Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/26E48E028EC311ED986E2148C4F9AE02.roa
File: 26E48E028EC311ED986E2148C4F9AE02.roa (raw, json)
Hash identifier: cQz0nlU7DxAOOK1BqOrVduGRxC3V6E2CnS7bcdMGqXA=
Subject key identifier: 43:F6:6F:A0:AE:15:46:56:8A:40:35:E0:38:5D:D7:D9:43:D1:E0:E9
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 04F5
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/26E48E028EC311ED986E2148C4F9AE02.roa
Signing time: Mon 10 Apr 2023 14:21:35 +0000
ROA not before: Mon 10 Apr 2023 14:21:35 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 63796
IP address blocks: 103.151.40.0/24 maxlen: 24
103.151.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Validity
Not Before: Apr 10 14:21:35 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64341b6f-41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:74:d0:a2:9b:17:2c:cc:fc:66:9d:ac:cd:
71:f2:56:98:70:d4:01:ae:4f:6a:bb:2f:cf:6f:06:
7f:6a:b3:32:1b:1f:54:ab:1c:cf:a8:33:3c:2f:44:
6f:24:87:6d:85:03:b9:a6:11:86:d7:95:d2:e7:cb:
ab:ab:02:77:1a:57:a9:2b:e7:e1:9f:8d:ec:32:7d:
58:d0:31:8a:60:39:a1:24:1c:4a:f0:55:a0:53:9a:
4e:59:13:04:9f:fe:cf:3d:84:90:ad:a0:c2:58:99:
24:ec:df:57:49:dd:f3:5f:75:41:a1:77:e6:16:98:
4e:d4:51:8d:62:7e:b8:9e:d4:79:58:b0:58:ea:a6:
a5:96:fd:3c:ba:f2:ff:5c:87:43:90:bf:f2:97:ed:
17:0f:e1:a9:fe:09:09:49:12:84:ed:40:48:2a:91:
b2:14:ac:05:1d:b5:7b:7c:c6:ab:52:7d:61:7a:49:
a7:1a:db:1b:13:2f:53:7e:25:42:b2:d3:41:0b:72:
30:68:f9:b2:37:6a:a6:45:ff:be:9b:de:30:ac:81:
ad:1e:6c:8e:09:65:ce:ac:22:02:64:5d:db:ce:1f:
15:da:7f:6e:aa:f0:94:ed:75:c6:7e:53:25:1a:bb:
98:38:a4:bc:50:00:91:3c:0a:84:7d:73:63:c6:a0:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:6F:A0:AE:15:46:56:8A:40:35:E0:38:5D:D7:D9:43:D1:E0:E9
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/26E48E028EC311ED986E2148C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:5c:98:50:32:c5:d4:bb:cd:d3:76:04:3e:a4:bb:5f:40:ea:
dc:e4:e3:45:fe:d5:0a:0f:f4:6b:46:80:79:53:44:59:a4:99:
c1:c7:d0:9c:72:1c:45:1b:c6:2f:ef:55:89:40:37:1a:5f:6f:
60:05:8f:1e:40:42:2d:2a:ba:73:35:10:c0:f4:25:1b:b7:37:
ed:ae:cf:c0:49:06:99:1b:56:c4:8d:89:d1:35:2f:27:8d:22:
01:09:87:f8:20:ee:ad:41:eb:82:10:cf:b0:60:c3:04:fa:5b:
6d:e3:fd:78:c4:72:29:3a:cd:cb:34:79:bd:09:43:44:a9:0b:
52:a6:59:58:09:36:9c:c2:7b:ba:56:c0:da:9e:62:22:30:34:
96:7c:77:43:83:d3:3f:38:92:5a:54:03:a1:13:a6:1a:93:dd:
54:a8:15:05:83:38:48:a4:bd:cb:c6:16:ab:ab:a9:7e:aa:bb:
a3:9e:51:88:2a:f5:1d:39:3b:f0:de:53:00:6f:71:fb:ff:7c:
67:d8:17:5e:e8:2c:3d:30:35:9c:b5:a2:55:a8:6b:2c:03:55:
8f:75:3c:8a:25:8c:00:ee:1a:dd:3b:25:e6:74:37:49:85:2c:
c3:c9:1e:43:c0:94:f9:80:96:d7:6d:e7:f7:ea:87:68:4e:79:
b1:d3:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-fra.rpki-client.org