Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/9D907218F58A11EDA942490BC4F9AE02.roa
File: 9D907218F58A11EDA942490BC4F9AE02.roa (raw, json)
Hash identifier: OXdQKEpNKpEnQzbycW5ybzqzMelugVIoB6xjZL329pc=
Subject key identifier: 93:7B:E5:F0:3B:CC:94:DB:6C:8D:09:34:88:66:13:B5:B5:FE:EA:FE
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 07A9
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/9D907218F58A11EDA942490BC4F9AE02.roa
Signing time: Thu 18 May 2023 14:45:22 +0000
ROA not before: Thu 18 May 2023 14:45:22 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 38074
IP address blocks: 103.152.178.0/24 maxlen: 24
103.160.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: May 18 14:45:22 2023 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=64663a02-c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7d:c7:ec:2f:4d:96:0d:d9:5a:82:fc:13:71:
d6:a5:6a:08:e3:ec:db:5e:cc:f8:a8:fa:8d:63:ee:
c4:66:9f:0f:d5:9f:dc:11:34:b6:fc:0f:e6:7e:54:
2f:f2:fb:8b:54:27:ec:2d:92:5a:66:35:ef:15:91:
ba:02:88:3e:2d:01:76:2a:a8:5d:dc:1f:87:6b:5c:
ed:26:f5:03:64:79:79:bc:44:1c:3e:15:bd:a6:48:
7a:95:f5:c5:ce:d0:4e:de:21:f2:d1:75:7c:76:2a:
cf:8d:e8:1c:57:53:7c:79:5f:41:30:17:87:8e:3f:
89:8c:e9:ea:47:f8:98:38:1e:dd:e2:35:28:67:c9:
20:c6:c3:c4:65:72:76:cb:29:99:2f:1d:1e:1f:4f:
25:f3:95:23:d0:73:2d:8a:81:ee:19:94:64:2a:49:
ff:28:5d:47:96:f5:07:9e:63:3b:5d:00:e2:e1:8a:
52:9c:b3:fb:e5:41:74:d0:9e:c1:9b:43:83:1d:08:
71:7a:49:47:1e:d8:7f:db:ab:6c:4e:c8:35:eb:68:
54:da:ca:65:e8:25:b9:ad:70:57:15:99:1c:cd:c4:
5b:55:58:1c:a7:13:be:db:be:a5:78:fd:57:38:5f:
b2:21:e2:72:ed:8b:6c:30:0c:b2:31:be:53:a6:60:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7B:E5:F0:3B:CC:94:DB:6C:8D:09:34:88:66:13:B5:B5:FE:EA:FE
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/9D907218F58A11EDA942490BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.178.0/24
103.160.48.0/24
Signature Algorithm: sha256WithRSAEncryption
09:28:c1:2c:79:36:f4:9d:ae:4c:e8:58:52:32:d8:87:8f:17:
fe:31:d3:7c:0a:77:6b:68:99:81:cc:58:7c:04:38:ae:eb:78:
d2:0d:75:ad:54:74:e3:87:8e:fa:fc:d3:a2:45:09:a1:0c:46:
57:22:fe:98:cb:9f:f6:f8:f4:cc:17:38:35:a3:de:e0:5d:cd:
1c:ba:aa:10:a4:18:cd:d5:46:68:bf:57:70:48:f9:31:84:06:
ca:d4:70:09:6c:c6:39:75:0b:ec:03:5b:b5:18:f6:e7:20:66:
d8:48:04:f7:67:d5:1a:3d:89:a2:d3:e3:0b:5d:82:06:de:39:
cc:41:86:b2:72:94:01:bd:18:d1:d3:61:22:05:05:ee:85:4d:
08:9f:63:b8:d8:d9:93:dd:4c:99:a2:4c:c1:d7:ee:0f:6e:65:
cc:72:e6:64:9e:23:61:91:91:48:61:c2:8b:7e:93:18:c8:ae:
7e:cc:21:cb:54:b9:8c:be:7e:0c:2b:2b:10:44:d7:5b:4b:5f:
ef:5f:68:ae:fc:cc:4a:ad:ca:4e:b8:5d:0b:93:a8:c4:29:8d:
54:ce:42:d0:10:2f:14:76:9e:f4:9e:06:24:b6:96:45:8a:00:
6a:d2:9b:37:cb:77:ed:0f:3c:86:36:28:5d:c9:df:75:36:5b:
19:45:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org