Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/C955FB5651F811ED8A249A7DC4F9AE02.roa
File: C955FB5651F811ED8A249A7DC4F9AE02.roa (raw, json)
Hash identifier: 39TYtdki+N74I4UE5zocHIOK8yJDe1nH2BBxPjRjW2M=
Subject key identifier: 0E:69:85:9B:67:89:06:6F:47:71:A0:6A:1E:2A:1B:A4:77:37:71:EC
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3342
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/C955FB5651F811ED8A249A7DC4F9AE02.roa
Signing time: Sat 22 Oct 2022 11:00:49 +0000
ROA not before: Sat 22 Oct 2022 11:00:49 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 141390
IP address blocks: 103.230.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13122 (0x3342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 22 11:00:49 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6353cd61-72b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:96:86:1e:88:41:f0:c2:f2:06:e0:99:09:
46:5a:71:a6:dc:b9:42:e0:7c:84:1f:86:26:fe:f5:
36:8c:7a:51:3b:6a:74:f3:86:12:f5:7c:a8:0d:9b:
0f:b4:bd:c6:6a:04:9e:1e:e6:80:3a:0f:58:60:54:
41:54:3f:11:ac:97:dd:9a:8f:a5:83:70:28:ec:63:
77:0d:b9:fc:67:29:9f:4e:c4:09:ea:89:03:b5:c0:
17:64:12:ad:36:7f:e6:45:6d:09:cb:2f:74:25:4c:
30:fa:dc:30:8c:83:3f:80:17:a7:ff:20:2a:3f:83:
02:ac:8f:73:30:bd:66:cb:22:3c:a5:e3:ad:c6:8e:
13:dd:00:0b:d4:ec:60:15:1d:02:ef:58:10:75:a1:
13:76:ee:8a:07:e5:97:b5:ab:cd:97:a5:92:db:c6:
27:3f:85:de:3c:c4:ee:52:6a:af:aa:49:42:57:b6:
63:cb:ef:8f:5e:be:2f:29:79:20:b7:2f:21:59:fa:
72:1a:17:33:a7:85:e8:d8:3d:a9:04:f9:22:7d:da:
9f:40:62:e5:87:d7:e4:3e:64:67:fb:26:ca:a9:85:
3c:d2:f5:06:63:48:84:fa:58:d6:bf:9e:f5:a2:49:
e7:c7:88:6c:4d:98:bb:30:e1:a7:10:8f:30:25:7b:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:69:85:9B:67:89:06:6F:47:71:A0:6A:1E:2A:1B:A4:77:37:71:EC
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/C955FB5651F811ED8A249A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a5:2b:10:4a:b4:75:93:e7:e1:a0:38:f1:35:5d:b4:10:44:
19:20:bd:6a:4a:5f:52:6d:06:39:cf:fb:41:c7:26:59:bc:5a:
5c:d2:84:cf:fc:dc:4f:8a:df:b4:b8:de:ef:d3:89:97:fd:15:
1c:77:24:fd:ce:b6:d9:b1:c8:3f:42:04:67:1d:0e:de:60:28:
30:89:d7:48:76:f8:ba:4e:b4:1c:7a:8e:a4:ae:e4:23:75:cf:
19:22:1d:a0:53:ca:e9:eb:17:b8:15:4d:59:32:bd:b1:62:b3:
38:c8:e8:11:b9:3d:ba:90:90:e6:f6:66:fb:67:e1:b8:0e:55:
b8:e3:7e:60:e3:60:d9:50:63:06:26:44:7c:25:a9:36:a7:f5:
38:93:11:70:f2:98:8e:8b:5a:b8:17:e8:8e:c8:91:1b:93:e2:
0c:17:46:43:cf:b4:e4:a5:5a:04:1d:61:d2:0f:52:85:25:d2:
49:1d:79:28:a6:32:4f:09:0e:70:4f:bd:86:97:7c:2c:a6:28:
3d:64:68:0f:a9:7c:cd:9a:6e:c8:f2:10:ee:ee:60:80:e7:00:
06:34:52:f2:a8:dd:8e:e3:71:8b:63:b0:4a:ce:90:f6:c8:53:
39:ce:03:98:e1:a1:93:eb:8f:86:26:d9:42:dc:60:ec:4d:8e:
69:63:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-ams.rpki-client.org