Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/61ADAE0448ED11EDBC251337C4F9AE02.roa
File: 61ADAE0448ED11EDBC251337C4F9AE02.roa (raw, json)
Hash identifier: Zrzcqg+cvCXcEJ0rEVKaW96Jiui4n43aPceorvkVfpo=
Subject key identifier: CE:99:70:D5:A1:4E:04:DC:E2:D5:1B:9E:06:B3:41:0D:1B:57:6B:95
Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
Certificate serial: 0B67
Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/61ADAE0448ED11EDBC251337C4F9AE02.roa
Signing time: Sun 30 Oct 2022 19:25:57 +0000
ROA not before: Sun 30 Oct 2022 19:25:57 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 139771
IP address blocks: 103.130.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
Validity
Not Before: Oct 30 19:25:57 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=635ecfc5-3879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:67:26:34:39:23:7c:14:e0:1a:eb:0d:e7:
a1:ff:5a:ca:dd:da:85:af:96:e9:9b:03:be:f6:3b:
f6:bc:4a:56:1c:7e:b1:90:10:6d:e6:1d:03:99:a2:
49:7f:9d:08:32:f5:f9:5b:65:a7:d0:37:90:8d:0b:
91:50:e0:2f:fd:96:3c:a1:80:83:2b:f5:4e:76:5c:
7d:c2:08:93:f0:23:e7:83:ab:81:39:07:e0:3c:d8:
a6:ce:77:ae:02:67:6e:ea:c4:4b:1e:aa:e1:78:53:
da:81:cd:e4:7b:e2:72:f3:05:35:1e:2c:d0:db:0e:
2a:86:c9:46:9c:33:20:11:0e:d7:7d:d3:b6:72:d2:
6b:08:54:eb:89:f9:49:46:55:e6:1f:9f:1d:b0:dc:
02:3d:b4:d1:40:0c:71:43:19:c6:1d:03:64:fc:10:
7d:a6:45:96:9b:75:67:93:50:8f:52:fb:97:ef:fa:
68:50:57:c5:51:bc:c1:73:50:f0:85:13:9c:34:98:
fa:a9:37:0f:65:1a:73:7b:aa:a9:02:f8:89:21:a6:
14:08:4f:76:56:e9:ad:90:97:9e:04:53:5f:6b:a5:
a0:af:38:04:5f:2c:c6:68:d1:2c:b2:0e:b7:20:f0:
33:12:66:61:0a:56:ed:36:fe:b5:2c:28:b1:01:22:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:70:D5:A1:4E:04:DC:E2:D5:1B:9E:06:B3:41:0D:1B:57:6B:95
X509v3 Authority Key Identifier:
keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/61ADAE0448ED11EDBC251337C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.171.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9d:2f:56:15:57:43:ba:47:5d:6e:eb:9a:45:c9:de:a6:ff:
ed:df:fe:48:79:81:77:14:b3:72:ac:e5:a5:0d:28:5f:bf:38:
b1:89:d9:22:ba:8d:3e:fc:8b:f3:67:99:34:41:3e:39:67:fb:
0e:01:0f:df:e8:fe:f1:20:10:b0:ab:aa:ea:22:ce:10:69:3b:
d1:11:68:b0:c8:fd:04:c4:fc:88:87:de:3d:d2:c3:d9:62:01:
8f:b3:d7:58:f0:76:2e:ab:54:74:29:95:81:e4:9e:2d:3e:ec:
31:a4:ab:12:54:d7:0f:e1:24:e7:ce:bd:99:76:f1:f4:99:b7:
02:62:91:4d:6a:b9:d4:b3:d4:1b:42:84:41:50:df:ca:e0:5d:
a3:cb:07:de:b8:5b:d3:0c:03:97:13:94:7a:f7:fa:93:d7:8b:
66:7f:17:02:47:6e:62:47:0a:92:06:8e:03:8a:6a:e6:b8:b7:
cf:d5:56:92:16:f5:52:e6:8b:66:85:cd:7a:21:e4:5b:47:ac:
90:19:10:de:35:9b:b8:1d:a6:6d:c7:d2:af:c9:96:0b:28:79:
41:54:f4:30:1e:04:f7:6f:d4:2f:34:11:f9:2e:a3:58:9a:11:
1d:ac:41:47:9e:c7:a7:56:88:7b:cc:df:8f:e3:59:f3:73:61:
3c:67:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org