:70:32:4a:0a:ba:41:
e2:59:ae:f6:78:88:5c:41:e8:28:9d:fb:0a:a0:7d:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:47:BB:C1:8B:D4:BC:D4:EF:BC:2C:B7:5D:B7:FB:5A:76:B3:31
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/7C68A74CF51511EDB1103F6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:54:b6:aa:d7:35:1b:90:2d:d0:01:07:6e:14:b8:d6:40:64:
60:f0:72:ab:5a:4e:17:01:71:74:62:3b:2a:e0:90:a0:a5:d3:
fb:a7:d8:3b:6b:6a:61:1a:b3:de:c2:96:5f:ad:48:c0:7a:fe:
e9:7b:c3:ec:06:14:e5:6a:1d:51:55:c7:c8:b2:22:62:50:b2:
77:b2:6a:31:9e:9c:b0:02:e2:5c:55:ff:15:ab:6d:67:7e:e2:
77:5b:36:60:b0:c8:87:6e:93:3a:1a:a3:ef:69:74:50:42:89:
18:18:62:79:f7:a5:b5:5d:c8:4c:3f:f7:16:69:65:dd:dc:d0:
6f:b8:57:00:69:4f:fb:00:b2:fc:13:24:b3:0d:76:5c:25:be:
d8:72:9e:98:2e:3c:fd:6f:26:fd:88:53:fa:ef:5f:51:15:26:
06:f6:25:1a:30:1c:be:2b:eb:28:38:60:e0:17:f7:31:b2:1b:
6d:07:b4:81:dc:8d:1a:8e:e7:a3:67:da:25:0e:e6:5c:f5:10:
ed:76:2c:96:3f:58:3a:d6:4c:42:4b:54:2e:07:83:ec:2a:3d:
c2:6f:01:b1:06:13:5f:cd:00:74:a1:03:8a:e3:0e:7a:7c:fa:
18:77:60:1b:53:61:aa:8a:42:0e:07:53:99:f2:b3:2b:4b:62:
89:f7:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org