Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/CE0779FA964411EDACA77270C4F9AE02.roa
File: CE0779FA964411EDACA77270C4F9AE02.roa (raw, json)
Hash identifier: tT9GNUS+58myO9oGun+L2EmpdaHyVzIvgscKMZpyJ5g=
Subject key identifier: 6D:E1:61:E8:E8:38:05:70:8C:E8:65:1C:4E:EC:04:5B:8F:C2:75:D0
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 02
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/CE0779FA964411EDACA77270C4F9AE02.roa
Signing time: Tue 17 Jan 2023 08:56:19 +0000
ROA not before: Tue 17 Jan 2023 08:56:18 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 137449
IP address blocks: 103.61.240.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Jan 17 08:56:18 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63c662b2-525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:9f:e3:83:73:4c:4c:0a:df:19:8d:78:ad:
60:68:08:ec:96:25:de:ae:20:2b:e7:db:f0:2f:bb:
db:ef:43:09:b2:c2:95:c6:82:c1:e2:a2:d9:7a:85:
5b:09:ac:b6:2a:9b:0b:42:1e:65:28:38:db:e5:29:
d6:53:0c:cf:25:45:b9:59:8b:3d:93:e0:26:29:a8:
42:04:3f:16:1f:35:ad:cd:ef:f1:cd:da:a1:a1:3e:
8c:a2:08:7c:b0:9f:97:56:82:10:ad:a1:0e:51:e1:
8e:18:09:c5:29:9e:58:b9:96:73:91:6b:43:f7:2e:
dd:9a:f0:73:85:cd:79:dd:ed:3f:f2:5e:31:ed:e6:
7f:e8:ca:14:30:36:7f:72:39:f7:bc:3f:56:1b:50:
31:ff:8d:ed:be:fe:3f:74:5a:d3:76:10:45:c2:72:
50:8c:88:f4:68:c0:cf:d2:3c:be:88:f0:1c:b2:4b:
70:90:a6:da:4d:59:1a:c6:85:a7:e0:11:2f:92:c6:
5c:d0:c5:c7:93:93:86:9d:f8:da:a5:98:23:d8:31:
7c:9b:98:b1:3e:ed:a0:9d:08:03:7c:3d:5c:5b:ac:
ef:60:c6:fd:cf:2e:89:3e:73:55:01:d0:e4:05:85:
e6:b0:07:6f:0d:4c:41:0f:a1:d2:9a:f4:7c:b8:e2:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:61:E8:E8:38:05:70:8C:E8:65:1C:4E:EC:04:5B:8F:C2:75:D0
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/CE0779FA964411EDACA77270C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.240.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:f3:22:91:87:03:f1:de:83:40:be:42:4f:34:8b:aa:e6:80:
15:4e:bf:a6:66:ce:5f:56:f6:68:ca:1e:b3:87:7e:23:ab:8b:
cc:88:dc:b6:53:5c:a2:09:07:29:fb:15:2b:3f:21:07:18:33:
f6:de:be:8c:e6:3b:36:12:05:0f:b1:bf:97:82:79:3a:6c:f0:
00:d5:45:12:5d:84:80:10:aa:cb:1c:48:86:84:74:90:63:28:
7f:4f:21:6e:6d:5e:a5:7b:9a:6b:7b:32:da:f5:dd:a1:ab:59:
98:ed:89:93:04:52:47:2e:89:e7:80:34:a2:f0:92:25:33:12:
cd:51:fc:16:00:cc:66:62:6e:a6:fd:43:97:b7:62:4b:6f:10:
14:2c:5e:3f:3a:db:f5:81:da:ab:a8:60:a1:f9:7a:d0:e9:f6:
0a:02:a3:44:e0:a7:f7:9e:55:7c:eb:b1:c8:18:54:2b:50:46:
64:b0:6d:8f:ac:2d:a2:6b:c9:93:74:b8:af:7b:8e:c6:20:b3:
44:d2:d8:a3:c7:ad:22:e2:8e:1e:35:47:88:11:a1:33:2b:bf:
20:ba:b9:d0:38:dd:1c:6c:f2:ba:5c:ca:29:40:91:4a:1f:87:
9c:a0:a1:85:7f:f8:bf:8a:ed:3e:b3:6e:53:f3:06:f1:e2:4e:
ab:ce:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:08 2023 by rpki-client on console-ams.rpki-client.org