Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/764D1D6A7A8911EBADBE8982C4F9AE02.roa
File: 764D1D6A7A8911EBADBE8982C4F9AE02.roa (raw, json)
Hash identifier: j18SjugJg0kalkAK1jMW/RDxTcYyhZu3pv9XmkV5+6M=
Subject key identifier: DC:E7:73:46:BE:79:6E:06:C3:B9:A7:29:42:F6:53:7E:AA:68:7E:18
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 045A
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/764D1D6A7A8911EBADBE8982C4F9AE02.roa
Signing time: Mon 05 Sep 2022 13:20:40 +0000
ROA not before: Mon 05 Sep 2022 13:20:40 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 141159
IP address blocks: 103.101.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Sep 5 13:20:40 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6315f7a8-45ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:bb:aa:ae:00:7c:42:3a:be:cc:0c:f7:5d:
93:1b:56:6b:71:9e:75:1c:6c:09:6b:3a:88:9d:00:
9e:25:73:af:3c:4e:20:43:2f:49:19:89:c6:3f:a0:
6c:19:43:70:ae:aa:75:6a:b0:71:74:1b:39:fb:5d:
bb:c6:3e:92:89:b8:d6:03:c6:f1:cc:7c:0f:22:85:
1d:20:28:38:fd:41:1e:76:99:cb:03:86:a1:a0:49:
87:33:65:66:3e:73:ca:45:27:3b:3c:a0:40:8d:06:
44:c4:aa:f8:8d:56:9e:9a:ba:8c:2c:c7:18:a7:fc:
1c:2a:c0:3b:47:74:3c:4b:f6:e0:5d:fc:6d:39:ec:
67:39:cf:3e:db:69:be:04:ed:18:b9:11:b2:1f:3d:
5c:20:93:05:51:87:1a:9a:ae:88:24:52:00:f7:d2:
ef:c6:19:61:ae:6b:0b:81:cb:92:29:39:6d:0d:b3:
2d:2a:6a:7b:1e:f1:ec:9e:6d:66:6e:c0:3f:80:55:
60:6a:7e:72:1c:63:e1:6b:db:96:f7:b2:c9:09:79:
c0:5f:d9:9c:fc:0c:c5:ef:e8:df:25:55:4b:3a:d3:
bd:8a:7a:f8:57:b8:ce:2e:93:f7:83:53:8a:6d:da:
a2:72:bc:2c:d6:cc:5c:25:d4:d5:50:55:a3:7d:27:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:73:46:BE:79:6E:06:C3:B9:A7:29:42:F6:53:7E:AA:68:7E:18
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/764D1D6A7A8911EBADBE8982C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.190.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3f:71:33:46:04:c0:c8:c9:c8:40:7d:09:1b:af:66:55:36:
85:74:08:2a:98:b8:53:6d:f4:e7:89:f3:7e:be:1b:7d:5c:84:
f2:a5:6e:c2:43:39:26:79:81:b6:dd:64:8b:cf:b7:b2:76:a8:
1e:44:38:02:8d:f0:0c:5e:d3:0f:a3:f8:70:d3:01:a6:b5:47:
41:3f:78:3b:25:c7:38:72:9d:84:2a:ef:56:fe:c2:fb:56:89:
06:21:f5:1e:34:c2:f8:e8:e5:4d:7f:f9:49:30:b8:10:d7:d0:
21:14:b6:c7:ce:93:90:52:b6:bd:7c:b7:dd:4c:d2:65:66:7e:
41:91:cb:8f:a5:23:ca:46:15:63:91:e4:ed:81:42:f7:01:0f:
a8:b2:64:7f:75:41:ea:5e:80:29:e7:9b:2f:76:be:d7:f7:11:
31:dd:98:89:ec:72:ce:01:8d:dd:27:cb:67:eb:52:1e:15:a8:
26:1a:47:4a:ae:10:64:ee:7d:e4:fb:25:23:6d:d2:36:e7:e9:
c3:c2:97:be:b6:b3:b9:23:c1:be:5a:57:c0:15:34:80:9e:9e:
93:22:c7:79:5e:a6:b5:97:4d:ce:e3:93:e4:97:33:de:13:18:
a3:cb:bc:ca:3c:ba:ab:4e:d4:66:68:88:36:41:07:4b:5e:d9:
d8:96:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org