Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/EA25A966528311EA85F30D6FC4F9AE02.roa
File: EA25A966528311EA85F30D6FC4F9AE02.roa (raw, json)
Hash identifier: m/CxYDqLZ8q+tMsKytoGnjjB6hZegapnYKkMVw6aR/4=
Subject key identifier: E6:70:EF:C0:73:05:08:2F:3C:4A:8D:41:F8:17:B2:85:81:74:04:60
Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Certificate serial: 160D
Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/EA25A966528311EA85F30D6FC4F9AE02.roa
Signing time: Tue 14 Feb 2023 17:44:33 +0000
ROA not before: Tue 14 Feb 2023 17:44:33 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 62240
IP address blocks: 103.105.48.0/24 maxlen: 24
103.105.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5645 (0x160d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C
Validity
Not Before: Feb 14 17:44:33 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63ebc881-0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:49:58:31:40:47:83:30:61:1b:16:3b:b0:
a8:62:9b:de:ae:b1:39:dd:fa:ba:b2:11:2f:60:98:
1c:c9:e5:cc:7c:64:84:0b:a0:a0:48:e5:12:45:a1:
0b:3a:b7:cf:b3:1d:6d:73:29:11:12:2e:73:9f:2e:
e5:51:3a:2b:bc:12:15:06:8d:29:50:a7:bb:fd:5e:
92:81:c4:11:1e:79:4b:98:7e:ea:d6:38:7b:b4:d0:
2e:fa:f8:81:45:ed:2b:02:05:d9:94:56:8d:6b:58:
be:47:3d:15:43:63:1e:0a:12:1e:52:5d:b3:10:05:
86:46:6e:81:89:cf:30:3e:12:fb:b9:52:7d:d1:a1:
a0:30:18:9c:99:1c:1f:8e:70:57:1e:ca:b8:24:08:
76:db:3a:c0:a4:48:12:ec:49:ad:f6:6e:c4:f9:be:
f4:d3:06:78:6a:7b:84:25:40:af:10:ff:c6:1c:75:
45:e7:9b:18:6d:a9:19:d0:62:b9:72:af:f2:2d:78:
a7:8f:d0:6f:1a:82:09:63:ee:17:8b:e4:39:aa:5c:
13:09:df:2b:9a:2a:36:d7:27:24:79:77:b7:0f:0c:
98:90:40:15:a0:77:3e:7a:5a:14:b8:75:7f:78:ee:
e6:80:04:f3:3b:9a:1c:96:37:1b:0f:49:7d:ca:38:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:EF:C0:73:05:08:2F:3C:4A:8D:41:F8:17:B2:85:81:74:04:60
X509v3 Authority Key Identifier:
keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/EA25A966528311EA85F30D6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.48.0/24
103.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a6:e1:23:9e:e3:6b:85:a4:5c:13:bb:4d:80:25:f0:82:19:
1a:61:53:c7:a1:88:b6:a5:b6:29:f3:dd:c8:0a:f2:27:7b:29:
cf:04:53:b1:34:11:fe:bb:f8:d1:06:9f:36:98:cc:44:6b:8e:
cd:2d:4c:c9:18:d0:d9:25:30:ca:6d:8e:93:8e:bb:1f:be:89:
ce:84:90:63:f9:68:7b:2a:7e:a3:4b:da:ba:90:b4:bd:a1:8a:
f8:e8:7f:f2:33:54:2a:bb:86:1f:28:55:ec:bb:74:5c:b0:a8:
49:42:f0:b0:1d:1f:5a:91:44:9e:a5:f7:5b:af:56:f3:86:e5:
90:d4:5b:9c:3c:65:e2:da:32:05:21:4d:4d:4a:ab:64:33:ae:
5b:c9:08:62:f8:a1:c1:41:9e:b0:81:a1:b0:47:1c:f3:42:15:
19:ea:56:a5:ea:07:90:64:d2:9c:57:5a:ff:23:e8:b3:89:f0:
c9:dd:74:f6:df:b9:1d:7c:9a:29:c6:85:9a:c5:03:78:ab:ea:
bb:f8:e2:bc:24:d8:fd:4b:58:b1:b0:9f:7a:e2:88:b4:6a:8d:
b1:ab:39:a1:d1:87:8c:25:2e:54:b8:b5:56:49:93:95:3e:ec:
cf:48:4d:06:c9:28:19:36:c3:32:d2:0e:06:ba:d0:c8:17:60:
b2:67:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 23:55:07 2023 by rpki-client on console-ams.rpki-client.org