Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/506730C41E0411EE8184E678C4F9AE02.roa
File: 506730C41E0411EE8184E678C4F9AE02.roa (raw, json)
Hash identifier: ny3qpSaFlDKIZwaHrnc/aROxGoPuzoJomBLFdFGq8G4=
Subject key identifier: 6A:9D:AF:E9:70:20:0A:B6:DC:55:C5:F6:FF:58:98:B0:8A:57:F4:B0
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 0841
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/506730C41E0411EE8184E678C4F9AE02.roa
Signing time: Sun 09 Jul 2023 02:57:18 +0000
ROA not before: Sun 09 Jul 2023 02:57:18 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 134180
IP address blocks: 103.74.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Jul 9 02:57:18 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64aa220d-7dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:cf:c2:0a:4f:c2:19:cd:35:11:35:e8:1b:
c1:3f:b2:23:d1:1c:25:e8:3d:1f:2c:37:fc:27:8b:
73:5a:32:ae:d6:46:05:e4:ef:80:36:9c:d4:98:f3:
a0:7a:56:e0:b8:e2:74:eb:91:0b:30:a7:93:45:16:
54:d3:9a:86:1f:2f:93:ac:24:78:8e:15:5e:64:81:
d5:c7:7f:7c:f2:2d:a8:19:75:d9:2a:a1:f4:cb:97:
2e:d3:c3:74:6a:26:1e:2c:b2:16:e3:a6:ff:67:fe:
f8:1d:7c:3e:d9:cd:13:f9:68:82:0a:6a:6e:78:62:
b6:d1:89:80:33:ba:55:4b:35:1a:84:66:36:21:63:
29:11:ac:35:14:77:0d:44:7e:e0:43:11:d9:bf:d6:
5d:aa:d2:b0:f3:1c:85:79:3a:f2:94:5c:9d:7a:e7:
83:2d:d8:e8:e3:64:ff:ab:43:cc:9b:af:9b:a4:66:
a9:9c:da:d1:4e:a2:0f:77:00:05:3e:e7:09:e5:87:
32:bc:c9:fd:15:a9:c3:86:13:87:c9:57:fa:c4:e2:
69:f3:28:6e:41:3c:3f:0f:e2:0e:c6:74:75:98:18:
cf:11:06:ec:80:ac:fb:3f:62:ff:08:13:c5:e6:94:
02:11:36:a2:7a:86:52:28:96:f1:73:b9:0b:ea:af:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:AF:E9:70:20:0A:B6:DC:55:C5:F6:FF:58:98:B0:8A:57:F4:B0
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/506730C41E0411EE8184E678C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:af:2e:c1:f4:48:8c:02:61:5e:31:c8:4d:9a:93:8b:42:b1:
fe:b2:2a:5c:7c:a9:20:80:39:0d:f2:cd:c0:fb:73:62:54:6c:
9b:43:fd:31:0d:79:99:e1:62:ae:04:cc:bd:44:da:e0:86:f5:
cc:31:ce:25:67:63:f4:dd:db:71:98:2c:4e:dc:2b:68:54:98:
2d:e9:ff:d3:62:70:d3:ed:d0:c1:95:98:d9:ff:90:a8:69:0a:
4a:26:4d:d3:58:c8:b1:f3:f2:8f:d4:75:ef:03:d4:8f:ae:c5:
2c:95:00:59:55:f0:c8:74:00:55:47:a3:f7:6d:71:29:81:89:
1e:c2:0e:f0:30:0c:22:e6:ee:91:da:10:75:80:05:2b:23:cb:
93:c0:9f:7d:53:c5:1b:05:cb:39:68:72:ab:73:7e:10:0f:4f:
74:03:59:81:ed:34:a0:a0:e9:f3:c6:de:94:34:bc:04:32:f6:
ec:78:b4:07:9c:cf:37:6c:25:f2:e6:4f:c0:2d:04:47:5f:6c:
80:a3:b5:b9:54:52:a0:b1:bd:ea:20:9a:31:24:8c:c7:5f:f5:
d4:80:54:97:87:0b:ad:a9:41:1f:3a:4a:5c:48:db:9a:5a:e1:
3a:3a:28:bd:1a:1e:c5:78:e4:eb:e4:87:bc:84:30:73:26:26:
60:55:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org