Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/666CE1E44F4B11ED9BC8823BC4F9AE02.roa
File: 666CE1E44F4B11ED9BC8823BC4F9AE02.roa (raw, json)
Hash identifier: jxRaRgJ/i9EaiQulfVzOjEsFq2Ers3H/jEXwrxx05Hw=
Subject key identifier: 42:AE:C0:9E:47:79:B5:E3:49:20:FA:B4:53:A1:57:7C:66:07:EB:B3
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 96
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/666CE1E44F4B11ED9BC8823BC4F9AE02.roa
Signing time: Fri 25 Nov 2022 05:54:47 +0000
ROA not before: Fri 25 Nov 2022 05:54:47 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 398343
IP address blocks: 103.102.124.0/24 maxlen: 24
103.102.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Nov 25 05:54:47 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=638058a7-b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:2f:8d:d1:33:02:b6:8e:37:fb:99:34:0c:
07:fe:2e:0f:34:d3:65:cd:74:2f:3f:00:44:24:3a:
b4:73:d9:16:30:c4:ec:5d:37:56:ef:fd:e4:b0:90:
05:79:85:37:0b:74:0d:d0:bc:c4:b7:8f:8b:d2:85:
04:83:0c:7e:41:c2:c3:3a:1e:d3:cf:07:1b:2b:ff:
be:56:76:f5:29:e9:2f:26:4a:33:69:7b:0b:c7:52:
49:0b:8c:9d:3f:47:d9:5d:82:29:e8:fe:88:db:c3:
32:fc:0a:e2:14:1d:33:e6:b8:4d:4a:38:12:76:c2:
11:95:f2:b3:c3:5c:a8:49:de:79:c5:fc:fb:ae:a6:
56:10:89:6d:7a:f9:ec:23:c8:f5:bc:2b:2d:f5:fa:
d9:59:9a:4d:c8:82:b6:1a:0f:8c:1e:3b:1f:a7:70:
05:73:1c:38:eb:b9:1e:4e:56:8e:97:08:2b:55:76:
5d:be:e2:d8:61:cb:a0:c3:6b:15:66:c7:40:71:f6:
51:b2:ee:75:55:4c:84:da:54:48:d3:c0:3b:2f:12:
b5:ad:d9:ef:4b:e6:09:13:8a:9c:c6:e2:7a:6b:cd:
f7:8a:a1:cc:1c:b6:f9:b6:22:83:ce:ab:f4:ae:c0:
70:4e:fe:a8:5d:9b:ff:be:f8:b0:87:00:b0:cf:de:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:C0:9E:47:79:B5:E3:49:20:FA:B4:53:A1:57:7C:66:07:EB:B3
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/666CE1E44F4B11ED9BC8823BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.124.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:d3:3a:c2:7d:9d:e1:da:83:16:39:b9:65:00:91:54:e4:8b:
40:dd:05:6b:76:bc:c6:aa:b9:9e:37:00:0f:f6:ae:91:05:41:
e0:d6:07:6b:c1:51:1d:6a:a4:2f:31:f9:26:59:b4:b1:c1:cb:
11:24:a2:61:c7:bb:00:88:a8:dd:d6:0b:9c:f1:1c:80:c9:8c:
9d:c0:1a:94:9b:46:e9:ed:d4:39:9e:51:08:92:a0:95:c5:f7:
32:7f:ad:81:84:62:62:33:d0:ed:e8:1d:55:ca:2b:5d:74:7b:
98:c3:28:0c:6a:fd:70:0e:bd:06:43:16:d0:92:2f:f8:f0:c5:
8b:c5:30:a6:52:7b:0f:44:af:01:ac:7f:e5:d5:ab:3a:2f:d0:
7f:db:90:37:d2:ea:fa:b7:97:e7:de:27:c0:b5:77:46:a5:fd:
34:f9:24:3f:dc:30:7a:af:02:32:32:34:8d:64:1a:15:53:e5:
96:50:c0:4c:ce:81:b7:92:1d:69:a7:00:98:20:3b:bc:b0:46:
01:e0:f2:a0:d7:d5:3b:f8:5b:d7:0b:13:cb:1e:ea:b8:77:de:
10:43:c2:ae:29:b9:ca:1b:c7:8c:6a:19:bd:47:a9:5a:b3:8e:
e6:32:ef:6d:64:59:20:25:ca:8d:bf:78:b0:24:00:b6:b8:06:
14:72:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:25 2023 by rpki-client on console.sobornost.net