Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/21EE53CCBF2711ECBAF28865C4F9AE02.roa
File: 21EE53CCBF2711ECBAF28865C4F9AE02.roa (raw, json)
Hash identifier: F5ALol000NnvAOfnTGgKLE/LGHAaXnD4ToPskAvRpIA=
Subject key identifier: 04:21:E9:60:15:7D:EE:DE:69:35:8A:02:51:E1:C2:1B:E2:A9:A1:CC
Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial: 03BC
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/21EE53CCBF2711ECBAF28865C4F9AE02.roa
Signing time: Mon 04 Jul 2022 13:30:53 +0000
ROA not before: Mon 04 Jul 2022 13:30:53 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.115.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Validity
Not Before: Jul 4 13:30:53 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62c2eb8d-06e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:f3:48:e8:47:93:77:54:cf:83:fa:ed:9b:
56:dc:b2:65:de:66:24:57:70:71:9d:28:33:1c:79:
2b:6a:b5:61:f0:e8:d5:2b:5c:c8:c2:90:7e:3f:36:
f4:56:31:07:4c:f1:65:0b:16:c5:34:88:ac:6c:4f:
f7:14:35:ef:b3:bc:a0:6a:2f:f2:5f:14:5c:60:eb:
42:08:a3:fa:88:3f:3a:b8:99:21:89:6e:f4:91:9a:
10:30:db:47:e5:e3:50:dc:da:a6:24:9f:61:74:f7:
25:41:cb:34:6a:14:9d:25:d4:a0:0a:f4:6d:ad:52:
bf:6c:38:b5:15:15:cc:1c:ba:94:1e:14:66:20:cb:
a6:b4:66:bc:0f:72:1c:ff:c2:32:b7:63:8e:cf:19:
0a:9e:0d:17:54:2e:21:1f:bb:fb:40:a4:fb:da:6b:
fa:84:ec:3f:31:77:b5:3a:62:5e:ee:5c:85:e3:10:
e0:fe:21:3d:3d:20:05:eb:e4:e2:dc:4d:9a:b7:d4:
d7:d1:df:62:5d:16:92:d9:7e:c3:8e:ba:e2:3e:6d:
7a:46:aa:60:75:a9:7b:c0:40:34:2c:0f:6b:c7:41:
a4:38:da:51:1a:3e:b2:1b:f7:c8:07:82:09:b2:ee:
c8:76:43:b2:68:3e:f6:54:ad:25:99:c9:36:a6:d5:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:E9:60:15:7D:EE:DE:69:35:8A:02:51:E1:C2:1B:E2:A9:A1:CC
X509v3 Authority Key Identifier:
keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/21EE53CCBF2711ECBAF28865C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1f:e1:b4:fd:86:b9:50:86:f7:33:ca:02:ed:4a:22:06:24:
1f:a6:84:ee:d8:a6:f6:bd:ea:7a:7c:6f:3f:6a:e9:74:e4:19:
48:26:71:59:43:da:ac:c3:32:a2:95:ae:d3:d2:c8:71:48:d4:
af:e6:fe:21:dc:eb:25:37:c8:24:74:2e:c3:39:c5:37:b1:d4:
db:0e:df:aa:53:00:2b:7e:ab:59:49:ae:bc:ea:5e:a2:4e:73:
98:cb:92:e1:e5:19:84:25:03:51:88:7c:9a:84:22:65:69:af:
05:1d:ce:08:22:41:e9:3b:dc:78:ca:bf:3e:b1:b8:4b:51:c4:
dc:58:1f:af:81:f5:72:1d:d1:63:a5:21:4f:2b:21:ab:02:d8:
90:44:b4:53:30:02:c6:a7:dc:75:b7:4f:3a:c8:dc:e0:f2:2a:
bb:53:ce:37:c8:42:02:41:58:be:83:84:d6:00:70:19:45:51:
08:0c:dc:7e:78:b8:c9:6b:de:ff:dc:4b:ce:44:78:08:d1:92:
b3:fb:c3:c3:93:df:7a:16:d0:fb:10:fa:16:b9:ae:ae:ee:41:
ee:4e:3a:de:c5:10:89:59:e6:65:a8:88:0a:9e:b0:0e:7b:35:
c8:36:de:bf:a9:85:af:cb:12:c5:ae:7e:3a:81:95:13:0f:1d:
1b:8a:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org