Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/CEED6A9CC44C11EDBB672E6BC4F9AE02.roa
File: CEED6A9CC44C11EDBB672E6BC4F9AE02.roa (raw, json)
Hash identifier: 4FVcLXwSnUGHAxtsmHsWNEb92tD1hxMYgHuSTdzzit8=
Subject key identifier: CC:15:69:89:BC:FE:8E:0D:06:84:8A:23:D6:F8:AA:32:3D:BD:CC:24
Certificate issuer: /CN=A91D1EDC/serialNumber=5FA0CE70061E49B73C378F1C36F6959641925AED
Certificate serial: 06F3
Authority key identifier: 5F:A0:CE:70:06:1E:49:B7:3C:37:8F:1C:36:F6:95:96:41:92:5A:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X6DOcAYeSbc8N48cNvaVlkGSWu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/CEED6A9CC44C11EDBB672E6BC4F9AE02.roa
Signing time: Mon 04 Sep 2023 21:49:02 +0000
ROA not before: Mon 04 Sep 2023 21:49:02 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 45158
IP address blocks: 103.251.172.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EDC/serialNumber=5FA0CE70061E49B73C378F1C36F6959641925AED
Validity
Not Before: Sep 4 21:49:02 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64f650ce-5c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:6e:86:00:49:91:7b:fa:f6:ff:44:00:86:
3d:b9:ac:d2:d8:19:00:b4:e3:ec:fe:13:ed:1a:4d:
f9:81:e1:6e:83:e4:c0:6f:cb:2b:9e:b9:0b:d9:6a:
92:cf:55:62:73:af:ee:4b:d7:78:48:22:cd:c1:12:
89:fc:10:1b:5b:46:db:90:9b:a2:55:3d:3d:db:3d:
5a:dc:48:29:5f:9c:ac:5e:80:31:87:6f:8a:c7:b5:
aa:35:1e:f4:d7:b6:0d:e5:a4:12:b3:f5:4f:99:f2:
27:4d:24:cf:dc:bb:26:0a:49:bb:11:6a:ad:3e:b6:
7d:9b:ea:95:a8:00:3a:b3:e1:60:ce:34:ea:0b:08:
4b:09:26:db:5e:d8:c1:75:30:81:80:b0:00:82:1c:
ec:77:fd:9f:66:e1:e0:ff:08:34:d9:89:5e:08:65:
f0:fa:dd:08:25:d2:10:b1:af:93:cb:4d:a9:1c:0b:
0b:cf:18:45:29:b3:9c:06:ab:11:93:f1:f6:77:30:
02:60:9a:c5:95:b5:c0:b1:64:86:4c:ab:b1:bc:11:
e6:67:78:cb:f3:14:29:5d:35:bb:f5:eb:b4:81:80:
fd:ac:93:cd:0b:2a:36:d4:a3:cd:16:2f:0d:30:e7:
5d:8a:2e:b7:9d:50:73:10:a7:d3:19:0a:cb:39:de:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:69:89:BC:FE:8E:0D:06:84:8A:23:D6:F8:AA:32:3D:BD:CC:24
X509v3 Authority Key Identifier:
keyid:5F:A0:CE:70:06:1E:49:B7:3C:37:8F:1C:36:F6:95:96:41:92:5A:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/X6DOcAYeSbc8N48cNvaVlkGSWu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X6DOcAYeSbc8N48cNvaVlkGSWu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EDC/54404390D06211EAA19A3411C4F9AE02/CEED6A9CC44C11EDBB672E6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f3:b0:03:3e:dd:24:14:e0:02:b0:21:1f:38:59:6e:1d:02:
f6:94:49:7b:42:3a:e2:4d:4e:2f:b9:d3:c6:e1:7b:3c:fb:5c:
24:89:72:e0:97:c5:df:b4:a3:39:8f:62:49:18:df:f9:83:6e:
b4:6a:44:2a:0d:d2:94:e9:5c:26:6c:9b:73:9b:09:8b:d9:5b:
92:29:bb:d6:4c:3a:6c:e3:fd:47:27:97:67:8f:fb:fd:91:83:
a4:5b:01:b3:f6:6a:b2:53:1f:bf:af:10:ac:50:44:b4:6e:16:
55:ec:57:89:d6:43:b2:f6:84:d9:96:00:e5:35:ba:3c:ed:17:
d2:23:81:84:af:44:d6:08:b7:05:c0:9f:e3:ba:0b:ef:67:53:
bc:03:8d:02:1d:e3:4d:0b:41:aa:b6:7f:ae:04:19:12:1b:a3:
c8:1d:88:2f:48:14:a8:ee:de:0f:f9:d1:d9:47:23:dc:04:39:
69:9f:a4:10:fb:c5:d5:53:1b:2c:f2:f4:ce:be:80:be:a4:3e:
1a:61:f0:41:a6:a4:e7:69:8c:2a:6f:35:5e:8b:68:cd:da:90:
e3:5d:ef:4b:47:20:47:ed:49:88:e6:38:4b:e9:6a:f3:33:24:
cb:8c:f3:09:e3:a9:06:54:9c:9e:49:d3:1d:42:90:42:1d:93:
5e:ea:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 07:42:19 2023 by rpki-client on console-ams.rpki-client.org