Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/8009076A8B0411ECB2C4F915C4F9AE02.roa
File: 8009076A8B0411ECB2C4F915C4F9AE02.roa (raw, json)
Hash identifier: l0YmWureXKZjS4pzA/U3wbS12vD/MN1Tw8XDp8RerYo=
Subject key identifier: 58:EE:CB:55:AE:3C:03:3C:08:F1:04:40:36:FD:3B:58:64:C3:DA:C4
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 0212
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/8009076A8B0411ECB2C4F915C4F9AE02.roa
Signing time: Sat 07 Jan 2023 04:23:21 +0000
ROA not before: Sat 07 Jan 2023 04:23:21 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 149454
IP address blocks: 103.179.240.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Jan 7 04:23:21 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63b8f3b9-e55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:e6:78:8c:8a:3f:58:96:a1:47:cf:8d:68:
88:2c:59:93:8b:0a:53:78:da:db:25:29:8c:49:c7:
ea:3e:ed:7c:52:bd:c3:04:2d:d3:81:d7:cd:99:5a:
85:ee:4d:f5:9b:08:7c:87:e7:51:45:8c:85:32:fb:
bf:b1:7c:ae:bc:26:ac:ca:c3:8c:d5:ef:56:73:83:
96:24:99:86:5f:9f:05:e4:3f:9c:1e:bc:15:b5:9f:
ce:bf:fa:a3:ed:17:25:a0:47:3f:8b:11:ad:dd:fb:
b4:3f:07:36:49:5c:79:3c:10:00:d6:c4:90:6d:19:
8e:90:d9:e1:54:2e:e8:1d:df:69:99:f5:c5:39:d6:
16:c5:bb:45:80:72:22:94:5d:90:c1:5b:e8:57:87:
2e:33:c4:23:c0:41:62:f3:8e:69:2e:8f:d0:08:35:
54:7b:0f:77:96:3b:ed:a4:72:63:b0:58:25:12:27:
84:27:5d:1e:45:1b:e4:4f:d5:20:b4:90:cd:78:f3:
f8:df:98:37:24:df:17:21:90:c7:8b:18:a6:77:8e:
f8:37:de:3c:3f:07:ce:15:9d:dd:65:7d:27:0c:df:
22:e8:55:29:4d:87:ab:52:84:06:7e:68:c1:a5:5c:
b6:1c:e3:67:3e:64:f8:f0:ef:a9:eb:9b:d4:cd:a7:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:CB:55:AE:3C:03:3C:08:F1:04:40:36:FD:3B:58:64:C3:DA:C4
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/8009076A8B0411ECB2C4F915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.240.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:a0:54:ce:92:4a:d8:72:c0:48:46:08:a5:e4:20:c2:28:b1:
75:de:e1:20:13:37:de:b4:6a:08:e1:82:d1:d8:e4:93:08:43:
2a:b4:aa:59:15:b7:92:13:d2:70:76:80:d8:b5:54:e8:47:68:
e9:5d:11:a0:f5:0a:ce:ad:8c:b6:b0:3f:59:7f:2d:cc:b2:e9:
ea:cd:9e:54:26:1f:93:73:4f:1f:7f:f8:aa:ba:ea:82:2c:0c:
9a:3d:30:15:f9:a2:a6:ab:96:5a:c9:82:e3:f9:60:04:6d:03:
77:a9:21:91:ba:29:6b:f9:8f:d8:15:0d:d6:d8:1e:42:a5:00:
38:fd:d9:56:df:e8:8e:59:6c:c5:7a:f0:b1:de:52:13:d2:2c:
5a:1e:61:7d:ed:c9:34:5e:c3:48:a0:2c:6c:e9:77:77:a3:b9:
09:38:26:03:21:33:c3:7d:46:2e:1a:0b:49:f8:ed:09:fb:38:
c2:a4:bc:b5:eb:a0:5f:b6:8b:0f:81:ca:25:6e:09:40:14:b1:
f1:ea:be:75:dc:88:f4:cc:97:9b:c3:fe:20:e0:d2:62:f5:81:
14:46:3a:8f:70:45:22:97:42:f5:e2:44:ea:fe:b5:de:9b:e1:
bf:c1:b6:0e:54:ab:de:ef:f4:65:1f:a7:66:9e:e9:15:55:3c:
c6:d3:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 08:32:06 2023 by rpki-client on console-fra.rpki-client.org