Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/79E446D61E0E11ED8709E071C4F9AE02.roa
File: 79E446D61E0E11ED8709E071C4F9AE02.roa (raw, json)
Hash identifier: 864StHFjp4pC7139OmYcjirsS1/Nsbqq711jsDYy1tE=
Subject key identifier: 78:F8:66:1C:2F:50:05:38:CE:64:70:FA:46:C7:43:55:21:BC:1A:1D
Certificate issuer: /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Certificate serial: 15
Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/79E446D61E0E11ED8709E071C4F9AE02.roa
Signing time: Wed 17 Aug 2022 09:25:04 +0000
ROA not before: Wed 17 Aug 2022 09:25:04 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 150155
IP address blocks: 103.15.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Validity
Not Before: Aug 17 09:25:04 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62fcb3f0-edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:a6:15:6b:16:ce:8d:9b:3f:94:1a:2c:d8:
bf:8a:43:c6:3b:c0:50:14:f3:48:5b:a2:f3:70:cf:
87:80:43:7b:ce:2a:51:95:78:f1:6b:0a:95:18:5f:
54:f7:09:7b:8e:e1:2e:f3:67:d8:e3:08:5c:c0:df:
95:c3:a5:0c:e5:9e:6e:fe:c6:bb:b4:08:fa:63:df:
66:f2:7e:8d:c5:49:d2:6a:6c:e7:fd:48:62:83:8f:
c7:78:ba:e8:24:08:22:fd:b1:ac:01:89:22:cb:29:
92:3a:84:d9:99:d2:86:e8:09:4f:fc:03:67:f1:45:
81:2d:31:8f:4d:e2:d4:43:a6:de:fa:53:df:9b:b1:
a6:bc:b6:25:29:89:81:70:30:c5:54:04:80:55:7b:
74:f2:e4:4c:17:03:63:b9:ec:86:0d:62:08:62:fa:
b1:f4:f6:2f:5f:98:e7:13:a4:bf:28:55:ee:c4:fb:
06:2c:2e:37:1d:71:49:5b:cc:68:5b:75:83:58:27:
93:28:6f:6c:42:d6:5f:08:8e:f0:d5:6c:ca:ce:ab:
d5:48:53:13:84:46:91:77:1d:c8:c9:61:ba:2b:76:
ea:97:6c:00:37:4f:89:cc:d6:47:47:b2:bd:3e:b4:
82:e0:ff:9f:e9:17:ad:20:14:0b:aa:9b:65:52:a8:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:66:1C:2F:50:05:38:CE:64:70:FA:46:C7:43:55:21:BC:1A:1D
X509v3 Authority Key Identifier:
keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/79E446D61E0E11ED8709E071C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
42:63:b4:3a:1a:53:c2:5c:15:13:ba:28:6a:77:a6:f6:48:2f:
28:2e:29:86:76:4e:fb:f5:8a:09:80:32:4f:b3:93:91:d6:7e:
96:f8:01:d0:d1:59:ba:f2:35:32:50:e4:c8:66:aa:8d:75:12:
fb:19:96:82:e9:2a:ab:29:d5:95:2e:01:31:a6:e5:22:f4:d9:
b5:99:f7:4d:cb:fd:c8:3c:4b:9c:dd:ec:3e:6b:1d:79:5d:f7:
3a:e6:04:4e:5e:83:90:84:a5:b0:1e:65:80:90:af:f2:4e:7d:
a1:9c:30:30:1c:99:d2:a8:9a:61:87:46:3f:14:e5:31:6a:3a:
ef:a5:9d:0e:b7:fa:1c:ef:77:b9:6d:db:fb:f2:b2:05:12:45:
bc:1c:9b:eb:d9:6e:fa:09:8e:95:d3:df:69:19:a7:f9:a1:5a:
93:ad:fb:66:f3:4d:54:1a:43:14:b9:1f:db:4e:5a:43:43:8e:
97:de:ed:c8:b7:89:e1:7d:8b:45:e9:ba:b3:81:3b:9b:d4:0d:
a2:22:22:2b:6c:7b:24:d2:d8:72:a7:1d:77:f8:fb:5f:de:4f:
d5:1d:9a:1a:27:8f:eb:e7:f5:06:0f:ed:29:de:3d:43:50:d4:
04:e6:54:c3:b0:0f:b6:3d:45:94:2f:33:45:0e:fd:81:f3:28:
f9:20:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:05 2023 by rpki-client on console-ams.rpki-client.org