Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/D80FC29CC28011ECBFFF0957C4F9AE02.roa
File: D80FC29CC28011ECBFFF0957C4F9AE02.roa (raw, json)
Hash identifier: ZJ1X6UzbAv5+4IjH2a655sYmtNwV6Jv+yprcn19qxZo=
Subject key identifier: 5A:1D:9D:4C:84:6A:EB:EA:62:05:66:53:7B:79:B6:9B:C7:5D:C6:CB
Certificate issuer: /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial: 03BB
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/D80FC29CC28011ECBFFF0957C4F9AE02.roa
Signing time: Mon 04 Jul 2022 13:30:53 +0000
ROA not before: Mon 04 Jul 2022 13:30:52 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 14618
IP address blocks: 103.115.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Validity
Not Before: Jul 4 13:30:52 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62c2eb8c-aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:9f:8f:c2:9f:d9:24:11:38:71:5b:71:a9:
39:45:12:e9:cb:ce:28:e8:be:08:58:c2:88:c8:dd:
d8:b3:5b:f0:19:5c:cb:88:ec:70:46:60:69:10:04:
84:55:91:95:07:d9:16:ad:bb:2d:d4:f5:8b:d0:79:
f9:58:fb:e2:77:92:12:60:e9:2e:96:a0:c0:3d:98:
b1:21:25:ed:bf:6a:37:44:38:0b:17:93:b0:7f:e5:
8a:f3:8b:80:0f:d7:01:86:20:ff:86:9b:f1:e8:9d:
7c:3b:90:84:93:bf:47:0a:89:68:4a:41:6a:b9:61:
a4:d2:0c:79:cc:d0:14:18:09:20:6a:c1:35:24:d2:
69:b4:c0:60:df:b2:1c:75:dc:5a:27:ef:33:d9:4b:
4c:74:8e:a6:45:5f:48:ab:e0:0c:41:0f:3a:4b:ae:
b6:c6:e9:5a:3d:4b:59:24:d3:98:42:b7:f4:c9:8c:
a1:bf:53:76:80:32:c4:ec:9b:b4:db:87:56:96:50:
9a:92:4d:48:61:15:a2:23:79:de:c2:3b:e5:f7:ac:
07:b8:0c:a5:a7:6b:8f:d8:91:32:55:16:94:21:59:
29:38:9f:4b:d7:eb:d5:57:6a:c4:72:81:eb:64:08:
a1:6d:43:3f:22:a4:e2:9b:b8:a0:b0:b9:d4:c1:62:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:9D:4C:84:6A:EB:EA:62:05:66:53:7B:79:B6:9B:C7:5D:C6:CB
X509v3 Authority Key Identifier:
keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/D80FC29CC28011ECBFFF0957C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.102.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ca:68:7f:a6:98:c1:7f:28:d5:20:c8:c1:a1:2d:e1:b2:74:
b3:26:a7:4c:9b:0b:df:e8:6f:a3:b5:68:76:1e:8e:9d:e9:3a:
06:0d:b4:f3:60:22:d8:e7:07:40:7e:22:8d:97:96:f3:d8:d3:
6a:fb:0f:a9:0b:cf:cc:a2:87:41:b9:74:ea:6b:de:a3:45:cd:
d5:5b:05:63:cd:a8:56:03:35:b3:6a:8e:d0:82:21:f3:17:7f:
dc:d9:6a:1e:c4:39:20:c2:39:16:78:f6:cc:44:0b:ac:b6:7a:
df:0a:43:38:b7:06:95:65:03:79:57:cd:af:ef:1e:a5:09:20:
7e:99:c3:39:c2:1a:ba:16:d4:d7:1e:e0:26:62:b0:77:b0:2b:
95:6e:29:93:59:51:07:92:78:c6:ca:7f:e4:0c:2e:8a:dd:55:
3b:71:4f:98:37:cf:6b:93:8d:d6:ec:9d:88:86:24:c8:50:f7:
16:78:5f:4f:4a:6a:6c:88:4c:6c:d2:48:62:c1:6f:dd:11:bd:
48:40:79:57:24:bd:d5:52:7a:9f:20:92:a4:7e:c1:84:cb:cb:
99:87:a8:cb:39:b0:11:a1:81:98:75:86:4f:dd:61:5d:46:69:
1b:3f:e2:f8:56:b4:29:fb:3d:14:34:8a:6c:a8:c9:3f:1f:8f:
7f:18:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org