Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/D6562090308A11ED81F1A55BC4F9AE02.roa
File: D6562090308A11ED81F1A55BC4F9AE02.roa (raw, json)
Hash identifier: M4CHvbVImWPs57fvl6JNE96FAR61Pc2ikgrufy+5f3A=
Subject key identifier: 0A:15:43:C3:11:40:D1:AA:77:CB:9B:01:68:BD:57:39:B5:DA:AB:18
Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial: 0445
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/D6562090308A11ED81F1A55BC4F9AE02.roa
Signing time: Fri 09 Sep 2022 22:00:38 +0000
ROA not before: Fri 09 Sep 2022 22:00:38 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 21859
IP address blocks: 103.115.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Validity
Not Before: Sep 9 22:00:38 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=631bb786-c3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:2b:3e:01:d8:25:d5:d0:44:a6:a2:69:93:
33:f6:bc:91:e1:f3:c1:a4:ef:a2:89:d9:e0:67:96:
29:d9:6e:9b:6b:7d:19:41:7f:b8:71:9e:39:cc:a6:
30:c2:d3:e5:fd:ea:9a:b5:dc:27:90:12:e1:92:3c:
93:ef:55:c7:26:bf:9b:08:9c:b0:11:50:9f:b9:b4:
ba:a6:0f:85:1c:1d:35:fb:12:b3:d9:fe:44:f8:63:
d7:a2:56:53:1d:12:ee:be:32:09:ff:db:ea:6c:ad:
59:2c:65:28:b4:d6:b5:3a:f1:db:28:2d:66:3b:da:
6f:1d:d1:31:eb:f2:b7:63:08:7a:1d:68:d3:0b:4d:
e9:0a:1b:5a:f8:f9:3b:03:74:3a:46:8f:03:75:63:
1e:4a:31:59:d0:6b:b2:54:6a:11:49:31:49:2a:67:
dc:a1:79:0b:0f:ae:0b:4f:1f:03:13:d1:c9:98:50:
8d:01:91:05:f3:b5:5c:e0:46:68:ff:9c:61:1d:c4:
70:a6:f8:03:a6:5a:48:11:f3:e5:ca:e3:93:b7:ea:
e9:49:70:f8:35:4d:f4:eb:28:cf:32:32:18:5e:ad:
09:0e:68:5b:12:43:5b:23:65:88:2f:b4:b6:3d:72:
35:c8:bd:e7:2c:f4:d9:b5:8c:45:28:8d:74:72:58:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:43:C3:11:40:D1:AA:77:CB:9B:01:68:BD:57:39:B5:DA:AB:18
X509v3 Authority Key Identifier:
keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/D6562090308A11ED81F1A55BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
48:72:d2:dc:4c:cb:12:46:c0:b8:3c:5e:26:9a:cd:f3:47:45:
e9:85:d8:73:59:c3:5c:eb:62:01:a9:8f:7d:16:5e:f6:b9:8e:
c1:9d:e6:35:c5:3b:6f:65:1f:c7:7a:01:4e:79:94:7d:93:36:
14:db:e7:b5:ab:fc:32:ef:df:a1:26:d1:32:c5:73:a4:35:db:
2d:39:09:89:75:b0:da:62:74:d6:b1:15:9c:54:f3:93:9c:2a:
50:af:b8:a3:13:f3:cc:65:dc:e9:f1:ec:fb:89:29:c2:da:c3:
ef:f9:f0:a2:1a:be:a7:77:1a:84:93:db:34:e0:ed:c3:6a:08:
b7:d8:82:15:c0:f2:6a:62:a4:0b:b8:38:15:6d:ab:48:eb:ce:
c1:87:79:60:eb:e7:b3:eb:5e:b6:9e:3c:c9:94:49:a8:0b:fa:
3c:ed:72:1d:75:e7:52:85:b4:0a:78:be:c9:2c:25:14:92:aa:
c7:ed:dc:3a:02:9d:e7:a2:a3:e2:cb:c4:ea:31:02:02:49:d3:
77:49:ec:cc:ff:a0:29:e0:ee:b7:da:98:74:a4:56:43:21:f6:
16:61:01:4f:88:b7:48:c6:23:4c:d5:51:d6:ba:b2:9b:17:96:
4e:cb:f1:0a:cb:49:5c:d0:6c:76:19:9b:91:0e:d1:6d:1f:9e:
b5:6c:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-ams.rpki-client.org