Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/4C0F855ECEF411EC83039A62C4F9AE02.roa
File: 4C0F855ECEF411EC83039A62C4F9AE02.roa (raw, json)
Hash identifier: Ob2hoHHYo0Ndh+x/1elNiNa0tz4v6X5cr8vXUbDyNJs=
Subject key identifier: 7A:11:CB:6F:26:86:F3:E4:BC:AF:EF:1A:E2:1B:88:AC:4E:DB:08:E6
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 07B9
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/4C0F855ECEF411EC83039A62C4F9AE02.roa
Signing time: Mon 24 Oct 2022 22:08:32 +0000
ROA not before: Mon 24 Oct 2022 22:08:32 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 134180
IP address blocks: 103.74.228.0/24 maxlen: 24
103.74.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Oct 24 22:08:32 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63570ce0-c65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:39:5e:df:db:51:ac:76:86:62:16:a1:9f:
51:af:26:85:bc:b6:fe:f8:e8:86:40:21:84:df:c9:
f0:c3:52:86:c9:8d:ae:e2:f7:1c:69:a6:a1:15:e7:
02:e5:88:72:ea:d4:32:dd:eb:83:79:4e:be:55:94:
d4:58:06:68:c6:88:f5:c3:80:e5:7f:31:b5:8e:11:
e0:84:ab:1a:5f:ed:a9:bf:3d:f5:21:c3:94:6d:31:
9d:d0:63:ab:34:e1:26:b7:f4:77:66:da:75:e0:9e:
33:dd:34:94:82:9a:0c:0f:30:84:ec:7d:25:d8:a3:
4d:d7:b8:c8:55:ae:58:6e:ab:09:27:42:99:74:1c:
a7:54:ec:82:b1:f9:52:8f:a2:8d:eb:83:87:36:e6:
4f:1a:29:24:b7:23:a5:22:60:46:3a:99:3b:a2:90:
e7:3b:b3:d9:ef:19:c1:c2:11:77:a8:2b:86:2a:e1:
14:25:fb:fe:15:b4:18:07:7b:fa:98:60:9a:d1:27:
5f:8a:a1:b4:8e:c9:3f:48:e6:40:81:60:e8:b5:09:
c1:df:45:a6:3f:fb:50:e6:c7:5e:bd:7d:18:65:ee:
ce:48:06:1b:73:1d:b4:f3:72:d2:59:1c:71:00:1c:
31:9c:6d:be:47:ae:25:39:80:78:0b:53:41:32:88:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:CB:6F:26:86:F3:E4:BC:AF:EF:1A:E2:1B:88:AC:4E:DB:08:E6
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/4C0F855ECEF411EC83039A62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.228.0/24
103.74.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:76:97:1d:e3:cc:91:12:bc:bd:93:cf:cf:f1:91:76:05:32:
60:06:61:f0:c6:38:6b:91:78:2d:d6:7d:85:14:5f:95:73:61:
e3:48:19:96:f3:d3:02:10:a6:de:b4:aa:71:3e:1d:fe:06:87:
01:69:27:73:89:34:e2:79:d6:26:0b:88:00:34:f2:2c:75:ec:
90:1d:8a:38:65:fb:8e:01:67:c9:98:41:6d:cc:b4:91:f4:bb:
b9:27:1c:c5:75:38:2a:67:b2:0d:d5:57:3b:c9:d4:e4:75:48:
e0:f0:12:a8:d2:44:f6:fd:dc:68:6f:41:7b:95:6b:17:31:ef:
72:c7:2c:46:05:e3:90:f6:66:d2:39:43:ab:9d:83:8f:b7:72:
e6:6a:44:cf:82:7a:74:3f:49:81:48:96:84:d3:52:de:87:d7:
f7:03:11:ff:19:b9:96:7e:88:c4:84:73:5b:5d:85:66:a3:5c:
1e:21:0a:29:6b:17:ca:8b:28:9d:8a:51:b7:33:37:ca:69:80:
f4:8d:6d:a3:04:98:3a:d7:7d:ab:f2:bc:47:0f:85:a4:b2:d5:
78:29:86:72:d3:f1:20:82:3f:ae:20:fc:25:b0:73:87:05:c1:
13:0b:f2:5e:33:7f:74:92:ce:19:89:ab:27:8a:0b:cb:e5:37:
f7:a0:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org