Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/B48C8D963BFB11EE8439B780C4F9AE02.roa
File: B48C8D963BFB11EE8439B780C4F9AE02.roa (raw, json)
Hash identifier: qVXO3Nk/la9C9xUn6DT48mp8/KemRkmPWEZkwDHK0n4=
Subject key identifier: 2F:13:BA:69:E8:CB:E7:94:FD:2E:C8:2F:C0:2D:C4:1B:B6:49:25:F9
Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial: 0D08
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/B48C8D963BFB11EE8439B780C4F9AE02.roa
Signing time: Wed 16 Aug 2023 06:12:01 +0000
ROA not before: Wed 16 Aug 2023 06:12:01 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 151465
IP address blocks: 103.5.0.0/22 maxlen: 22
103.5.0.0/23 maxlen: 23
103.5.0.0/24 maxlen: 24
103.5.1.0/24 maxlen: 24
103.5.2.0/23 maxlen: 23
103.5.2.0/24 maxlen: 24
103.5.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Validity
Not Before: Aug 16 06:12:01 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64dc68b1-4aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:ad:83:03:28:03:33:46:3d:d1:4a:a2:d4:
dd:ae:f5:29:b5:f6:b8:b2:2b:04:e9:e6:7e:60:70:
b6:61:91:de:eb:70:32:cd:9d:e7:b9:52:23:42:94:
54:bb:f3:77:7c:c2:74:4c:7d:97:4f:ab:c2:2b:c4:
5a:6f:48:56:02:cb:0f:af:ee:0c:12:05:08:cb:ab:
d4:7f:c9:17:f1:28:cb:a0:0b:22:48:26:f4:3d:9a:
0d:23:59:c2:13:09:a2:76:9e:c3:9f:07:61:ea:2c:
65:f0:32:2e:7a:71:55:48:3f:e4:3d:fc:b1:98:8b:
7a:3d:bb:f2:a0:2b:bd:51:0f:5c:e8:9b:bf:98:55:
17:47:78:17:c0:47:ee:36:f0:02:bd:41:da:4c:fc:
95:62:65:4a:c8:a6:3e:4f:85:81:fd:85:e9:ff:80:
35:e0:14:b2:2f:e3:29:74:31:bb:36:07:9d:d9:09:
0a:0a:e3:dc:79:70:11:8f:ba:44:86:ff:e7:e1:da:
df:ac:05:0f:83:16:29:0a:88:32:08:1c:d2:fa:21:
d9:ce:2a:06:3f:6d:2d:5c:70:dc:12:3f:f6:ae:a4:
9a:08:a1:12:a4:2e:05:f1:a2:8d:b0:73:65:ce:cb:
1f:56:46:ee:9d:d9:f6:6f:39:6e:1b:19:fd:a4:9a:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:BA:69:E8:CB:E7:94:FD:2E:C8:2F:C0:2D:C4:1B:B6:49:25:F9
X509v3 Authority Key Identifier:
keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/B48C8D963BFB11EE8439B780C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.0.0/22
Signature Algorithm: sha256WithRSAEncryption
48:db:c7:2b:7a:44:56:90:4e:c5:e6:13:0c:cc:3d:ad:43:13:
d9:44:93:5c:9e:69:a2:63:70:0f:7d:86:80:78:54:05:03:5f:
42:c4:34:df:fd:b2:49:e6:88:a4:12:8a:69:be:1b:9c:cd:c8:
ac:62:1d:e2:b2:07:8d:7c:e9:0e:ff:4e:05:06:f1:ee:f0:2f:
bc:27:2f:6c:b3:66:48:65:d5:a8:42:02:5a:13:86:33:44:1b:
c1:5c:78:a9:7e:98:11:71:cf:3f:76:95:a1:b8:19:d8:96:d0:
8b:1f:4a:4a:aa:22:2b:d7:d8:43:25:63:19:db:14:53:51:b2:
09:8a:04:3b:fb:f3:28:c3:21:2b:c1:e3:dc:21:b0:b6:b0:71:
6a:dd:3c:73:e0:ef:b6:87:87:b9:a9:d2:79:e3:52:4c:69:48:
f2:e0:3b:70:2a:f4:4e:7b:10:2a:2f:0d:d5:6a:42:dc:a3:ef:
04:a7:e1:d6:ea:39:fc:8a:a1:43:21:89:ff:5e:4f:ab:3f:3f:
6f:6a:a3:23:24:85:33:83:23:e4:a5:5b:2d:5b:e2:8f:41:f4:
1c:76:4d:59:0c:82:ae:02:f5:64:89:34:4d:0b:bd:1d:c4:d3:
44:e2:69:d2:0d:a4:7a:80:3c:b8:20:cf:d0:92:45:1a:c3:cb:
4b:98:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 05:14:41 2023 by rpki-client on console-ams.rpki-client.org