Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/2525FE9C1A5C11ED939EFD3FC4F9AE02.roa
File: 2525FE9C1A5C11ED939EFD3FC4F9AE02.roa (raw, json)
Hash identifier: OyV7CFzgAmwWsPZQXTGHWDC0FyPutJlmVBbL0ACmAzA=
Subject key identifier: A2:30:74:9D:25:69:CB:B7:2C:12:13:CA:37:66:C4:54:B8:5C:D4:91
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 04D0
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/2525FE9C1A5C11ED939EFD3FC4F9AE02.roa
Signing time: Tue 01 Aug 2023 00:42:00 +0000
ROA not before: Tue 01 Aug 2023 00:42:00 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 61228
IP address blocks: 103.166.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Validity
Not Before: Aug 1 00:42:00 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c854d7-71f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:5a:49:c6:dd:8c:3a:40:04:02:7b:d0:7b:
f0:9d:6f:64:f2:1e:26:9c:11:c2:2c:a0:50:90:6a:
48:42:7c:a6:15:2f:59:2b:37:e0:33:07:51:8d:f8:
61:95:b6:12:49:1f:f8:b5:09:60:73:cd:b9:a3:2f:
a4:5d:33:a9:4d:e3:be:d1:69:eb:2d:d4:e8:fd:34:
be:1f:36:d9:df:07:37:05:0f:a7:d0:ca:3b:89:64:
cc:c0:cf:7b:06:50:5a:e8:6d:34:86:dd:2c:84:c1:
00:dd:64:9b:bf:87:fc:f3:e5:9e:68:10:4a:f7:fa:
fb:f5:73:45:d4:23:ca:fe:6c:a8:a1:55:90:c9:60:
3e:2d:f6:f7:da:23:23:48:92:3a:00:96:33:b3:2d:
82:1c:a2:b1:f5:0b:db:04:62:7e:a1:4c:7a:42:bf:
57:67:b9:82:3a:d8:aa:aa:9c:70:06:b4:ec:81:8e:
06:77:93:eb:9a:3b:01:45:10:f0:4f:0e:70:f0:dd:
75:22:0c:8e:3d:4e:46:7a:49:47:e9:82:d2:ea:b3:
69:9c:51:8c:14:9c:55:d8:17:9a:7f:5c:dc:77:49:
30:dd:09:87:c0:81:e4:36:cc:b2:24:bd:e1:99:7c:
8b:84:7c:f6:04:25:a9:d3:0c:d4:31:d5:c0:ea:38:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:74:9D:25:69:CB:B7:2C:12:13:CA:37:66:C4:54:B8:5C:D4:91
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/2525FE9C1A5C11ED939EFD3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:51:c6:a4:36:9d:11:ee:8b:34:3d:6b:8f:8e:64:46:20:c4:
53:63:88:38:2c:2a:d8:1e:58:c1:fa:62:df:83:d6:65:b3:07:
9b:3d:d5:a6:2e:ed:db:d9:3c:48:39:09:26:7f:1d:3f:07:28:
ce:d3:5d:42:4d:09:6f:1c:83:b5:6e:00:8a:7e:d5:c6:61:2c:
c4:a5:bd:a4:67:ab:7a:e2:4e:33:68:67:ed:57:9f:f7:98:ed:
74:24:1b:1e:a2:db:0d:bc:66:0b:6a:2c:c5:93:f9:50:8a:57:
2c:93:8d:a6:13:ad:c4:93:9f:02:a8:8a:74:e3:90:18:b9:82:
6f:6a:8f:fb:f7:d1:5e:8c:53:37:2e:27:21:e1:75:26:d4:ac:
3c:4b:6c:ef:a4:49:06:51:11:08:65:0e:10:d5:c2:a2:05:cc:
96:75:6f:99:d9:b2:61:c3:14:61:a4:a9:9e:a1:a2:34:e1:2b:
72:84:23:0e:4f:c8:29:e9:3c:16:3c:b5:eb:c7:81:34:07:e0:
ad:1e:e4:cb:1b:f4:73:c1:40:61:71:78:b4:b2:0e:72:47:a0:
51:13:1e:3c:6b:62:ce:a3:f0:23:28:80:1e:3c:6d:86:40:4d:
40:94:12:93:c8:ac:a2:bb:34:d4:1e:db:d5:89:13:f3:9b:94:
02:1a:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 06:23:36 2023 by rpki-client on console-ams.rpki-client.org