Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/11F43BB0050011EEAFBCAE7EC4F9AE02.roa
File: 11F43BB0050011EEAFBCAE7EC4F9AE02.roa (raw, json)
Hash identifier: OMIUqX2Ndu/ACne1caWTgo6cT5PViBlJu+hwcPVdMrE=
Subject key identifier: B6:11:1F:13:36:4D:10:F0:7D:73:60:E5:0A:0B:39:DB:CA:77:55:F8
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 0505
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/11F43BB0050011EEAFBCAE7EC4F9AE02.roa
Signing time: Wed 07 Jun 2023 06:53:55 +0000
ROA not before: Wed 07 Jun 2023 06:53:55 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 133441
IP address blocks: 103.151.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Validity
Not Before: Jun 7 06:53:55 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64802983-5779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:b8:3f:0f:9a:37:8e:f5:48:16:64:fb:78:
41:e8:cb:97:a2:b8:4b:0e:18:fd:4d:a1:0d:e5:15:
32:32:83:5f:fd:dd:b2:13:17:64:50:4f:da:33:ca:
16:81:ad:c0:08:ee:59:72:55:d9:ef:06:62:87:e0:
25:93:64:e8:ba:52:fb:92:f5:aa:7b:e7:0b:97:4d:
9e:de:10:bf:99:94:a7:80:48:0a:d7:ac:df:66:aa:
0e:73:be:ae:1b:9b:61:78:f5:f5:ec:a0:2d:0d:a2:
d5:05:1c:dd:3b:31:a3:c0:99:9d:d4:5c:41:a0:ed:
df:ec:d4:7a:9e:c0:d2:a0:15:2c:89:27:cc:17:8e:
d6:c0:ac:e9:37:f4:37:9e:9e:6d:ad:cf:80:c5:6d:
76:20:70:6b:21:6c:45:46:3f:2b:bc:c1:26:66:70:
99:ab:e9:48:7d:c3:40:b6:a0:d1:33:c9:00:d4:36:
92:4c:a1:70:75:2a:b0:4b:30:9e:d3:f1:ab:d7:e7:
e1:10:6a:f0:b6:18:08:51:da:d8:80:07:0d:31:33:
be:da:45:9e:aa:ba:f5:ae:1f:69:35:f6:a6:ff:7f:
6d:1d:12:e1:2f:6e:3c:db:2f:80:47:6e:07:00:49:
1e:fc:24:3b:a3:9c:cd:df:c6:7a:ab:c9:d6:17:fa:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:1F:13:36:4D:10:F0:7D:73:60:E5:0A:0B:39:DB:CA:77:55:F8
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/11F43BB0050011EEAFBCAE7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:5c:ae:a0:1d:da:69:d1:39:78:3c:37:59:1e:ad:22:82:27:
4b:55:7e:8d:19:a2:36:82:2a:01:7f:81:df:75:66:dd:75:0d:
35:dc:d7:80:d0:cd:19:c0:a9:d2:1c:86:c3:a6:38:8d:33:26:
08:76:d9:6f:dc:01:83:4e:ab:0a:4f:bd:b1:fa:74:95:dc:31:
6e:9e:e3:de:17:ea:1a:ea:da:1b:20:12:97:e3:ab:e0:b0:f9:
c2:64:22:b4:88:a6:20:5e:5d:f2:7a:d1:55:cd:9d:52:e9:ad:
c3:f7:21:83:ed:7b:4f:cf:95:99:34:fa:40:72:03:a5:38:45:
88:8d:4c:e6:a0:42:84:10:4f:de:dd:94:ee:b7:bc:49:89:d4:
99:58:54:c2:67:8e:15:4d:ab:93:73:cf:b1:d9:cc:9d:b0:98:
a9:13:79:b4:db:ad:19:fb:9a:27:7d:37:a0:5e:33:02:5f:2f:
6a:32:24:3b:af:a1:c3:2b:f2:ad:05:ea:5b:97:59:ee:fc:60:
da:2b:c1:fa:8d:0b:ae:63:62:26:e9:05:e2:71:02:63:d5:ab:
47:d3:ea:01:c7:73:4a:28:02:c6:88:2f:e1:80:36:43:38:a5:
9f:4c:1c:1f:41:cc:70:64:ba:5c:3a:91:8a:12:75:67:a0:41:
af:3c:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-fra.rpki-client.org