Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/B8ACAD9AFF4711EB84369A55C4F9AE02.roa
File: B8ACAD9AFF4711EB84369A55C4F9AE02.roa (raw, json)
Hash identifier: tQgdc6XBq/wq0XDjUyUAR6/JBK4sKHQMyZSxCqTetks=
Subject key identifier: C7:87:58:44:28:DF:FA:21:F4:47:CC:6A:AE:10:30:75:00:BF:D0:A6
Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial: 0331
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/B8ACAD9AFF4711EB84369A55C4F9AE02.roa
Signing time: Wed 29 Jun 2022 14:22:31 +0000
ROA not before: Wed 29 Jun 2022 14:22:31 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 141677
IP address blocks: 103.167.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Validity
Not Before: Jun 29 14:22:31 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62bc6027-110a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:32:10:e9:4b:fd:b9:38:68:b7:5f:61:b7:
0d:dd:a3:c5:80:11:0f:ed:69:ad:50:36:b6:cd:17:
77:39:f3:39:61:28:97:7f:10:60:ab:78:64:e4:ce:
7e:86:87:0b:2c:65:98:b5:09:83:2f:3b:44:4f:92:
47:08:d5:41:ec:ac:eb:c7:4e:6f:ab:b7:1c:66:59:
a1:1f:31:65:09:62:44:bd:16:50:ab:11:e8:b4:a0:
64:89:90:bd:56:d2:92:db:98:97:b1:0c:b4:56:8b:
35:ae:51:57:91:68:ae:61:48:7a:c5:4f:3d:1f:79:
89:cf:58:ef:33:a1:8d:34:55:41:79:6b:af:12:01:
6e:95:19:44:bc:f9:21:be:67:f9:b6:02:a4:fe:14:
74:23:54:b8:61:18:ce:44:2f:d2:6f:27:3b:51:dd:
1f:29:71:e2:78:b8:b6:19:22:28:38:0d:9c:fc:08:
37:0e:5b:e0:02:db:52:d4:f0:29:88:5a:a4:74:76:
8c:8f:a0:8e:60:07:31:49:9d:a9:9f:06:53:b8:70:
3b:5a:65:12:07:56:c7:de:92:bd:80:5a:25:2e:a8:
21:a0:01:9b:b7:17:4c:d8:60:d1:72:d4:06:b2:19:
db:72:f5:99:62:cf:16:ee:5b:8f:bb:87:95:9a:2b:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:58:44:28:DF:FA:21:F4:47:CC:6A:AE:10:30:75:00:BF:D0:A6
X509v3 Authority Key Identifier:
keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/B8ACAD9AFF4711EB84369A55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:33:a4:2f:01:f4:91:26:22:fe:75:22:90:5a:93:71:30:46:
3b:a3:7d:68:d5:83:b7:25:7b:82:e1:f4:63:9c:d7:87:75:4d:
f8:7d:37:13:df:6e:0b:4e:0e:9c:88:24:51:60:2c:37:46:dd:
29:b5:d7:4a:e0:55:00:54:5a:a6:70:ab:b5:f1:f3:14:47:e2:
72:b8:ef:ef:37:91:16:18:42:b2:fe:33:90:f0:0b:e7:d0:fc:
32:d5:49:b7:7a:e8:84:ca:b1:61:33:96:15:d1:be:98:e4:f3:
56:3c:18:a3:9c:5c:b4:6b:e6:fb:ec:e3:d2:8d:9b:4a:5c:fe:
9d:af:39:ce:d0:65:a1:42:d7:8d:98:7f:06:6e:94:be:5d:54:
55:37:35:09:54:4a:5c:bf:f2:62:42:ea:8f:9e:00:77:31:fb:
51:e9:e2:83:0b:3b:ee:f6:98:00:bb:27:51:82:6f:0d:58:c2:
f3:f1:51:c4:0b:ff:6f:71:ac:f5:de:2a:a9:c2:2a:ab:da:d2:
af:16:5e:0c:cb:d0:8d:9e:d9:74:98:d2:a0:50:b7:83:7e:b9:
0d:a2:c5:7d:d7:51:cd:31:d3:32:0a:80:a9:5e:b3:8a:0b:b6:
42:00:b8:08:a9:38:13:52:78:25:c0:26:7f:18:cd:cd:a5:a7:
90:5f:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org