Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FDF2D9D6EC0A11EDAA1B3228C4F9AE02.roa
File: FDF2D9D6EC0A11EDAA1B3228C4F9AE02.roa (raw, json)
Hash identifier: DOOKFL3aYOGLYndeUixdOXRMfi7Mty/+u7tkXRPE1nM=
Subject key identifier: 6F:82:65:8E:C1:CE:75:14:54:C8:B8:81:73:06:F8:43:0C:A0:38:E6
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 081B
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FDF2D9D6EC0A11EDAA1B3228C4F9AE02.roa
Signing time: Sat 06 May 2023 12:39:07 +0000
ROA not before: Sat 06 May 2023 12:39:07 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 45814
IP address blocks: 103.74.20.0/24 maxlen: 24
103.74.21.0/24 maxlen: 24
103.74.22.0/24 maxlen: 24
103.74.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Validity
Not Before: May 6 12:39:07 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64564a6b-aae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:1b:41:7c:82:67:f4:25:9b:12:49:ad:f6:
a6:b1:de:57:d4:ba:84:9b:16:a3:c7:78:b3:c1:9f:
6c:bc:6b:ed:a7:f1:d5:92:63:7f:5b:2e:93:49:ee:
f9:4a:e7:a0:c6:f4:2b:a8:09:05:77:df:28:43:55:
ef:dd:7a:eb:6b:5b:42:01:01:85:1f:54:21:e2:7e:
45:ac:a3:8f:85:43:9a:61:52:a9:bf:4c:78:eb:15:
98:21:a5:a2:23:9f:0b:7a:8a:d4:d0:d3:c9:64:15:
d5:5c:f6:99:68:3a:67:4d:10:92:3a:6c:ad:99:02:
42:4d:6b:3d:94:b1:e5:e9:dc:3a:86:d9:0a:97:4e:
b5:52:8f:e5:fe:44:39:cd:bc:e3:fb:76:f5:42:a7:
30:14:89:bb:69:4f:89:82:93:fc:4f:6e:1f:52:29:
0d:7b:49:0a:d7:e7:91:30:b3:31:33:3e:98:0e:2a:
fb:35:16:a5:0c:ec:b2:2e:ee:31:1d:d0:8a:c6:56:
61:12:1f:fa:30:5d:52:78:ad:47:a1:c5:d5:80:cf:
16:f6:4f:3c:a4:d9:a0:8c:1c:e6:50:63:59:63:06:
ad:30:b2:57:af:da:1c:e6:1d:66:de:c5:35:f2:12:
0e:a2:36:7e:1d:c7:df:5d:6e:2e:be:f3:3d:f9:50:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:65:8E:C1:CE:75:14:54:C8:B8:81:73:06:F8:43:0C:A0:38:E6
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/FDF2D9D6EC0A11EDAA1B3228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:74:03:06:ef:dc:a4:32:cd:b3:e0:26:a5:14:39:56:81:d9:
92:c9:a5:32:eb:8f:a8:70:c9:41:6f:45:55:a3:81:60:0c:23:
c8:03:50:89:ad:bf:1c:3c:57:7b:d0:ce:9a:c2:09:17:f6:bd:
0c:41:26:60:d0:7f:89:5d:6b:ab:6c:54:bd:4c:7d:eb:83:58:
04:fa:cd:8a:1e:16:af:f4:4d:3e:ca:f6:92:de:53:34:b1:8a:
b8:d7:14:47:40:71:55:07:9f:b8:1e:72:cb:82:6e:f2:f8:3e:
9c:37:8a:2f:30:14:f7:e7:fe:36:ae:4f:31:82:ce:7b:16:b8:
75:d4:9a:3e:5a:2f:a2:6d:4b:62:e4:f4:57:54:aa:bf:3e:aa:
cf:ed:1d:0f:75:e8:bd:18:7d:94:44:e1:db:1e:cf:42:a6:fd:
98:ce:cc:94:be:34:f4:3a:1d:30:2c:b4:77:c9:cb:58:5c:03:
4b:91:17:2f:eb:02:3e:6b:fc:4a:af:ef:f5:1f:4b:4c:b0:1c:
48:a2:e1:0e:c4:7a:76:df:26:da:4b:92:a1:ef:9b:17:c3:54:
22:b3:56:7c:25:bd:cb:66:21:f1:24:a2:48:9f:c7:bb:a0:6c:
2f:00:5e:b6:d8:c6:b4:c4:08:76:a2:4e:bf:f0:46:eb:89:ff:
7b:32:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org