Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/4872A872123D11EDA5012021C4F9AE02.roa
File: 4872A872123D11EDA5012021C4F9AE02.roa (raw, json)
Hash identifier: VbxmICDjXjqoRFRH/UG1LrzSRYplPLrwLpqkMPYpvyw=
Subject key identifier: 1A:4B:57:CE:B0:76:AE:AA:E3:EC:68:AA:E1:96:0C:CB:99:FE:BE:6D
Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial: 057F
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/4872A872123D11EDA5012021C4F9AE02.roa
Signing time: Tue 02 Aug 2022 08:49:54 +0000
ROA not before: Tue 02 Aug 2022 08:49:54 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 997
IP address blocks: 103.213.244.0/22 maxlen: 22
144.48.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Validity
Not Before: Aug 2 08:49:54 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e8e532-a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:74:ef:01:19:9d:3b:7d:d5:d0:d8:74:82:
d7:39:79:7c:67:05:54:65:13:c6:47:3e:12:20:c9:
c1:62:ba:98:4c:af:27:63:8b:1b:c0:b3:58:76:52:
e4:21:79:57:39:de:92:13:2b:2b:91:a8:04:fc:83:
c9:a5:04:f0:e4:47:8b:44:27:e1:5a:ca:6e:f7:2d:
72:dd:ea:68:d6:cc:44:5e:bb:23:45:ee:82:16:28:
ce:84:74:7f:61:a2:8e:3e:be:b8:6d:04:4f:8d:da:
12:ba:a1:c4:2d:fe:1d:07:51:7b:f8:f8:18:ab:3a:
f0:f4:ab:92:70:43:69:c4:e4:8e:8f:f6:f8:40:05:
4b:d3:37:9b:0e:95:68:94:be:60:1e:dc:69:de:eb:
f0:64:53:2f:c9:c8:a2:79:d2:d3:a7:98:cc:f9:36:
0a:a5:8d:99:9b:df:e1:ef:57:6d:31:75:28:0b:52:
9a:2c:29:8e:c9:da:ed:bc:f4:a9:7d:46:6a:7d:c1:
2a:8a:d0:cd:f5:b5:a6:00:0e:90:bd:2a:28:0b:48:
45:59:b5:1c:41:4f:eb:69:57:a2:9a:f6:26:08:96:
0c:2f:82:19:40:1b:ad:b9:b2:fb:aa:be:29:0b:e7:
87:19:b6:6a:0b:4a:4a:e3:6a:4d:a2:ec:c9:4e:42:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:57:CE:B0:76:AE:AA:E3:EC:68:AA:E1:96:0C:CB:99:FE:BE:6D
X509v3 Authority Key Identifier:
keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/4872A872123D11EDA5012021C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.244.0/22
144.48.4.0/22
Signature Algorithm: sha256WithRSAEncryption
88:09:16:4f:71:47:23:e8:cd:68:60:17:63:24:2c:0a:5c:da:
73:57:66:bd:d4:73:1f:34:5f:ff:e1:cc:a3:0a:21:b2:37:52:
55:d3:7a:41:fb:50:4a:4b:3e:df:b5:ea:16:9f:56:bc:d8:f6:
ab:bb:87:72:e8:98:7a:cd:7b:6b:f4:ef:39:e6:d2:00:99:41:
e7:d3:9a:af:5b:ca:e2:ff:b9:a8:9d:50:81:d3:72:d5:a4:95:
9f:07:c3:92:a1:e7:d6:ab:e0:ed:08:91:a1:3e:43:6a:83:72:
35:f8:6b:63:ee:7c:59:49:fb:48:0c:d0:39:36:56:af:07:57:
8a:58:7d:38:8a:5c:64:b1:f2:bf:7d:da:08:32:72:f8:d3:ea:
e1:aa:f2:d1:68:cb:db:c5:5e:1a:49:0f:f7:61:a0:33:a7:bb:
6e:2d:05:3b:21:64:ad:f9:f6:dd:3a:0a:d4:b4:13:c8:39:c6:
f1:87:31:6f:ba:65:bd:45:b2:37:29:58:f7:40:07:52:85:f6:
74:2b:4c:3d:fe:84:28:fb:19:03:3b:23:10:c5:a0:0e:e7:a5:
9e:f6:2a:68:63:c2:8e:96:91:cb:5b:25:bb:85:dc:47:36:34:
9f:47:85:12:9d:88:12:b1:85:4a:e7:4f:46:f9:fc:21:99:c5:
37:62:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:07 2023 by rpki-client on console-ams.rpki-client.org