Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/361338C2D3DC11EB9FCD6135C4F9AE02.roa
File: 361338C2D3DC11EB9FCD6135C4F9AE02.roa (raw, json)
Hash identifier: jppVafrVUbP9N7w3/l7wFRqHzql0/D1ul6XApRHjMDQ=
Subject key identifier: 69:57:1D:BD:BE:EE:6C:32:A6:74:16:EA:FD:D7:DD:1F:59:06:C6:6A
Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial: 050D
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/361338C2D3DC11EB9FCD6135C4F9AE02.roa
Signing time: Sun 16 Jul 2023 23:40:24 +0000
ROA not before: Sun 16 Jul 2023 23:40:24 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 135391
IP address blocks: 103.115.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Validity
Not Before: Jul 16 23:40:24 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64b47fe8-3610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:36:28:c0:a6:a5:74:e7:9d:38:d0:3f:f9:
03:3b:2c:0c:8c:a1:bb:54:65:25:be:67:80:fd:46:
29:46:f7:4d:7d:ec:58:8d:6d:6e:01:a8:53:68:a5:
03:82:24:aa:39:9e:46:d3:f3:3e:ea:af:04:c8:3c:
c9:7c:8b:09:d0:fe:19:eb:4f:50:ed:30:61:1f:3c:
b6:a4:b4:0a:a1:4a:ea:a8:23:0c:64:3d:ca:d6:66:
80:d0:86:d1:e1:2b:a0:51:6a:07:9c:2c:05:a5:df:
69:68:de:d3:83:98:e8:95:11:84:7d:dd:d0:e7:e7:
90:eb:f3:85:cd:84:6e:6d:95:0e:e8:65:0f:72:76:
ae:f4:39:04:01:53:39:91:b4:03:8c:90:92:d0:92:
5d:80:ca:76:de:1b:69:a9:44:65:18:e1:2f:2f:7e:
e7:63:71:6c:07:28:37:60:65:ed:a2:79:d0:54:57:
db:41:76:6d:5f:cb:26:60:ad:e5:93:32:9f:90:52:
5f:66:d2:a3:aa:16:4a:57:04:f2:cd:1f:02:29:a6:
8a:73:d5:4d:39:a5:37:62:b8:15:53:a8:a6:e0:2d:
40:0d:6b:0e:7e:2e:9f:8d:c6:3a:2f:22:b8:13:54:
c6:e8:46:3e:78:b1:fe:05:66:a9:a1:51:d8:97:5e:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:1D:BD:BE:EE:6C:32:A6:74:16:EA:FD:D7:DD:1F:59:06:C6:6A
X509v3 Authority Key Identifier:
keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/361338C2D3DC11EB9FCD6135C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.103.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bc:62:cf:41:e4:12:b6:66:0a:01:ac:53:56:6f:a8:6c:66:
7b:7f:e8:43:6f:ef:70:b3:d7:62:2d:80:a8:9b:3b:04:a6:c4:
b9:bd:61:97:9d:a0:1c:8c:05:ab:f0:7c:f3:11:ab:0a:43:51:
08:bb:00:1f:a7:ef:4d:0b:4b:27:b0:61:12:2e:2c:29:b5:b8:
07:a8:92:af:0e:78:68:af:83:84:cf:14:c9:8c:e1:cb:86:b7:
7a:0b:cd:f6:fd:49:ba:80:2d:05:18:bd:3c:c4:47:0d:00:ca:
bc:1a:7d:7b:5e:fc:ba:aa:e5:db:17:02:d5:08:4b:89:33:db:
9b:14:6c:ca:19:03:4e:39:d4:43:9e:50:5e:10:7a:1b:89:2b:
0e:39:e4:88:21:09:b3:13:f1:91:31:4a:a3:3d:5c:3a:7c:87:
ff:12:fc:06:bb:27:e1:1a:8e:14:a1:b1:07:27:40:c7:7e:aa:
e2:3f:a3:17:cf:b6:63:e5:d2:aa:20:1c:21:68:e0:db:8e:37:
c4:ce:ae:e9:07:a4:45:92:ce:d7:89:ad:d8:c9:a4:a0:27:b9:
d6:e4:9b:30:a4:e4:5b:98:93:d6:5f:f4:19:e2:b6:39:fb:7f:
3f:4d:55:a4:87:b0:2c:3a:69:a2:dd:a3:5b:48:b1:be:93:81:
7c:a6:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:17 2024 by rpki-client on console-ams.rpki-client.org