Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/7131CAD2D63111EDB0917165C4F9AE02.roa
File: 7131CAD2D63111EDB0917165C4F9AE02.roa (raw, json)
Hash identifier: iafF7o6ADiLgMDZHGr3FD32WSngmBtq1RjvFASID0W4=
Subject key identifier: 16:48:B2:2C:23:35:28:BA:33:1A:24:E9:25:43:2C:63:A9:49:49:4E
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 08E7
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/7131CAD2D63111EDB0917165C4F9AE02.roa
Signing time: Tue 18 Apr 2023 21:58:35 +0000
ROA not before: Tue 18 Apr 2023 21:58:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38264
IP address blocks: 103.149.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2279 (0x8e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Apr 18 21:58:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643f128b-e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:54:cc:13:1e:45:a6:4f:fa:88:71:28:bc:
7b:38:13:69:79:37:eb:54:98:5c:84:26:1a:5f:72:
0a:37:b8:6e:91:ff:2e:32:e0:5c:92:05:b8:10:66:
cb:5c:7f:32:a6:a2:5c:73:ed:5b:0d:76:30:f8:72:
6a:2c:da:a9:e6:b0:eb:7f:ce:c2:e4:e9:ec:55:a3:
4d:e6:d1:bb:3f:87:5d:67:4c:71:28:fe:87:12:57:
32:03:ec:02:d0:09:37:1b:b7:1c:71:37:75:3f:a9:
cb:45:6c:1b:61:6e:65:b4:11:dc:12:a3:f7:e8:af:
ba:a3:fc:e8:ae:57:c0:07:41:c1:ab:56:ac:31:a9:
51:ad:63:19:51:ee:80:79:67:50:1b:12:17:ef:99:
90:3d:8b:a0:9c:22:3c:84:56:49:ac:c6:01:4c:4f:
2d:6e:a1:96:88:a9:f3:76:12:9e:77:b1:30:df:af:
b3:d6:c0:c4:dc:44:8f:0c:4e:7b:fa:49:52:8a:67:
46:e2:58:2e:cc:85:e5:ea:26:6b:7c:bf:10:53:80:
10:48:91:52:7e:78:45:ee:10:0e:57:7b:50:ec:b1:
9d:31:d2:fd:77:88:78:ea:c6:10:fc:18:9c:96:02:
60:fd:1b:13:2c:2f:30:d9:dd:e1:ed:76:53:b2:87:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:B2:2C:23:35:28:BA:33:1A:24:E9:25:43:2C:63:A9:49:49:4E
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/7131CAD2D63111EDB0917165C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.32.0/24
Signature Algorithm: sha256WithRSAEncryption
20:49:fc:64:de:7b:27:64:df:99:af:81:a1:f6:d4:ea:31:db:
38:b5:07:9f:da:fa:68:70:0d:f1:f6:13:ca:b9:a5:a4:fe:e4:
00:7a:b4:a1:43:66:1b:9c:17:b5:0d:48:a9:71:99:fe:58:86:
0c:9f:48:4d:84:35:36:1f:99:a7:83:37:20:6c:1f:17:4c:92:
37:c0:6d:92:0d:13:d6:22:55:84:dc:a5:33:49:ec:9d:a6:07:
ba:7c:4f:28:7e:4a:3f:8f:b1:60:85:fd:ce:40:3c:d2:5e:62:
8e:93:66:88:99:d8:cd:53:a3:eb:74:47:74:2a:ce:bb:85:39:
cb:2e:7f:3b:bb:b4:63:aa:e5:87:ee:4d:32:7e:e2:00:08:41:
bb:44:2d:10:67:92:67:f2:35:da:fd:06:c0:18:29:d7:ca:85:
48:25:1d:4a:86:65:f5:8f:aa:a8:35:a4:29:5e:49:11:4c:a2:
0f:50:af:f8:1f:ea:ad:e4:ec:8a:b0:e8:cf:0d:54:c2:1d:49:
9a:20:2a:c3:58:68:30:99:f7:9c:72:c4:84:c0:ec:c3:ef:ee:
9d:40:21:ec:5f:2a:82:e7:06:45:b6:b8:19:29:04:16:ed:5a:
c0:80:21:30:ae:38:1e:88:4d:45:ea:86:24:40:06:bb:15:13:
b7:0b:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 07:42:19 2023 by rpki-client on console-ams.rpki-client.org