Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/9972ACD4584911ED8FB26217C4F9AE02.roa
File: 9972ACD4584911ED8FB26217C4F9AE02.roa (raw, json)
Hash identifier: 6JNfw5ir9lyKJeuwirdqHoG40LgSYGZpsQDKwsbYZo8=
Subject key identifier: EE:E1:94:C1:36:9B:C1:B5:24:E6:B2:31:49:C0:ED:F6:DE:72:BB:7E
Certificate issuer: /CN=A91DAA9E/serialNumber=ED4FA6963ECB818DB7ADB17254370AD0F78ED5DD
Certificate serial: 03
Authority key identifier: ED:4F:A6:96:3E:CB:81:8D:B7:AD:B1:72:54:37:0A:D0:F7:8E:D5:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7U-mlj7LgY23rbFyVDcK0PeO1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/9972ACD4584911ED8FB26217C4F9AE02.roa
Signing time: Sun 30 Oct 2022 11:54:25 +0000
ROA not before: Sun 30 Oct 2022 11:54:25 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 139628
IP address blocks: 103.119.96.0/24 maxlen: 24
103.119.97.0/24 maxlen: 24
103.119.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAA9E/serialNumber=ED4FA6963ECB818DB7ADB17254370AD0F78ED5DD
Validity
Not Before: Oct 30 11:54:25 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=635e65f1-c43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:68:cf:f8:c7:19:a7:89:19:6d:de:68:c4:
20:87:66:ef:20:8d:55:b3:c5:61:79:32:c0:81:a4:
b9:c1:e2:e8:b3:ff:e0:11:36:ce:f2:57:1e:63:24:
b4:d9:69:a3:82:01:3b:5b:6c:e0:5f:4c:46:6f:87:
e5:9e:e7:61:05:da:e8:1c:b4:22:f4:dc:87:57:16:
d5:79:0b:bf:c8:2e:20:48:0d:43:d0:8b:0c:e5:5e:
de:fd:fb:25:24:03:5a:08:8d:91:d3:8f:2d:d4:e1:
01:12:c6:15:23:18:03:fc:14:a6:26:e0:28:95:62:
11:f6:b5:3a:eb:35:04:15:f8:4e:3d:1b:ce:1a:52:
f8:48:69:bd:a5:c0:3f:de:f9:01:73:b0:a5:d1:e8:
a9:b1:74:2d:12:7c:6e:a6:65:4e:e4:49:02:47:6b:
ed:cd:11:ce:b7:70:c7:02:b2:5d:7e:95:6a:fa:39:
3c:75:52:27:38:e2:c5:52:ab:1a:85:f6:dd:86:09:
e6:da:f8:dc:8f:68:51:e3:9f:b3:9f:9b:3e:50:6c:
5b:59:e5:44:04:1c:03:10:6c:0a:14:c0:b1:26:ad:
56:9b:cf:94:38:dc:6b:63:8f:21:67:91:6d:82:03:
91:c2:fc:e8:14:54:a3:0e:ea:51:29:bb:48:13:ae:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:94:C1:36:9B:C1:B5:24:E6:B2:31:49:C0:ED:F6:DE:72:BB:7E
X509v3 Authority Key Identifier:
keyid:ED:4F:A6:96:3E:CB:81:8D:B7:AD:B1:72:54:37:0A:D0:F7:8E:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/7U-mlj7LgY23rbFyVDcK0PeO1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7U-mlj7LgY23rbFyVDcK0PeO1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAA9E/DC1254BC584511ED8E1F4B7DC4F9AE02/9972ACD4584911ED8FB26217C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.96.0-103.119.98.255
Signature Algorithm: sha256WithRSAEncryption
4f:54:0c:80:78:e0:87:72:77:60:cf:ce:13:05:a5:30:52:fc:
2d:06:93:8a:33:67:ad:88:4c:0c:1e:78:21:74:b0:60:87:60:
f2:bf:2e:65:c1:62:e4:64:80:bd:30:55:03:bc:c4:6b:58:ed:
d1:2a:8d:87:7b:c7:9c:34:bf:59:3d:47:2d:43:1f:05:ad:8c:
3c:7c:2c:f9:99:82:fc:85:77:d1:8d:e4:42:72:43:3f:4a:7c:
45:33:f7:1c:7f:3a:d4:03:3e:2b:53:2d:4a:fd:5f:4f:97:f2:
5d:f5:09:4f:71:f0:ea:44:f3:45:67:cd:76:bc:47:5b:cd:2b:
a0:91:6a:f7:80:0c:f4:1e:63:fd:a7:95:9a:fc:dd:4d:79:b0:
c8:25:10:02:bf:02:81:08:b8:d5:d5:64:b8:1b:1b:48:5a:ce:
2f:47:17:04:b0:b4:37:5b:7b:10:94:0d:13:84:7c:bd:e1:98:
cb:3f:ea:bf:29:94:39:02:b6:d1:0e:b8:c1:8d:64:a1:91:36:
51:2d:45:56:ca:d3:65:86:cd:b8:21:57:1b:98:d0:e4:3d:39:
c4:8c:f6:ca:eb:7a:01:34:2f:78:7a:e4:f1:00:4d:d5:01:39:
d3:cf:57:ee:18:73:8c:e6:12:b7:bb:9e:4f:13:c8:dd:0a:f7:
90:ed:fa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 16:12:09 2023 by rpki-client on console-fra.rpki-client.org