Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/45A23F089C9411E9A9581072C4F9AE02.roa
File: 45A23F089C9411E9A9581072C4F9AE02.roa (raw, json)
Hash identifier: XFr3U4ydsB5FrLEcCm8aP7jWaIL6ZpX8SLFy6AC4MEY=
Subject key identifier: 23:BA:10:7E:42:34:4C:A2:1E:5B:FA:FF:CE:90:63:CD:E5:BC:F2:96
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 332C
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/45A23F089C9411E9A9581072C4F9AE02.roa
Signing time: Sat 01 Oct 2022 15:11:02 +0000
ROA not before: Sat 01 Oct 2022 15:11:02 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 38437
IP address blocks: 103.68.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13100 (0x332c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 1 15:11:02 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63385885-9451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:45:c0:ca:ef:c5:a8:84:87:50:17:3a:ee:
5f:eb:cc:a1:73:e9:9d:85:0a:b4:27:9e:ec:f4:9e:
3c:7d:d3:b9:69:ba:cc:e6:04:a6:7e:56:44:a3:23:
43:a3:c2:87:51:ae:10:0a:e6:89:cc:8e:a6:6d:30:
da:9d:6e:de:00:3d:4c:9e:78:16:94:a8:d6:a3:1f:
5f:8c:a8:dc:43:e4:42:24:a1:cb:b3:75:9b:5b:6b:
25:25:f2:5e:91:4d:8c:84:1e:84:23:ab:73:b9:29:
f7:ee:bc:7d:62:a0:b2:4e:cb:e2:2d:7f:38:d6:dd:
4a:fb:02:ed:0e:de:dc:84:56:2b:22:f0:66:84:15:
c5:8f:ec:9a:ef:7e:3b:0f:77:43:5d:2e:5b:70:16:
93:5f:24:07:94:33:d9:e6:fe:ed:51:50:3e:61:9e:
8b:9d:e7:9f:9c:73:7d:2a:3c:8d:49:e9:4f:07:86:
eb:e3:7d:24:f4:76:a0:42:d9:a9:be:de:98:05:bd:
ec:be:3d:4e:3e:8e:87:b5:23:14:24:1f:ab:da:14:
0f:8a:98:0c:d9:cf:2d:1f:9d:53:3e:3d:fb:4b:b7:
e4:e2:82:2d:61:c7:19:0d:ce:26:89:c5:c9:d0:27:
36:08:aa:e4:35:59:d9:71:b6:f3:46:de:36:33:b6:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:10:7E:42:34:4C:A2:1E:5B:FA:FF:CE:90:63:CD:E5:BC:F2:96
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/45A23F089C9411E9A9581072C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8b:46:cf:91:bb:37:46:a2:f7:86:b9:1f:62:32:e2:f2:77:
a9:6a:24:a6:87:b6:66:13:b6:fe:54:e3:aa:2b:7c:a8:86:3b:
e9:42:ff:fd:03:7c:60:f8:4b:15:e9:9f:2b:43:6e:6e:20:e9:
4c:dd:b4:fa:c8:c7:28:05:7d:3a:bd:f0:1e:33:c1:b1:0b:52:
2c:90:dc:88:2f:1f:74:26:54:97:87:70:cb:75:4e:06:84:3e:
e9:dd:8b:44:31:bc:2d:13:7d:d7:3a:e2:cc:a5:ee:5c:e8:b8:
a4:1c:1c:48:31:2f:05:55:db:b9:a5:fe:83:36:a0:6b:c7:3f:
b2:f6:31:2b:96:f2:14:43:a6:d0:c1:87:6a:db:c8:0d:e5:31:
17:b4:f4:e1:ce:64:d3:11:6c:59:d2:cb:ca:90:87:50:8c:c9:
cf:9e:64:7d:7e:02:cb:cc:45:f8:74:61:d4:5d:a2:94:f5:69:
31:38:b7:2f:45:b6:6f:50:85:c6:68:47:00:41:cb:50:f7:22:
ad:36:47:50:39:43:cb:f0:c4:4b:93:64:f6:78:cb:36:64:8c:
8e:60:cb:f5:a5:0b:bb:af:d4:f1:59:87:d1:cd:76:a0:e1:34:
32:be:f5:95:8f:62:cd:39:16:59:17:7d:cd:01:71:70:60:37:
0b:5e:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org