Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/EFB97A108D4D11EA98279476C4F9AE02.roa
File: EFB97A108D4D11EA98279476C4F9AE02.roa (raw, json)
Hash identifier: byfQ4j+mHrHWhlIRNIJNxoUD3qFiPC65H2t2o3Cp700=
Subject key identifier: 17:E7:A3:F8:D1:7A:C6:A6:C9:4F:C4:66:F8:F7:20:F9:2C:0F:78:F4
Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial: 078D
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/EFB97A108D4D11EA98279476C4F9AE02.roa
Signing time: Wed 28 Sep 2022 22:18:52 +0000
ROA not before: Wed 28 Sep 2022 22:18:52 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 45814
IP address blocks: 103.72.0.0/24 maxlen: 24
103.72.1.0/24 maxlen: 24
103.72.2.0/24 maxlen: 24
103.72.3.0/24 maxlen: 24
103.194.92.0/24 maxlen: 24
103.194.93.0/24 maxlen: 24
103.194.94.0/24 maxlen: 24
103.194.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Validity
Not Before: Sep 28 22:18:52 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6334c84c-0b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:3b:8c:f7:ae:aa:c9:0d:f7:ee:55:b1:7e:
7f:c1:2d:f9:cc:6e:9d:91:f0:42:fb:c3:a3:ca:c7:
66:2d:f1:e0:d9:ea:be:bd:d2:17:dc:e1:50:fd:27:
46:00:4a:44:a6:79:c8:f1:8b:8a:4b:6c:bd:81:3e:
be:ed:56:87:55:7c:db:eb:98:6c:ae:3a:38:03:21:
37:a2:96:f7:e9:98:fa:91:02:09:80:88:2f:20:59:
e5:bb:4a:2f:32:d5:d3:ca:f8:53:9a:f5:a8:98:01:
01:18:06:df:35:59:56:02:3d:cb:8d:53:00:05:55:
9f:7d:f9:2e:7e:eb:2e:43:51:80:fe:05:c3:94:ce:
3b:41:1f:b0:0f:9a:ed:37:d2:36:68:28:19:f8:a3:
cf:c1:6e:9c:18:c6:52:e2:b3:92:32:2c:42:4d:68:
31:62:de:0b:f1:e7:bf:03:ff:f5:6e:a7:9b:b0:cb:
31:87:95:bc:c8:04:04:d7:60:45:8b:c4:3a:c4:d1:
81:6e:62:15:db:c7:5b:d9:2a:8a:e5:65:47:e9:05:
c5:49:6c:f1:cd:dd:c6:5a:9a:11:5d:ef:ee:e7:01:
3a:f2:e0:87:b6:c4:17:11:49:f5:c2:14:1a:35:f2:
ac:1f:9f:01:67:be:26:78:84:06:cf:c1:fb:09:9c:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:A3:F8:D1:7A:C6:A6:C9:4F:C4:66:F8:F7:20:F9:2C:0F:78:F4
X509v3 Authority Key Identifier:
keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/EFB97A108D4D11EA98279476C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.0.0/22
103.194.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:3a:90:a0:de:a6:e2:67:9a:dd:2d:3b:b9:41:2c:34:bf:1e:
ff:f0:7e:59:af:bd:aa:2e:b6:1e:3d:96:d4:7f:a2:8d:05:e9:
48:8d:2d:65:27:1f:72:d8:7d:50:06:78:f4:8f:7f:ad:b5:41:
42:10:84:71:c6:c5:29:be:3e:4a:0b:74:2e:28:a8:1b:10:60:
c5:a9:6a:60:a4:47:03:f1:41:3e:da:35:2a:cd:3c:ff:c0:c4:
ae:8a:db:6c:af:89:7d:51:8a:eb:61:78:a3:70:2c:51:61:ec:
35:da:b7:01:c2:05:31:40:dc:4f:6f:75:82:91:85:a3:fd:80:
09:b5:4d:25:e5:ce:26:b3:cc:98:a2:14:ec:a2:da:7f:7a:2c:
e8:ec:a5:07:95:57:21:14:51:d2:63:42:ac:54:a4:80:64:bf:
60:84:9a:89:d3:80:bc:d2:ef:1f:7c:89:ce:d6:39:79:15:fa:
d1:97:65:46:d3:39:46:fe:e5:56:67:da:79:96:84:a5:e7:39:
cc:f0:53:b6:46:da:eb:21:e1:0a:0f:0e:e4:84:93:a0:eb:19:
e8:ff:6e:f9:03:72:53:5b:fe:ca:fc:48:6a:11:2b:65:d1:6d:
44:83:45:fe:d0:0d:a0:65:c1:47:48:09:d5:f4:f7:a4:1a:59:
97:b1:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:01 2023 by rpki-client on console-ams.rpki-client.org