Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/A63F3D56F17011EB99D90860C4F9AE02.roa
File: A63F3D56F17011EB99D90860C4F9AE02.roa (raw, json)
Hash identifier: tNpQNbU92RTdiYgvJlqDJ4OzF8UE+CSwkuGf8zYqxko=
Subject key identifier: 7B:09:C8:40:0C:A0:D8:59:91:53:08:0C:99:17:A7:ED:A0:62:C8:E2
Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial: 0498
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/A63F3D56F17011EB99D90860C4F9AE02.roa
Signing time: Tue 27 Sep 2022 13:21:24 +0000
ROA not before: Tue 27 Sep 2022 13:21:24 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 139088
IP address blocks: 103.155.18.0/24 maxlen: 24
103.155.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Validity
Not Before: Sep 27 13:21:24 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6332f8d3-3368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:15:40:b8:59:50:8d:a0:89:b6:6c:c6:fc:
4d:bb:d8:34:03:ec:a9:d0:68:f6:0c:be:c0:63:5e:
fa:56:4f:74:aa:45:0a:e0:b7:c6:ff:60:a4:36:ac:
2c:44:9a:19:58:22:69:f3:16:b9:b8:23:34:c4:41:
2d:a3:a8:47:c3:8d:d9:56:9d:cf:61:de:18:f6:40:
66:06:ff:b2:61:37:66:6d:70:c0:95:b3:f4:a9:10:
fb:9f:86:1d:37:af:d8:8d:14:b3:6a:80:3e:f7:76:
48:bd:44:e8:c7:15:c2:fb:74:50:bd:b2:85:a0:5e:
c9:3a:1e:c2:66:b4:61:14:51:a2:fd:df:aa:ae:4e:
47:26:ef:35:bf:4d:1b:9a:af:c5:0d:55:96:2d:77:
e6:11:14:01:30:16:87:60:6f:52:c4:3b:20:ee:9a:
cb:9c:5a:bc:2b:a2:44:7a:7c:ab:04:56:99:2e:4b:
c2:21:bc:5e:a3:e2:e4:bf:91:23:ab:3e:64:e8:ea:
0b:65:04:15:1b:53:c6:79:13:37:05:5f:cd:74:9d:
04:76:8c:15:43:ce:33:ad:2e:f0:01:3a:e8:ae:65:
fd:fd:72:6c:df:81:26:67:f1:ae:ae:f4:6b:33:d1:
97:89:b0:4b:8c:ee:58:f9:4a:1d:58:c4:23:82:9f:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:C8:40:0C:A0:D8:59:91:53:08:0C:99:17:A7:ED:A0:62:C8:E2
X509v3 Authority Key Identifier:
keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/A63F3D56F17011EB99D90860C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.18.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:75:5b:b9:6f:9f:68:97:a5:14:39:88:3e:9d:34:ea:d0:df:
87:e7:8a:a2:45:de:a1:10:57:8c:47:8e:91:9f:71:db:fd:98:
94:c8:46:f1:f9:5a:d3:57:46:23:4c:79:20:8d:b0:58:fe:8b:
dc:8a:5c:e7:da:6f:db:20:bf:0c:78:0f:a7:6f:7d:fd:6e:ad:
53:9f:48:38:ff:b1:89:f9:f4:46:0c:55:ef:10:2e:8f:50:56:
2b:a2:aa:4c:c6:e9:ae:02:b7:85:01:b1:c2:22:56:5f:46:86:
95:3b:54:84:74:9d:b9:f1:8c:fe:56:82:b0:cb:96:55:5e:ef:
de:7b:c5:be:e3:81:35:be:73:61:ae:b0:0d:42:c5:2a:f5:b3:
17:9b:1a:31:87:70:c9:99:46:ac:37:ca:57:22:b2:cd:43:41:
35:e6:fe:b9:5f:ef:d2:d1:76:e5:8f:43:59:27:7d:e2:3f:f4:
03:21:13:e4:b6:f9:11:7a:4d:9e:17:0e:d8:48:af:ac:c6:1e:
d2:05:76:f7:ae:09:c3:28:9e:a3:1a:a8:07:48:2b:d4:1f:b1:
62:dc:23:be:f1:34:48:62:27:3b:94:52:f0:e9:ce:5a:e7:2f:
7c:37:37:71:13:20:f2:66:f6:f0:9b:df:a0:64:d7:5d:37:f6:
53:e6:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-ams.rpki-client.org