Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/AA6957E447C211EAB3D0FF09C4F9AE02.roa
File: AA6957E447C211EAB3D0FF09C4F9AE02.roa (raw, json)
Hash identifier: PmQLeipzTdRLBTry89QbrtDXUbsro0xTOgLM8Br5IKU=
Subject key identifier: 60:C2:FC:98:DD:AC:32:BC:F3:3D:92:E2:7C:26:96:B8:AE:22:46:E6
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 09F7
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/AA6957E447C211EAB3D0FF09C4F9AE02.roa
Signing time: Fri 06 Jan 2023 20:57:00 +0000
ROA not before: Fri 06 Jan 2023 20:57:00 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137182
IP address blocks: 103.104.98.0/24 maxlen: 32
103.143.172.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Jan 6 20:57:00 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63b88b1b-a6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:12:7c:28:e0:e2:21:27:65:b5:21:46:32:
cb:c5:cf:e3:2d:d1:9f:dc:b1:8d:be:70:af:cb:b7:
fe:bb:0d:5e:cb:1e:c5:5c:e3:71:3e:85:ba:a5:ff:
5e:e8:ad:f3:4f:b2:f5:b2:a2:80:f4:c3:bb:50:f6:
c7:aa:ed:e7:f8:d6:f3:e0:bd:21:74:66:65:7b:f7:
65:ea:c5:55:3f:56:db:ae:71:af:3a:25:f7:60:8b:
b6:0a:30:34:da:a5:63:7f:ff:7b:08:cf:7a:1a:5a:
36:27:57:14:ca:8f:6e:5d:82:a9:03:64:c3:60:e2:
e5:ef:07:1a:f2:b1:17:9f:4a:89:2b:61:f8:bd:45:
34:d6:e4:85:58:ba:74:cc:d5:20:6c:99:33:8e:93:
d9:ad:f7:37:29:a2:b5:9f:01:b2:8f:da:a2:f9:61:
17:00:7d:8e:c6:e2:c5:ea:50:db:b0:d4:79:ad:7f:
bf:41:b6:47:6c:46:de:70:12:11:7b:39:80:ed:57:
8f:dc:40:27:2b:08:8d:1e:50:f4:0b:93:eb:f8:7e:
ee:6c:c5:17:2c:a2:f9:3e:e3:b9:5f:81:da:bf:ce:
83:a2:13:a3:79:6d:c1:5d:a8:fe:e0:0e:9a:b1:aa:
0c:ea:5b:9f:e6:ef:e6:ea:a9:f3:04:9a:7d:9c:89:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C2:FC:98:DD:AC:32:BC:F3:3D:92:E2:7C:26:96:B8:AE:22:46:E6
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/AA6957E447C211EAB3D0FF09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.98.0/24
103.143.172.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ab:89:e5:76:75:6c:4f:ce:e3:35:85:c0:3f:88:87:47:fc:
f5:1c:44:30:d3:6b:57:83:c9:9b:26:dc:3c:cc:95:22:81:13:
69:e4:89:99:ac:30:b2:83:40:89:bf:2e:c6:19:82:47:eb:43:
ae:a1:86:1f:c9:b7:2e:ea:52:4d:5e:a7:74:92:40:13:92:86:
b7:c3:2f:f9:2e:b0:8b:3c:91:a5:e8:76:29:68:7c:9e:01:e7:
97:e9:62:04:02:f9:96:86:25:d8:17:a0:44:11:95:53:9f:63:
be:56:4a:c4:1c:96:ee:e9:1e:23:fb:27:0d:fb:3f:f8:a8:a2:
7e:1a:5d:e0:1e:e1:7c:97:91:7b:9c:84:9c:1f:f7:c7:f0:d5:
91:0a:ce:a2:2e:c4:e2:6a:e2:36:b0:c5:98:06:5f:27:55:1e:
ce:c2:d1:2f:55:60:85:47:ca:44:6a:a6:7e:6a:d5:0e:4d:a0:
c8:1d:60:6e:88:f1:53:5a:49:d0:2a:8a:d7:23:a0:1b:35:36:
c6:bd:c7:0b:1a:89:b2:28:bf:15:42:93:7a:b9:70:38:83:37:
df:61:0a:e1:05:16:14:c1:3d:26:1e:3f:5f:c0:44:bb:8a:df:
ae:7d:82:64:6d:7f:a0:74:9b:31:19:80:dd:9a:88:2c:5c:7d:
0f:75:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org