Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/9DBAEE442BB511EC8499F575C4F9AE02.roa
File: 9DBAEE442BB511EC8499F575C4F9AE02.roa (raw, json)
Hash identifier: 94pxJ+0SQOtxUsHjlSEenyq8VanJKoT9Vye7SWl0Deo=
Subject key identifier: 7C:11:0A:A0:01:32:70:A9:3A:07:E3:7D:5C:8F:8E:B9:29:24:CC:A3
Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial: 039E
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/9DBAEE442BB511EC8499F575C4F9AE02.roa
Signing time: Tue 07 Jun 2022 13:39:41 +0000
ROA not before: Tue 07 Jun 2022 13:39:41 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 39618
IP address blocks: 103.151.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Validity
Not Before: Jun 7 13:39:41 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=629f551d-4ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:31:20:a4:98:d2:90:10:ea:13:d0:4d:27:
e9:ef:3d:0d:82:5a:56:62:d7:9e:57:e6:62:d5:53:
21:c9:de:89:b4:e5:fb:90:16:6b:82:e1:75:e7:1e:
b4:92:0c:66:fe:da:71:1a:26:1a:b9:8b:90:d8:0e:
52:75:9b:73:a6:98:76:6f:36:3f:d6:16:76:38:fb:
95:9b:fa:42:ee:ee:34:49:9e:13:d6:5f:48:b2:dd:
c2:16:da:d4:84:a8:75:64:4f:00:d4:49:31:7c:89:
d9:8f:bf:cd:fe:a5:34:6b:1e:a8:50:03:52:68:99:
32:b0:0a:eb:cd:44:3b:5c:06:72:8a:39:70:56:f8:
58:e0:66:88:62:84:9e:81:d4:99:81:d1:e5:d4:d7:
0e:d4:81:5f:d1:1b:1d:d5:59:ba:d2:38:d9:9b:52:
83:a2:9f:9a:18:c7:52:88:9b:b4:3d:db:2e:3e:c8:
09:09:45:ed:a7:83:ea:12:c4:10:70:c9:04:0d:62:
4e:d4:a5:bd:bd:a9:a4:7f:28:cd:8c:d7:98:66:30:
a2:1c:3b:e6:67:de:e2:45:1c:c4:30:fa:1b:09:b2:
f2:cd:1e:42:f2:8f:0e:66:71:65:50:42:b4:cd:01:
da:78:cd:74:5a:9f:be:4a:9e:87:2c:32:e1:cb:36:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:11:0A:A0:01:32:70:A9:3A:07:E3:7D:5C:8F:8E:B9:29:24:CC:A3
X509v3 Authority Key Identifier:
keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/9DBAEE442BB511EC8499F575C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.41.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d8:e4:5d:c8:89:f1:8a:1b:40:57:be:0a:9f:d0:98:24:be:
d4:7f:30:68:27:f0:36:c2:6c:de:ea:e4:df:e6:0b:7a:ac:f8:
78:09:63:bb:ea:70:3a:57:a8:a8:23:64:8f:33:e1:6e:eb:02:
4f:ad:ae:9a:da:2d:85:ec:2a:34:70:8b:9e:b9:e7:14:c1:31:
0c:91:43:c8:45:f1:27:48:19:da:e4:c2:49:34:20:c4:fb:71:
c0:7d:63:d8:3d:c5:90:fa:51:a4:df:80:d6:fb:2d:7d:85:ec:
2c:2b:4b:0d:41:c2:b5:d8:e2:58:2c:ba:be:ad:b8:37:0a:9d:
5f:18:73:96:79:f6:98:c1:b3:f9:94:b4:a7:00:ea:3b:18:5d:
b2:9c:e6:4e:d5:88:9b:0a:d7:65:36:de:3e:17:02:c9:f8:a0:
8f:a6:48:30:4c:ac:f4:6a:51:e3:dd:9c:e5:76:ec:da:9c:76:
b4:5e:ae:1f:60:f1:ba:13:48:0a:31:1e:55:77:b5:3c:be:3d:
d2:68:42:5b:1c:1e:cf:f9:0f:2d:32:a6:ce:8a:14:7e:93:87:
3b:42:5e:38:30:33:2d:4a:45:bf:39:69:e5:90:4a:83:a6:e1:
e6:52:2b:0c:22:38:af:b6:11:21:76:4e:4d:3e:75:fa:63:65:
a6:ef:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org