Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/0672814C1D3A11EDA7336C83C4F9AE02.roa
File: 0672814C1D3A11EDA7336C83C4F9AE02.roa (raw, json)
Hash identifier: cpTBfjPIxGZYJAhb5ZX8WmHF5aLN8Z4V+RK0aKLtmmQ=
Subject key identifier: 3C:88:1C:E8:71:69:90:82:FD:9A:85:FD:F7:D4:65:8B:38:DE:B8:8F
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 03
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/0672814C1D3A11EDA7336C83C4F9AE02.roa
Signing time: Tue 16 Aug 2022 08:04:17 +0000
ROA not before: Tue 16 Aug 2022 08:04:17 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 147050
IP address blocks: 103.141.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Aug 16 08:04:17 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=62fb4f81-071e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:8b:6d:24:f0:4d:63:0b:89:ce:bc:3a:1e:
a2:6d:7b:6e:08:e0:72:56:37:8b:df:4c:52:92:f7:
95:86:f4:1d:48:3c:2c:e7:bf:27:7d:f8:14:92:b3:
0f:c2:48:4b:fc:15:b4:4f:2d:13:3c:93:f9:c7:aa:
98:d2:f8:a0:d7:1e:cb:55:dd:9c:a2:f3:23:2d:1b:
f6:2a:d3:45:4b:b4:ef:ac:50:56:c0:a2:7f:7a:4c:
e7:19:15:5e:f6:3f:a3:dc:2c:53:10:0f:9b:ef:44:
23:18:96:53:5d:1a:48:5b:b6:0a:05:d9:ef:07:59:
0b:7a:f4:c7:2b:2e:1c:58:22:10:9d:02:47:ef:99:
43:ee:d4:f5:e0:2d:e0:02:28:96:55:8d:87:d6:46:
de:a7:bd:6a:01:bc:54:ef:39:68:4f:87:e2:96:4c:
d1:18:32:5f:bb:38:ad:6a:43:47:a2:dc:91:49:ea:
5a:60:c8:3d:05:fc:8e:67:26:49:e6:0d:57:bd:88:
d4:42:90:61:69:d1:cd:f9:5d:89:d8:a9:16:15:e0:
1d:3d:61:36:f5:f5:34:94:11:46:ba:b1:a4:22:05:
73:22:e9:6e:18:b4:98:7a:35:25:cb:67:0c:b8:a7:
1e:b1:50:d9:d6:1f:11:cd:52:81:6b:0b:19:ed:98:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:1C:E8:71:69:90:82:FD:9A:85:FD:F7:D4:65:8B:38:DE:B8:8F
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/0672814C1D3A11EDA7336C83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8c:e5:74:c8:26:68:d7:ba:7a:a8:48:c6:bd:0d:ed:1b:53:
a9:6f:a2:de:66:47:ae:ce:ba:6c:f2:53:40:9c:57:54:4f:4d:
78:b2:cd:e7:bd:2d:a9:0a:5d:61:68:a3:94:96:52:f3:6b:4f:
fb:c2:b7:e5:64:7a:cf:17:c4:d9:19:57:df:38:28:94:ca:fd:
f6:56:eb:9a:9b:bc:65:eb:be:3c:8a:01:b9:81:6d:e2:74:4d:
67:2b:f8:bb:fd:13:80:d1:1d:d6:8c:f3:76:fb:b0:7d:fe:78:
78:ae:25:dd:45:04:56:91:7d:2a:a1:ac:5e:0f:2d:c4:07:3d:
27:11:2a:62:25:8a:06:a1:88:6b:9f:e5:6a:69:82:29:c1:a4:
89:13:34:22:88:20:2a:ae:70:58:11:f4:2c:48:7b:8b:2f:68:
fc:1a:17:ea:e2:db:ec:a8:e8:53:cd:8b:83:28:b0:9f:10:fa:
f4:6c:dd:3f:1b:b2:15:01:f8:d8:21:78:b6:43:e2:42:65:7b:
7e:a0:c8:94:c2:1f:c6:8d:48:6e:31:40:ab:df:14:4b:a7:a5:
50:cc:62:ab:dd:f5:b4:d5:c9:2b:29:27:e6:dd:04:58:c4:d7:
e1:04:88:f1:c0:b0:d4:4b:2e:9d:2b:a0:c4:c2:ae:b5:b2:17:
00:c0:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org