Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/9002F510953E11EC83020D67C4F9AE02.roa
File: 9002F510953E11EC83020D67C4F9AE02.roa (raw, json)
Hash identifier: AJa8nfAo4+oa617SNz43RIDp7UjFSN7EvuVMdfdj0gc=
Subject key identifier: 0C:74:D8:0B:28:1B:9C:CF:77:96:E4:7C:BE:EE:B6:B6:6B:79:50:84
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 0266
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/9002F510953E11EC83020D67C4F9AE02.roa
Signing time: Thu 29 Sep 2022 16:03:51 +0000
ROA not before: Thu 29 Sep 2022 16:03:51 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 63969
IP address blocks: 103.172.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Sep 29 16:03:51 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6335c1e7-e77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:94:7a:b1:08:48:fa:ff:d9:f9:04:c6:c4:
3d:61:23:00:ce:29:7f:85:cb:99:b3:aa:4e:10:d9:
aa:ea:34:12:3b:60:e1:dc:22:65:40:a5:89:08:e4:
d4:96:37:0a:67:24:81:3d:79:00:53:1c:79:1e:14:
29:a4:3a:d7:d3:c1:86:86:86:0c:e7:15:75:1e:69:
7a:fc:96:9c:48:a3:0f:f8:3e:b7:ba:b4:e9:82:0c:
7f:d0:b3:45:10:9c:fc:06:19:ec:66:6f:87:9d:f7:
e6:4e:ac:58:08:34:e3:7d:c3:b0:21:7a:57:09:08:
c2:08:39:d2:b0:b3:d2:03:e7:b4:25:b8:04:1a:a0:
24:4c:5e:53:f6:e1:12:f5:bb:bc:68:be:e8:a8:18:
c3:13:16:5a:af:b5:61:31:d9:07:6d:4a:f5:d0:c4:
1a:69:4c:04:10:31:ec:54:2d:57:ce:88:75:b1:b0:
6f:7b:87:6e:af:29:de:30:f9:f9:c8:b9:33:91:3f:
da:8d:a7:6d:fa:6b:b3:92:47:0f:16:6c:c7:42:73:
87:fc:fe:bd:7e:d7:00:2c:e0:41:a1:dd:9f:2a:1a:
c4:18:58:68:32:44:ab:5a:b1:4c:bd:b6:bb:05:2f:
7a:27:06:aa:92:66:88:14:51:b9:d5:5a:89:6f:ed:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:D8:0B:28:1B:9C:CF:77:96:E4:7C:BE:EE:B6:B6:6B:79:50:84
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/9002F510953E11EC83020D67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.139.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a9:0a:30:85:0a:d7:18:10:0c:56:94:d8:c2:8e:c0:76:3a:
07:fa:66:f9:47:b6:33:47:83:68:dd:b8:1a:09:69:f5:e1:67:
e2:f9:6b:7e:5c:56:98:90:39:15:be:b6:1b:a5:4e:f1:7c:6a:
a7:98:24:c8:30:83:9d:9e:b0:c6:1f:32:b2:89:96:e0:5b:93:
ed:bb:d1:0e:3b:6a:4c:de:a4:3c:7b:21:b0:c2:bb:99:5f:a2:
0a:fb:5d:f3:97:7a:c0:9d:6b:ee:e0:96:49:36:ce:b8:85:19:
2a:54:aa:ce:c1:e6:5a:5d:61:d2:ac:a1:f3:74:ab:c5:49:72:
80:6b:36:f3:79:28:c4:07:25:b5:c8:ac:7b:a5:b2:00:a2:4f:
87:ec:4b:40:23:7c:8c:01:9c:b4:e5:5b:cf:b8:aa:c6:55:b6:
b8:3e:af:1e:65:81:d3:e7:e2:6f:be:8f:b5:c4:56:03:9f:f2:
cf:1d:02:ea:f9:82:cb:a5:0b:0b:6d:3d:01:b6:87:1d:a7:58:
cc:f7:4c:97:a1:d6:65:05:31:48:87:30:cc:e8:26:e4:90:9f:
2c:af:f4:af:f2:c4:e1:95:b8:7e:34:20:28:c8:cb:43:60:9f:
28:39:23:01:43:73:1d:7b:a5:90:25:00:79:28:29:77:36:ca:
83:8f:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org