Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/36D4A0287B4611EB884B0569C4F9AE02.roa
File: 36D4A0287B4611EB884B0569C4F9AE02.roa (raw, json)
Hash identifier: 6/Tz4kx766/6VSQW9Ecwxi6/kvbAQbqkPAosbMzBmAc=
Subject key identifier: 97:37:59:D9:F8:2D:FF:93:AD:46:59:B7:7C:C6:8F:B3:B7:8F:81:D5
Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Certificate serial: 0199
Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/36D4A0287B4611EB884B0569C4F9AE02.roa
Signing time: Wed 22 Sep 2021 14:14:37 +0000
ROA not before: Wed 22 Sep 2021 14:14:37 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 17439
IP address blocks: 103.120.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3
Validity
Not Before: Sep 22 14:14:37 2021 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=614b3a4c-1ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:ff:63:72:06:c7:57:86:5a:c8:24:79:6d:
e2:5d:c5:5e:5c:f2:74:fa:2a:83:54:f3:e8:31:c7:
dd:f9:82:b4:37:d1:48:34:e2:c3:aa:47:67:9f:9f:
02:39:6e:18:9b:5b:02:8e:32:2f:00:b9:48:a3:19:
da:f2:b8:06:68:22:2c:0f:b9:71:6a:3e:8d:e0:44:
cc:8b:0c:aa:e0:c3:82:bd:c7:5c:34:2f:47:9a:fc:
82:3c:f3:bd:c3:e3:31:20:84:03:69:5c:af:bb:53:
68:5a:b7:2e:6e:e5:62:6e:72:17:d5:d7:02:33:b6:
b1:c0:5a:a5:5e:f9:51:d4:f1:9a:19:e3:50:db:21:
2f:28:03:4c:01:ad:43:c2:e2:88:4a:e5:07:35:b3:
a6:3e:00:e9:10:3c:6c:27:62:2d:5b:1b:18:83:de:
c2:6f:23:2b:ed:5a:cf:25:ea:c1:36:0b:51:33:26:
4d:0e:f8:41:c6:5b:e5:23:61:2e:be:af:05:90:36:
25:be:80:15:14:17:12:63:ad:68:b2:f5:f0:26:37:
99:97:00:3e:1b:7d:8c:9d:00:90:c5:b4:42:b0:e1:
78:1f:85:5a:bc:84:a2:af:b9:09:c8:f9:50:9d:9c:
19:2f:89:35:83:8b:af:71:3d:fd:bf:3d:90:6c:68:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:37:59:D9:F8:2D:FF:93:AD:46:59:B7:7C:C6:8F:B3:B7:8F:81:D5
X509v3 Authority Key Identifier:
keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/36D4A0287B4611EB884B0569C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:bb:98:10:a3:43:02:f7:5f:da:ca:68:3a:78:2c:0e:03:83:
ab:a4:0a:b5:b2:2f:fe:54:de:a5:18:0e:79:8c:4e:56:4b:29:
51:63:fa:c7:fe:75:96:6b:4f:8c:d6:1c:aa:86:5e:10:50:9f:
40:81:10:86:6e:fd:6b:fe:75:7b:c5:2c:80:3e:e8:5e:5c:75:
15:d3:61:b1:42:c4:db:eb:ba:a6:17:65:c3:d4:7e:75:3d:0d:
7b:ea:48:b2:0e:72:30:ca:8e:7c:9f:0e:d1:86:0f:f0:93:aa:
75:d3:5c:ba:f5:b2:4f:f8:dc:ed:1e:59:d2:c1:6c:66:fa:f1:
94:3e:cb:3b:4d:a7:c3:9d:f5:bc:b2:6d:5e:7d:c5:7b:82:cc:
84:fe:b1:ec:f9:91:ec:72:76:ad:ad:f6:f1:07:0e:49:c4:d8:
e6:d3:98:5d:00:ee:65:b9:80:b6:fa:33:ed:20:2a:b4:c5:86:
a0:b1:13:9d:91:08:cf:07:b9:70:91:8f:9d:9e:9a:71:c8:92:
4b:d6:c6:8a:aa:51:46:52:2f:21:0c:ea:23:2f:f2:63:8c:ce:
6c:a4:f9:c1:2e:0f:0e:28:46:70:7b:69:2c:ad:ae:a6:62:30:
50:aa:b4:3c:a6:8b:88:59:39:63:90:2c:e0:1e:b0:d1:16:34:
ce:66:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org