Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/70EDD44EA9C011EABAAB4624C4F9AE02.roa
File: 70EDD44EA9C011EABAAB4624C4F9AE02.roa (raw, json)
Hash identifier: kAiqRz52gHQFQdlTCwsh3tb2E7o1+b7uYaFSBs58nmM=
Subject key identifier: FE:E1:06:6B:21:04:E7:84:F1:B1:E5:38:D2:0F:29:20:75:C7:1D:54
Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1
Certificate serial: 0682
Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/70EDD44EA9C011EABAAB4624C4F9AE02.roa
Signing time: Fri 29 Jul 2022 22:28:02 +0000
ROA not before: Fri 29 Jul 2022 22:28:02 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 140700
IP address blocks: 103.152.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1
Validity
Not Before: Jul 29 22:28:02 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62e45ef1-6811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:b4:b6:88:d9:3f:d2:52:90:4b:b8:94:00:
0f:c2:11:4b:71:34:82:ad:13:d1:d2:e9:0b:bc:85:
06:b9:f1:af:04:a6:2c:fd:57:e4:95:25:74:8e:c2:
f9:63:05:f4:a7:9d:f8:f6:17:07:0a:3a:7d:b0:68:
00:81:1e:e0:8b:93:2f:02:58:08:cc:6e:2d:af:09:
9c:e2:9c:3d:34:0b:01:26:02:e9:5d:9f:b2:b1:9d:
23:8e:6e:7c:ee:af:63:30:cd:5b:b2:05:10:3e:87:
28:96:a3:1b:e9:90:05:ed:f6:00:c4:cf:0d:3f:4c:
f4:df:4b:2b:fc:4d:3f:9c:4c:63:8f:cc:82:a5:7c:
21:5c:81:6a:2e:51:ac:55:ef:14:1d:ff:05:fd:78:
b6:c1:67:3c:2b:85:68:63:29:b8:e7:c9:29:7a:f0:
2e:cf:ae:45:bc:ca:84:2d:b6:45:19:d1:43:f8:53:
0f:9a:b9:05:4d:62:6e:a2:a1:53:85:51:42:ae:74:
50:41:65:8a:8b:95:09:29:50:aa:30:03:11:bf:91:
e0:7f:d0:32:d8:e6:5f:08:7a:e4:67:af:ff:c7:74:
62:99:61:5d:1d:2f:48:16:6f:6f:00:77:14:63:59:
2a:c0:1a:ce:b7:1d:37:c9:f2:65:41:09:da:f3:ea:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:06:6B:21:04:E7:84:F1:B1:E5:38:D2:0F:29:20:75:C7:1D:54
X509v3 Authority Key Identifier:
keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/70EDD44EA9C011EABAAB4624C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f3:aa:97:f0:df:a1:d8:e6:57:46:13:0e:32:6c:17:f7:92:
9d:6b:fa:1b:56:e3:44:5b:73:87:43:c5:da:a2:4c:06:d6:36:
5c:b8:61:3f:c5:9d:08:9c:d9:7d:0d:81:71:dd:20:9c:bd:fb:
81:bd:2e:de:1d:53:10:4f:f2:2a:04:7b:3f:cd:a3:e8:63:2c:
8e:67:33:9c:0d:9d:5f:9a:19:87:e3:6d:99:07:b8:09:c7:bd:
38:b7:cd:25:0b:c9:ab:a8:8b:99:e8:80:39:f5:48:95:0c:dd:
7d:0d:fc:b1:a6:b7:b7:12:47:7f:dc:11:e1:ca:8d:e8:fa:e3:
0d:31:69:b1:2c:6e:31:d0:e2:af:01:9f:d5:53:4f:7a:e0:6e:
ca:c2:fa:a5:67:49:45:48:dd:5b:2e:4c:fa:9a:99:2e:f1:fc:
f5:7e:a9:ec:2b:cb:e0:69:3e:49:6c:02:7b:2c:72:ff:d4:84:
e1:83:92:af:b2:99:13:93:58:1c:d1:23:6d:d8:7a:f0:47:db:
3b:b4:40:a1:ed:4d:79:56:99:4a:9c:67:4d:48:40:5a:8a:da:
34:22:00:ca:e0:3d:68:c0:f2:be:1b:cf:81:b4:c9:27:51:71:
95:14:41:c7:35:18:f2:3c:a2:29:0b:ed:36:5a:70:be:76:38:
2e:7d:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org