Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FDB705061C2E11EE9A9A9940C4F9AE02.roa
File: FDB705061C2E11EE9A9A9940C4F9AE02.roa (raw, json)
Hash identifier: RVDExAjn1uqbr2Fw2NXujHDI5w30gkvMRmsnRrS21gQ=
Subject key identifier: 05:6B:BB:9D:B7:1C:05:D9:C1:69:90:75:CC:9C:62:87:A7:7A:E7:D0
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 083D
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FDB705061C2E11EE9A9A9940C4F9AE02.roa
Signing time: Thu 06 Jul 2023 18:57:44 +0000
ROA not before: Thu 06 Jul 2023 18:57:44 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 45814
IP address blocks: 103.74.20.0/24 maxlen: 24
103.74.22.0/24 maxlen: 24
103.74.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Validity
Not Before: Jul 6 18:57:44 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64a70ea8-8f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:d5:43:fa:c5:a6:5b:29:2f:9b:a1:56:97:
33:a5:07:65:11:23:08:24:0e:8b:31:e6:82:4c:7c:
de:03:c3:25:f9:e3:9d:96:0e:61:5b:4d:a6:69:e2:
d6:02:1a:f3:c1:0b:8c:e8:0c:78:46:bd:47:53:bc:
67:05:2d:f5:0b:ce:0b:30:80:26:16:3c:8f:8c:5d:
52:17:54:ff:07:86:49:53:4f:21:59:ef:de:b2:3e:
68:a5:3c:78:0c:f9:17:5d:fa:7e:97:36:80:bd:59:
20:f5:3e:31:89:84:91:90:46:65:19:44:02:21:a3:
2b:f6:88:3b:40:b9:4f:cb:25:c4:73:8a:b3:73:b1:
e9:87:03:47:ed:89:6e:57:77:ac:01:92:c7:1f:fd:
5b:a5:b9:a5:0b:3f:0d:06:a5:88:10:e4:3b:9f:6c:
35:5d:4b:be:a4:42:70:1d:d8:44:2b:1c:23:d4:e8:
e9:5e:84:70:ce:81:98:14:9d:07:ad:02:3b:c6:4b:
b7:de:7a:c6:7e:e1:3d:50:85:44:89:6a:dd:a5:1d:
2c:f0:e1:35:ff:16:e8:c3:7d:3f:86:21:e4:dc:ae:
db:39:71:f6:4d:e5:57:90:87:ca:ac:cc:e7:86:46:
47:a8:44:f6:b1:04:c9:3e:8f:01:76:6f:81:33:b2:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:BB:9D:B7:1C:05:D9:C1:69:90:75:CC:9C:62:87:A7:7A:E7:D0
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FDB705061C2E11EE9A9A9940C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.20.0/24
103.74.22.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:5c:26:53:1c:74:16:67:1f:63:3d:bd:b3:60:a4:bb:84:be:
2f:79:a8:d1:d0:f0:01:5d:57:a8:48:46:00:9f:49:78:1a:3e:
de:65:94:f3:f6:e0:a0:99:f7:6a:d1:33:0c:3b:02:38:da:00:
23:a2:68:46:23:d2:b7:db:06:86:07:6c:b4:6d:e1:90:29:ae:
75:3f:96:62:a5:36:1b:74:b0:83:4a:ee:5d:83:5c:41:31:43:
80:24:e8:b2:85:a3:ac:76:b9:de:82:58:f5:83:30:ac:50:f2:
a0:45:ec:2b:5b:b4:1c:e1:e5:ad:9c:ee:7b:71:ab:ed:89:5d:
6b:ac:66:54:ce:2c:ac:cd:7d:0b:27:5b:e2:1d:42:66:8f:65:
87:d4:45:5f:d6:4f:98:c1:f6:4d:fb:23:59:31:51:41:61:a9:
1a:0d:c6:38:0f:1d:e7:ad:14:65:d0:f8:fb:28:76:0c:e4:b9:
17:ec:2f:ca:b7:9d:55:dc:0e:e8:01:e6:4d:5f:f8:86:8e:33:
67:77:87:0e:c5:81:45:d3:6d:cf:6f:87:77:a9:fc:86:9a:8c:
01:c8:1b:60:0d:64:da:33:c4:a9:94:1f:85:4b:ef:07:27:c2:
af:e4:04:f0:65:5f:69:4b:72:32:9d:bf:48:b5:9a:3c:a3:ed:
9d:92:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 13:12:01 2023 by rpki-client on console-fra.rpki-client.org