Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/8DE8B1444BCC11EDA2E6375FC4F9AE02.roa
File: 8DE8B1444BCC11EDA2E6375FC4F9AE02.roa (raw, json)
Hash identifier: zB8LXh+P7M/Q6BheHys/NdqgyohR6swDAJagEM3TJjE=
Subject key identifier: 39:29:41:AF:E3:E2:1C:EC:B9:30:30:FA:FA:AF:1E:0E:CF:B0:D4:05
Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Certificate serial: 06CD
Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/8DE8B1444BCC11EDA2E6375FC4F9AE02.roa
Signing time: Mon 22 May 2023 23:45:51 +0000
ROA not before: Mon 22 May 2023 23:45:51 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139683
IP address blocks: 103.138.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302
Validity
Not Before: May 22 23:45:51 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646bfeae-0f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:ff:d1:7d:d0:07:70:62:8d:47:ab:df:1b:
25:7a:a9:79:47:c9:11:e0:08:7d:86:58:dc:83:54:
e5:e9:a9:8d:34:9b:7a:0f:e9:54:1e:97:fa:06:15:
0d:fc:13:5f:42:2c:1a:be:44:ef:8b:e6:e3:88:23:
f4:a2:ac:6f:86:56:26:f2:9e:a9:af:76:29:4d:26:
5c:e9:54:70:f9:fc:0f:06:a4:3e:4d:0c:bd:5b:24:
7b:fe:b3:e4:32:c1:b8:66:62:bd:35:14:e3:68:65:
49:e3:66:4b:a5:33:c1:45:ff:e3:5d:8a:a1:71:7a:
b4:af:be:04:a7:90:fb:bd:dc:8c:99:fe:ad:0f:49:
6b:44:93:f8:12:bc:95:50:b1:81:6d:1a:90:06:90:
ba:2e:5d:78:74:b0:7e:a8:c8:e9:20:91:c3:05:64:
94:19:cf:85:24:c6:87:a8:d2:40:c9:d2:5e:d5:dc:
d1:5b:7c:56:91:31:b8:3a:81:96:33:60:a6:44:a1:
73:48:cb:ca:36:e4:4c:29:8f:4d:ec:9d:22:5e:ba:
da:32:30:5f:cb:e1:13:a4:50:02:c7:4a:f1:d8:6e:
c7:bb:1e:6b:06:99:70:27:9c:35:48:0d:0c:86:ef:
99:23:fc:45:17:6e:23:6f:bd:03:93:f7:1b:9e:f2:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:41:AF:E3:E2:1C:EC:B9:30:30:FA:FA:AF:1E:0E:CF:B0:D4:05
X509v3 Authority Key Identifier:
keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/8DE8B1444BCC11EDA2E6375FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.215.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a5:ae:a5:a3:d7:c8:3e:aa:97:8e:31:94:17:cb:f2:2b:67:
ff:67:52:c4:5c:5f:d7:0c:e3:a5:04:08:e6:e5:f5:65:dd:c4:
27:de:de:2d:05:56:7e:5a:b4:a4:7b:ac:fd:51:53:8d:ea:c4:
80:94:e0:fc:a9:a3:f9:18:7c:05:bf:90:06:4f:d8:31:1e:6d:
d3:63:74:80:b1:4b:d6:34:a7:7e:2f:9c:7f:72:17:ba:6c:2b:
e4:e8:1f:41:5a:c5:10:d0:9e:44:13:56:43:e4:9f:c3:b1:bd:
61:bb:91:1f:bf:11:8f:4a:25:85:74:c3:f5:a8:a0:00:3c:ee:
2f:2a:65:2b:11:9a:59:98:a0:77:bd:41:d0:9d:a2:68:41:29:
3d:2f:8e:0d:e3:c2:dd:b1:61:7e:b0:b5:a4:73:7c:3e:28:2b:
30:d2:9c:6f:57:d0:16:b7:a1:37:9b:92:6a:08:e5:22:e7:9e:
6f:e7:a9:86:bc:3e:6d:06:66:4c:e9:6f:68:26:ed:81:b4:7c:
8f:41:73:e6:7c:8e:d4:46:53:27:2d:0c:6c:77:6f:27:08:93:
68:3e:ec:d8:f7:48:5e:b2:36:4b:bd:c1:fc:3a:c6:46:39:66:
52:c0:f2:d6:77:75:f5:57:3b:30:6b:48:c7:3c:35:18:b6:b2:
1e:6a:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 15:54:53 2023 by rpki-client on console-fra.rpki-client.org