Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/01043ABAD3A211EDA3760213C4F9AE02.roa
File: 01043ABAD3A211EDA3760213C4F9AE02.roa (raw, json)
Hash identifier: frhwJXhQGbygLUZwLsJl9X/X/TffUFDLBAPyndSLT1A=
Subject key identifier: 87:59:CE:9F:F4:3A:E9:00:78:23:7E:CF:58:3F:62:5B:E4:8A:EF:34
Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial: 02
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/01043ABAD3A211EDA3760213C4F9AE02.roa
Signing time: Wed 05 Apr 2023 11:07:07 +0000
ROA not before: Wed 05 Apr 2023 11:07:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 151077
IP address blocks: 103.130.118.0/23 maxlen: 23
103.130.118.0/24 maxlen: 24
103.130.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Validity
Not Before: Apr 5 11:07:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=642d565b-47b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:8d:7f:67:c6:27:3f:51:c1:e4:33:70:ac:
5a:5d:8a:d0:5d:e4:c0:e6:35:a6:be:d9:97:ef:99:
97:66:34:2f:31:50:27:f4:0e:68:3a:fd:62:16:a4:
a3:aa:bd:2f:c7:27:f3:55:e1:11:fa:09:8d:aa:fa:
3f:64:cf:79:8d:87:5d:90:dd:06:96:ea:e4:15:c0:
41:37:07:df:b0:9b:36:cf:46:d7:1c:20:d6:a8:27:
b3:8f:29:d8:4b:57:04:84:af:57:7e:59:2f:7d:74:
d9:9e:9d:96:25:7b:36:e3:a2:e0:c8:c4:58:01:19:
2c:0f:41:75:5d:25:c9:fb:8f:11:77:fb:f7:83:8c:
6a:64:28:9b:f0:79:44:46:1d:c3:ad:55:d8:78:c5:
4b:f1:3e:1f:20:67:e3:91:f2:92:37:89:52:f5:05:
f6:76:63:dc:26:b7:7d:66:a8:c4:6b:98:1e:69:17:
ef:6c:c6:d6:33:5d:db:54:dc:53:43:a7:a9:08:ee:
f9:7d:7d:e2:db:58:c7:2c:c1:46:99:c9:9e:0e:51:
97:61:22:e1:ef:7d:42:0e:6d:fd:be:20:d4:89:a1:
44:e2:b8:fa:ee:8c:0b:81:85:02:a2:66:2e:58:49:
a7:b9:7a:38:68:32:85:80:8a:2e:1d:6e:44:14:b3:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:59:CE:9F:F4:3A:E9:00:78:23:7E:CF:58:3F:62:5B:E4:8A:EF:34
X509v3 Authority Key Identifier:
keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/01043ABAD3A211EDA3760213C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.118.0/23
Signature Algorithm: sha256WithRSAEncryption
49:e5:3d:41:78:46:ee:ee:9a:e5:c9:6c:a5:7a:57:09:ce:01:
4a:ab:db:3e:b1:f8:a9:bb:4e:56:3f:03:a8:55:3e:99:c2:4c:
d7:6f:8e:a1:2a:f4:24:1c:34:90:f8:ce:e9:20:a1:75:dd:1c:
22:b6:bc:f9:d5:ab:af:ff:af:cd:50:6f:8b:9b:fd:c2:11:4b:
45:8c:e9:84:f4:b5:3c:e9:6b:4a:03:22:90:40:00:52:ad:2b:
36:fd:8b:37:d2:35:ec:73:59:10:6b:de:97:d6:84:96:57:d6:
ab:5f:a3:a8:a2:cf:e7:96:be:7e:ff:0f:f6:7c:1c:f0:78:f3:
70:a5:93:6d:0e:de:bc:ab:3e:53:03:0f:79:45:d6:16:5b:24:
5c:b4:be:1e:10:8c:54:44:ee:eb:79:ab:a1:13:1a:7f:36:ed:
62:a2:09:d2:7f:cd:77:ff:d4:aa:68:63:d4:6f:2e:21:2a:22:
15:17:7b:ae:6f:7f:0f:1f:bf:fc:66:73:2a:2f:a6:bb:19:43:
ae:c5:5c:d0:cf:da:4b:1a:f2:60:00:ea:af:97:c6:c6:9c:bb:
64:0f:2b:01:0c:d0:78:06:57:65:af:bc:e0:c4:b5:72:a6:97:
a1:ce:41:a7:fe:40:a2:0d:55:21:5c:54:a8:46:c0:3d:a8:54:
2c:0e:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org