Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/3889262E850711EDB1865628C4F9AE02.roa
File: 3889262E850711EDB1865628C4F9AE02.roa (raw, json)
Hash identifier: 5wNC6yuqKBvIwyfUZoFPRGBGk6WNBTz5I3J/7+LzOqA=
Subject key identifier: 2A:43:77:C8:AF:9D:26:A9:61:31:55:AE:BC:D1:C2:6C:A4:C7:0F:A8
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 04CD
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/3889262E850711EDB1865628C4F9AE02.roa
Signing time: Tue 01 Aug 2023 00:41:57 +0000
ROA not before: Tue 01 Aug 2023 00:41:57 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 201815
IP address blocks: 103.166.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229 (0x4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Validity
Not Before: Aug 1 00:41:57 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c854d5-f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:f1:c2:d2:6f:78:89:cf:af:32:27:98:36:
d8:52:bc:a5:c2:e5:fd:ea:65:8c:09:16:7e:8e:ff:
d5:40:8a:64:fe:cd:87:56:38:bb:0e:e6:2a:d5:0d:
50:c7:c0:db:48:70:75:92:ec:59:95:fa:75:68:f0:
90:83:0f:6b:99:a5:09:15:81:9a:ce:b7:2e:43:a5:
b2:15:42:9d:d6:a6:e1:2a:07:fd:bc:e3:a5:15:27:
b5:54:43:80:9a:a7:86:78:99:a1:55:20:95:0b:d7:
7f:0b:27:43:e5:bd:18:13:5d:75:ea:0e:24:2b:dc:
7a:f2:6a:9d:5e:ce:25:bd:d8:47:92:34:1e:e0:22:
45:74:13:9f:75:40:6d:4b:9c:10:ca:cd:fe:f7:c3:
01:3e:da:a3:04:97:61:b4:f1:5e:d9:b0:59:d9:ee:
51:06:55:d9:7b:f2:f8:84:8f:46:33:8f:9f:8d:0b:
b0:d2:42:d0:6a:b3:8e:0a:89:0a:d6:70:9e:9c:1e:
5a:96:84:b1:c2:ed:39:3c:3b:59:8f:da:17:28:30:
96:b0:0d:f8:4b:6d:bd:ad:90:a7:04:4f:4e:a2:51:
b1:e4:7d:14:e4:84:cd:2f:c1:de:f8:a3:fb:b6:00:
ef:2e:27:b9:b2:c2:da:28:10:35:8a:bd:6f:96:b7:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:77:C8:AF:9D:26:A9:61:31:55:AE:BC:D1:C2:6C:A4:C7:0F:A8
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/3889262E850711EDB1865628C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.246.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6d:d4:f1:ae:54:30:cc:61:89:ad:6b:18:19:3a:74:3e:0f:
ba:c0:50:66:b3:2f:04:8c:d1:16:7e:f8:0d:d2:07:b2:80:71:
89:b2:60:01:cb:2b:b0:cd:b8:7a:27:bc:c2:91:25:b5:ee:bf:
36:59:0a:8c:db:75:3f:48:52:f8:69:03:0b:0c:db:44:cb:e1:
da:a0:03:17:70:96:48:b2:0d:5b:39:88:8e:4b:81:a8:52:94:
09:23:69:47:28:e7:81:04:59:ab:81:41:0f:02:d6:67:1e:bb:
6d:cc:70:a3:3f:27:b1:d7:a0:2b:a8:2b:68:4f:4f:56:77:c6:
d8:f6:c4:52:20:42:4d:34:99:05:e2:07:8a:0d:89:7a:91:27:
f3:9b:a0:7a:73:5e:12:5b:98:02:92:f1:de:22:07:ea:b9:81:
34:32:0d:a6:2a:df:50:e7:4e:fc:cc:bf:ed:99:17:f1:eb:fd:
fa:f0:ec:74:42:e7:3c:9f:ae:03:28:88:e8:98:50:1d:4f:3c:
e1:5d:cb:07:69:7e:99:09:37:68:1d:63:07:96:c2:c9:79:8c:
4c:0a:ae:17:d4:d1:20:ce:9e:84:3f:e8:f7:ef:34:6e:48:9c:
6f:92:3a:0d:c2:e9:70:c0:09:be:8a:9b:d0:46:ea:b7:5f:9b:
0b:d8:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 06:23:36 2023 by rpki-client on console-ams.rpki-client.org