Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/54F94792E24D11ECA37AFA6EC4F9AE02.roa
File: 54F94792E24D11ECA37AFA6EC4F9AE02.roa (raw, json)
Hash identifier: 8DsfT5CpCNME+w90tTkB+aq6+lxFVdmpKoZ3F0Tt2o4=
Subject key identifier: AF:EC:D8:5B:A5:48:E2:F7:0B:A4:8A:D7:67:0D:6D:BF:1B:3E:00:97
Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734
Certificate serial: 0A33
Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/54F94792E24D11ECA37AFA6EC4F9AE02.roa
Signing time: Sat 10 Sep 2022 19:56:26 +0000
ROA not before: Sat 10 Sep 2022 19:56:26 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 137985
IP address blocks: 103.119.100.0/24 maxlen: 24
103.119.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2611 (0xa33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734
Validity
Not Before: Sep 10 19:56:26 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=631cebe9-ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:84:c5:32:0e:c7:91:00:90:6e:74:7f:96:
22:5c:4c:a6:56:3b:5b:44:d5:c2:fd:9a:8f:b7:13:
8e:67:eb:d8:be:ae:19:82:42:59:ed:49:af:19:c6:
a3:58:dc:d1:2f:8e:79:de:a1:23:2f:10:cb:d8:eb:
52:c3:64:1e:8e:76:d8:84:7a:76:f4:b4:ad:ec:ec:
37:2a:16:a0:ce:02:b1:b5:dd:c9:11:43:e1:75:72:
46:9f:85:01:80:ed:6f:7f:13:1d:d3:a8:99:bb:9f:
85:2f:3e:c7:e9:56:de:f1:32:dd:14:99:fc:a4:c3:
92:c1:73:e2:83:33:30:4f:f6:b5:35:d9:3d:e2:b2:
60:ce:0e:71:ad:c2:b5:a4:3e:82:16:b8:5f:c1:26:
4c:1f:d2:ad:be:ca:80:66:74:75:76:27:3e:70:3d:
e6:94:38:2b:c2:37:5a:49:46:2c:31:77:c4:37:60:
2b:7a:d5:94:28:39:4a:d8:2e:06:0e:7f:22:fc:71:
57:8b:c6:29:29:22:38:00:72:19:98:03:dd:3e:55:
9d:25:04:1c:ec:90:39:9e:db:a8:e4:5f:8b:d8:13:
84:60:a1:57:b5:01:7a:86:4b:a4:eb:0f:b9:39:75:
54:1f:e6:91:45:af:d7:d7:6f:46:df:4e:d9:12:94:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:D8:5B:A5:48:E2:F7:0B:A4:8A:D7:67:0D:6D:BF:1B:3E:00:97
X509v3 Authority Key Identifier:
keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/54F94792E24D11ECA37AFA6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.100.0/23
Signature Algorithm: sha256WithRSAEncryption
af:b7:50:ac:09:78:9f:19:3f:9f:42:5f:21:9d:16:f9:a7:fa:
f7:6f:8c:f9:84:44:61:a9:24:ad:9c:66:6d:41:e0:65:ed:9e:
05:c7:71:5a:d4:e3:a6:d6:51:79:39:15:64:41:2f:dc:c0:d1:
fa:9d:31:e2:8d:1d:e8:45:85:3e:7d:b4:d7:ca:ff:52:26:cd:
2a:f3:3e:61:49:f3:8b:83:3d:a4:25:85:57:04:eb:70:2e:79:
e8:2d:34:5a:63:60:ee:6f:39:de:8e:63:72:2d:1d:6b:0b:90:
49:5f:a7:05:7b:a0:e5:d9:14:bd:b7:54:25:23:ec:f6:0e:7b:
e4:73:e8:48:dc:68:1c:c3:22:8e:4d:8b:2f:dc:ed:d3:78:4f:
92:85:b6:32:d7:68:9a:c1:fd:cd:3e:ea:64:f2:0b:dc:76:ed:
d2:66:71:71:ec:ee:3f:62:ea:aa:3b:7b:45:0e:7f:af:73:7a:
b9:5c:1f:bf:c8:12:17:71:03:3e:d8:4d:e6:fe:5f:a3:2d:06:
a4:99:ca:c9:c8:20:e7:57:bf:ba:0e:16:9a:28:34:7b:76:0e:
5a:d6:91:d4:5a:0e:42:12:9f:0e:b1:81:59:8a:62:92:96:87:
50:ba:bd:a1:1b:71:db:f9:09:68:58:08:c7:a2:02:95:06:9a:
fa:66:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-fra.rpki-client.org