Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/DCAED802A2A311EDA901AC7AC4F9AE02.roa
File: DCAED802A2A311EDA901AC7AC4F9AE02.roa (raw, json)
Hash identifier: zB5pzwTDgmfuCTYuRCks7kGsaRAxVV9xrflCRqT7UqU=
Subject key identifier: 4A:68:CE:C2:10:F5:85:1C:9F:D4:3B:62:19:C8:E5:D2:44:B3:85:7B
Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial: 09DE
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/DCAED802A2A311EDA901AC7AC4F9AE02.roa
Signing time: Thu 02 Feb 2023 02:46:58 +0000
ROA not before: Thu 02 Feb 2023 02:46:58 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.142.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2526 (0x9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Validity
Not Before: Feb 2 02:46:58 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63db2422-b51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:ec:1b:9c:3e:41:66:16:b1:08:3e:cc:9d:
84:7b:2d:48:ac:6f:d4:18:a8:bb:cc:23:76:21:01:
41:d4:cf:d8:47:e4:6b:76:cb:be:26:8b:12:fd:e6:
9b:42:de:b3:50:df:ec:42:a4:0b:98:04:f4:57:37:
fb:f8:15:1e:38:34:7a:8e:83:9a:bc:e6:22:bd:dc:
ba:2d:2d:03:79:fa:12:f9:77:7b:cd:0f:46:52:9d:
9a:78:18:13:e6:34:55:b0:83:e2:ce:85:eb:87:d2:
06:63:16:d3:e7:96:63:0a:92:b8:d2:76:19:03:ca:
5a:73:0a:74:68:48:d8:b2:0d:9f:c9:56:ef:e4:12:
89:a4:37:20:eb:9c:34:46:44:6c:ef:bd:93:9e:6a:
00:96:df:f4:ce:17:94:52:5b:f9:1b:c7:c0:a1:09:
b2:4c:08:52:9f:f7:68:e9:08:e9:e4:ae:e7:1b:81:
3e:ce:f0:c2:5d:b1:c1:5c:02:98:bd:3e:4e:4b:33:
3b:69:aa:e0:fc:b3:4e:4b:39:16:14:1e:6c:2d:49:
5b:c2:09:15:21:31:91:21:37:23:10:18:d7:16:92:
59:c8:4a:20:93:09:b9:88:3a:d4:78:1e:6b:f4:1a:
38:e1:f4:7e:fa:8d:e9:7f:a4:9d:4e:8e:2d:6b:a9:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:CE:C2:10:F5:85:1C:9F:D4:3B:62:19:C8:E5:D2:44:B3:85:7B
X509v3 Authority Key Identifier:
keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/DCAED802A2A311EDA901AC7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.68.0/24
Signature Algorithm: sha256WithRSAEncryption
75:63:f3:eb:d5:7a:8f:92:48:0d:65:7f:6f:83:52:90:d1:50:
3c:b5:4a:91:b7:2a:5c:ab:e1:59:fa:b1:d5:50:db:03:0c:ad:
5a:f8:9b:a1:85:1f:65:57:ba:65:86:eb:4d:5f:cd:bf:14:47:
b3:96:9d:f0:31:26:21:0f:5e:77:07:56:b6:85:67:c1:72:ce:
40:5e:fd:ec:db:a4:1a:cb:e5:82:cb:5c:5a:2d:57:6e:a0:c1:
93:63:7a:6b:e3:99:a4:8d:fd:37:36:38:f2:c9:d6:e6:3d:5e:
5d:41:f2:fb:ec:af:db:ac:2d:df:51:e0:a8:ab:81:cf:f5:6c:
f7:a2:04:b8:12:34:69:22:9a:cf:13:aa:e9:f8:eb:41:9c:cd:
6f:b3:25:34:48:86:12:2b:84:73:34:2e:59:3e:64:46:05:dd:
7c:d8:6f:f4:8b:55:cb:a0:a8:84:42:a8:9a:67:19:39:a2:f1:
29:c6:39:81:db:db:1b:06:c8:a4:a0:6e:35:87:df:c6:f4:0d:
e1:68:07:ef:bd:5a:22:4d:d8:79:de:41:dc:b7:2e:1c:47:ef:
3b:32:1e:b8:d1:d3:fa:ba:24:12:69:75:e2:f3:32:10:7f:5c:
47:e4:dd:f3:f5:b2:a5:b4:d7:e2:06:34:d4:56:b3:04:b5:e4:
de:bd:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 12:15:50 2023 by rpki-client on console-fra.rpki-client.org