Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/63919BE663A611EBB38F1E86C4F9AE02.roa
File: 63919BE663A611EBB38F1E86C4F9AE02.roa (raw, json)
Hash identifier: 5kenmVAkQppFtktyYur0xmVQEAXJDUOD/7SA8xDzfuo=
Subject key identifier: 07:AD:2B:27:10:F9:39:C1:02:74:E0:C4:E3:48:56:83:C5:80:E4:79
Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Certificate serial: 0536
Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/63919BE663A611EBB38F1E86C4F9AE02.roa
Signing time: Wed 25 Jan 2023 00:50:41 +0000
ROA not before: Wed 25 Jan 2023 00:50:41 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 63526
IP address blocks: 103.161.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C
Validity
Not Before: Jan 25 00:50:41 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63d07ce1-2ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:71:50:fb:59:0f:62:f8:e8:13:c4:f5:fd:
07:98:74:6a:97:b2:6a:a8:63:e0:3d:6c:02:89:26:
d0:c4:bb:c2:94:4c:4a:49:97:8e:4c:e1:2e:00:73:
aa:46:8a:ac:88:08:33:29:a7:23:47:66:6f:f3:e4:
b1:91:eb:f1:21:a9:68:b7:a1:e4:a5:c8:84:29:b4:
f4:46:fd:27:91:1b:71:54:af:7a:00:fe:2e:bf:fe:
e4:ca:91:8a:e6:b1:1b:20:c7:2e:15:11:bf:6f:54:
6e:e9:04:df:f1:0c:d8:93:cb:d8:88:8d:45:b4:77:
39:7d:8d:60:04:ba:46:61:76:94:38:20:66:42:77:
28:4d:cb:ba:d0:32:04:ef:34:ec:58:d4:35:ce:0c:
e4:c1:9b:bd:fd:e7:43:8b:77:e5:8c:3d:de:94:dc:
3d:4b:1f:a4:41:6a:68:2e:07:05:0e:d6:46:33:27:
3b:3d:f0:2c:5a:b4:ba:d4:12:db:af:fb:9b:13:02:
4e:a5:29:65:bf:06:b2:cd:f4:0e:78:a9:c5:e7:14:
d0:60:5c:c3:90:b5:6f:6c:04:76:5d:e4:25:f0:e2:
4a:e8:7f:12:9e:f6:54:af:67:c4:18:d2:80:dc:af:
3e:6c:15:05:7b:9d:d6:62:43:72:b3:66:81:7e:81:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:2B:27:10:F9:39:C1:02:74:E0:C4:E3:48:56:83:C5:80:E4:79
X509v3 Authority Key Identifier:
keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/63919BE663A611EBB38F1E86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.71.0/24
Signature Algorithm: sha256WithRSAEncryption
13:41:c6:49:6e:11:53:31:28:8c:c5:86:b5:ee:33:01:a3:fa:
26:e6:7e:91:83:11:dd:64:d1:ee:3e:5b:a0:a6:2d:56:3b:c7:
a0:10:c7:29:f2:dc:e2:33:c7:e7:72:f8:e9:ec:9f:d9:6b:84:
81:96:88:df:45:12:86:73:70:df:f2:98:f7:1e:b5:4a:e1:ca:
93:01:33:31:6f:fc:7b:5e:20:88:a3:e8:82:91:a4:d3:d2:e0:
47:bb:05:d7:48:44:df:aa:af:17:7f:95:31:62:65:86:b9:e9:
a9:37:82:ed:89:af:82:c4:b8:d8:31:c9:73:a5:df:c3:62:f5:
45:9c:db:8e:67:37:24:90:7a:40:2d:cd:7e:ba:66:7c:06:30:
ef:de:61:4d:16:a1:9e:70:22:a4:68:fc:44:0f:a5:1e:7d:aa:
d2:1b:e8:37:c0:1c:b5:5d:a8:74:f0:ee:86:be:4c:23:21:ed:
b7:41:6d:04:67:d6:be:96:99:f1:ee:72:25:a1:78:14:75:45:
54:72:03:7b:d7:f2:79:b7:aa:77:8a:a9:29:09:52:93:fc:aa:
06:e2:a4:9d:e6:04:fa:71:1d:89:a1:f8:25:b0:fe:38:8b:1f:
0f:92:a6:31:bf:b4:b6:ec:ee:1d:22:ee:28:8f:aa:7a:41:24:
b3:b1:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 29 16:15:30 2023 by rpki-client on console-ams.rpki-client.org