Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/8042C41A834B11E882801E5BC4F9AE02.roa
File: 8042C41A834B11E882801E5BC4F9AE02.roa (raw, json)
Hash identifier: 16eENZl7XDh5aqErHDwvhaq53hNuUQmZyLZZJWIemOY=
Subject key identifier: 70:6E:86:9D:E0:8C:9E:D3:B7:4F:03:FD:2A:06:54:D1:FB:8F:A7:E6
Certificate issuer: /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial: 11E9
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/8042C41A834B11E882801E5BC4F9AE02.roa
Signing time: Wed 04 May 2022 18:04:42 +0000
ROA not before: Wed 04 May 2022 18:04:42 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 58879
IP address blocks: 103.114.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4585 (0x11e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Validity
Not Before: May 4 18:04:42 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6272c03a-b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:35:74:02:c4:c7:ca:a5:b8:46:f1:7d:39:
ea:65:51:67:6e:79:fa:27:0b:e1:16:3a:57:e3:f3:
95:8f:be:af:ab:6b:59:7a:4d:48:be:2f:e5:6e:78:
8c:a2:70:ec:c7:21:5d:45:8c:95:48:af:1b:4e:9d:
02:32:e7:0e:05:85:6b:79:f9:61:0c:d1:57:5c:bd:
09:60:40:4d:54:45:ab:3f:c6:21:f5:44:d1:4c:74:
b6:1e:dd:13:cd:ce:9c:75:a9:20:ab:98:d3:6a:0f:
ee:8b:35:e7:06:59:6f:95:64:20:2a:76:46:78:a7:
bf:b2:43:52:cb:e7:a1:5d:c6:3f:ff:f2:c5:43:18:
60:a2:3e:90:2f:5e:ce:26:a4:81:c3:56:0c:9d:46:
c6:3c:e8:f3:d6:64:8c:e6:2d:c7:59:ff:d3:8a:4e:
38:e6:b3:32:d1:93:38:45:59:eb:a6:2b:cc:86:9a:
d4:37:95:f4:4e:de:db:26:12:20:df:17:85:b6:49:
f5:31:5e:61:33:13:62:27:d4:33:8e:ed:ac:3e:c0:
48:a7:b8:07:61:a6:a2:5b:a9:ce:66:ed:48:ba:83:
10:a3:c2:fe:ba:c7:ce:8f:68:7b:3d:56:c1:c0:36:
23:ec:9b:3a:df:7a:97:53:a2:56:ac:7d:b5:d1:e9:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6E:86:9D:E0:8C:9E:D3:B7:4F:03:FD:2A:06:54:D1:FB:8F:A7:E6
X509v3 Authority Key Identifier:
keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/8042C41A834B11E882801E5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.176.0/22
Signature Algorithm: sha256WithRSAEncryption
22:e6:67:11:22:7d:f7:8d:41:1b:b9:7b:32:1e:49:77:57:d9:
74:f9:3e:3b:67:1a:18:26:29:0c:77:ba:92:ea:6f:31:28:cc:
c2:7f:c7:a9:bb:b4:d0:91:e8:36:f7:aa:78:0c:63:2e:0d:8a:
55:2a:2a:11:b8:f1:c0:73:d2:ca:1d:ff:03:95:18:0d:3f:da:
58:61:c9:9b:fd:ad:8c:6a:4c:25:47:ca:da:40:0a:4e:17:19:
a0:5e:48:e2:b1:d1:8b:a8:5b:e9:30:ae:12:5d:c9:ef:5b:0c:
a7:b9:f9:34:a6:9d:c7:12:8f:a7:dc:58:c0:6a:c5:de:05:ac:
da:19:0f:29:03:cb:ad:c0:d0:29:28:d9:8b:e0:93:be:0d:16:
88:93:13:23:f5:e6:9e:f6:0e:bd:2f:2b:ab:f3:7c:b0:d7:72:
76:af:3a:64:9b:b4:cb:a3:c6:97:19:b1:57:a5:fe:5f:cc:8a:
08:ae:d2:e6:b6:c2:ec:81:61:f4:6f:62:6b:b7:62:c7:d8:f6:
b9:d4:83:64:fa:e0:28:d9:5d:bf:08:6a:be:2b:48:ff:54:19:
e6:1f:6e:ef:a0:6f:24:21:8b:cf:da:83:ef:13:83:a0:19:bc:
01:2e:27:1d:a7:e7:74:8c:a3:e7:c6:c4:a0:79:5c:0d:19:2a:
36:b1:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org