Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/040E9DB2DC8611ED8B770227C4F9AE02.roa
File: 040E9DB2DC8611ED8B770227C4F9AE02.roa (raw, json)
Hash identifier: aGcHd/O4o7ILF+IV42iDF5ie3XBFXxhY1JhhkV3m5ts=
Subject key identifier: 0D:C6:36:7B:20:2E:51:9C:7B:74:AF:BE:E3:D8:FF:CE:23:D5:9D:AB
Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial: 0773
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/040E9DB2DC8611ED8B770227C4F9AE02.roa
Signing time: Sun 16 Apr 2023 18:39:27 +0000
ROA not before: Sun 16 Apr 2023 18:39:27 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 135339
IP address blocks: 103.214.156.0/22 maxlen: 22
103.214.156.0/23 maxlen: 23
103.214.156.0/24 maxlen: 24
103.214.157.0/24 maxlen: 24
103.214.158.0/24 maxlen: 24
144.48.112.0/22 maxlen: 22
144.48.112.0/23 maxlen: 23
144.48.112.0/24 maxlen: 24
144.48.113.0/24 maxlen: 24
144.48.114.0/24 maxlen: 24
144.48.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907 (0x773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Validity
Not Before: Apr 16 18:39:27 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=643c40df-6cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:e9:3d:8e:04:74:cf:54:b2:da:ca:2e:db:
f9:fb:2c:a6:0e:26:22:38:a0:9f:29:38:16:ac:49:
76:29:53:9d:5f:2c:1e:05:59:00:d1:1d:d2:a5:b8:
c7:12:1d:9a:90:8d:45:11:81:1d:11:39:e3:e0:87:
04:1e:59:92:20:6a:e0:a3:dc:59:18:80:4e:92:02:
56:64:41:fe:7d:f7:47:fa:97:18:86:e2:eb:21:d5:
2f:b6:a9:6d:2f:46:af:f9:26:3f:a8:23:c7:09:2f:
bb:78:20:c3:69:2c:59:4c:66:11:8b:49:2d:18:65:
cd:9c:40:cf:df:2d:7a:64:98:f8:bb:ae:e5:c3:1b:
10:89:9e:02:6b:ba:36:4b:8d:db:71:e3:03:0d:fd:
44:ba:0e:f4:ef:9a:5f:71:e1:47:13:c5:63:c2:fa:
af:50:3e:16:1b:30:1a:3e:28:d2:77:47:b8:38:69:
ba:4d:0c:db:c5:e5:e7:e2:62:d6:a8:ea:1d:cd:37:
7e:e2:45:ef:73:78:1f:4d:73:49:bb:46:62:6a:b5:
5f:bb:82:11:bf:aa:9f:95:c7:d7:5e:f8:3a:be:88:
1a:b7:e2:bc:a1:18:b1:a8:ab:0b:1a:80:7d:8e:bc:
3b:78:f1:a3:9d:8e:ff:5c:1c:bf:9f:69:b5:be:c6:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:36:7B:20:2E:51:9C:7B:74:AF:BE:E3:D8:FF:CE:23:D5:9D:AB
X509v3 Authority Key Identifier:
keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/040E9DB2DC8611ED8B770227C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.214.156.0/22
144.48.112.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e0:e4:38:0f:eb:91:03:91:f8:73:02:dc:86:99:92:86:ea:
c2:d2:92:4d:a8:11:a5:43:43:0d:4a:93:f2:3c:5f:82:56:b2:
94:bb:1f:1b:67:e2:a2:d6:78:04:2e:7c:94:f2:75:49:33:59:
98:dd:d2:f5:1b:bf:4e:dc:0b:81:94:50:fb:a9:f5:6c:b2:25:
40:51:c3:0f:eb:73:ea:da:b5:86:1a:a9:b3:3f:76:89:35:fe:
64:bc:5a:16:33:04:d1:b0:19:e9:57:be:f1:f3:c6:60:29:ee:
23:ab:bc:f3:bb:5c:fd:ee:79:20:31:97:fa:d9:8a:27:cb:c6:
09:57:3b:3c:31:71:37:50:e2:e8:2d:81:1d:e7:b2:e8:34:6c:
30:2b:fe:88:43:61:cb:72:8e:29:66:28:a7:14:7f:11:84:2c:
ab:4b:67:5a:fc:cc:b1:de:76:e7:2e:87:77:db:f8:fa:dd:f8:
e4:bf:a2:2b:71:c6:b8:6c:9e:bf:62:21:ef:d5:d5:8a:70:6a:
1f:4c:04:e5:a6:77:c6:e6:4a:09:2c:3b:92:49:ba:fc:b7:63:
1b:e9:ff:82:c3:56:88:d7:a1:5a:fe:3f:2d:52:f5:f8:9a:78:
a2:67:ec:57:9d:80:bc:40:b5:7e:d8:e9:48:86:55:7e:a0:fa:
ba:fb:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org