Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/AFB847D6EDF711ECBCAF5567C4F9AE02.roa
File: AFB847D6EDF711ECBCAF5567C4F9AE02.roa (raw, json)
Hash identifier: 6lV7+4zuzNOgOhmz8mugFMK7kIjfOeIm0G3PVNi9VdA=
Subject key identifier: 0E:AC:DF:63:6A:13:C2:8B:47:66:A2:6B:BA:7D:3C:C2:83:00:E3:08
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 0334
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/AFB847D6EDF711ECBCAF5567C4F9AE02.roa
Signing time: Fri 08 Jul 2022 01:11:31 +0000
ROA not before: Fri 08 Jul 2022 01:11:31 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 9267
IP address blocks: 103.167.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Validity
Not Before: Jul 8 01:11:31 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62c78443-b1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:17:77:b7:32:06:9f:d2:16:91:5f:26:fe:
8e:01:8a:c0:43:12:09:47:b1:d5:60:c8:8e:ee:aa:
94:4c:b0:31:e5:51:95:0d:b2:61:ad:67:df:45:65:
d6:aa:dd:a3:c5:70:b0:73:58:56:77:21:8d:65:50:
a9:d9:f7:61:ff:de:9d:88:87:c0:18:66:d6:ee:b2:
a1:4d:28:48:0a:05:da:ca:94:b4:a7:70:b9:c9:fe:
fd:c9:08:0d:19:b9:22:1c:17:87:78:a6:3f:9d:a3:
be:c0:c7:43:10:8b:02:29:81:48:0e:13:2f:f2:90:
e7:04:a7:11:95:51:ce:95:6f:5b:70:5c:f1:15:de:
0a:36:ee:07:cb:7a:f6:9a:40:91:8c:0b:23:e2:4f:
08:36:5b:ad:ea:da:59:79:1b:de:df:ee:96:64:dc:
d1:ff:d4:c8:99:52:b1:35:95:4d:67:eb:5b:5b:51:
e6:e0:9f:4f:25:c1:44:10:31:b8:cc:5b:a2:04:3d:
fb:59:50:10:69:fd:a2:3a:69:72:4c:6e:67:12:e2:
dc:c2:fc:c6:6b:f4:04:c6:24:82:10:b9:b8:b9:ee:
42:2f:2a:94:76:ff:3e:66:4d:4d:c8:1e:84:94:58:
c8:7e:88:49:8e:1b:e2:2b:fa:f3:c6:49:68:15:d8:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:DF:63:6A:13:C2:8B:47:66:A2:6B:BA:7D:3C:C2:83:00:E3:08
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/AFB847D6EDF711ECBCAF5567C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6a:49:aa:1a:f2:e6:e7:92:89:4d:08:2f:b2:b0:47:c2:9d:
83:4d:47:1c:92:87:b1:98:af:a3:04:6a:03:71:b9:66:42:8f:
f8:74:7d:71:6b:92:f1:9e:d2:1e:38:17:54:03:61:40:09:19:
19:ef:02:e3:d3:9a:27:70:37:98:c2:bc:ea:e1:7c:ad:2e:2d:
ac:09:dc:4b:65:ea:3f:db:f2:78:b7:c0:f8:9b:16:13:ca:62:
87:03:7b:cc:b2:2d:41:54:57:9a:fa:33:0c:25:df:38:a0:91:
81:65:9f:f1:64:a7:90:5b:ad:d5:0c:4d:d7:87:02:27:1a:36:
61:85:9c:4f:8c:59:87:b7:77:8e:07:44:fa:f8:6e:3e:32:75:
37:14:d6:06:e5:bf:e0:74:09:04:aa:eb:b5:d4:ef:e6:e6:cc:
91:df:b9:d3:bd:f1:6d:10:08:d9:0f:92:1e:5e:7a:57:f9:4a:
a3:ef:e2:45:9b:14:c8:f6:f8:61:7b:bc:59:ad:bc:0b:63:4d:
7d:2a:0a:4f:7f:1b:7d:19:93:26:2a:2c:fd:22:1c:4b:c5:82:
be:3d:c6:a2:ec:5e:e3:83:55:a5:72:f0:dc:c3:6f:79:03:57:
51:a9:50:fe:26:62:b7:2d:e9:c9:b2:2a:77:d3:9e:a3:d4:5a:
12:d1:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:01 2023 by rpki-client on console-ams.rpki-client.org