Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/0EE8AC44441111EE9A9DBD69C4F9AE02.roa
File: 0EE8AC44441111EE9A9DBD69C4F9AE02.roa (raw, json)
Hash identifier: PZAZp2sBtOl2WBXaGBuPa51B0hV2kgZ95kBLEnENQGA=
Subject key identifier: E3:53:46:6D:5E:F1:BD:28:B5:3A:02:65:F1:65:62:98:C1:1D:C9:28
Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Certificate serial: 0A
Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/0EE8AC44441111EE9A9DBD69C4F9AE02.roa
Signing time: Sat 26 Aug 2023 13:04:15 +0000
ROA not before: Sat 26 Aug 2023 13:04:15 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 396982
IP address blocks: 103.255.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Validity
Not Before: Aug 26 13:04:15 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64e9f84f-45e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:5c:4e:25:9d:d3:c3:f7:e3:7b:37:82:7b:
d9:2d:b8:f2:4b:61:cb:17:ed:27:f4:54:43:87:02:
ed:78:d0:cc:de:e8:e0:83:f2:06:bd:fb:99:95:81:
ad:12:d8:8f:e8:fd:c1:3b:9e:ef:cc:f5:1e:9b:73:
f3:1a:77:bc:0b:e3:c0:54:f2:c0:70:e0:21:8a:bb:
e3:94:bc:e4:a2:26:ee:20:84:e7:4b:93:6b:7a:2d:
38:f3:b3:55:f1:a1:73:75:ec:d2:97:8f:76:8f:81:
e3:8d:23:8d:32:da:90:8e:8f:a6:7f:a2:39:9e:46:
7a:12:13:fc:62:68:a7:22:05:5f:c4:e7:a6:14:c8:
42:43:48:1a:0e:cd:1c:c5:4b:41:61:38:ef:41:af:
d4:d4:da:3a:80:d0:0e:50:44:f0:18:fb:04:32:6c:
23:82:25:7d:b7:34:95:df:37:78:27:76:e3:d4:02:
db:eb:a0:cb:75:f3:fa:f5:38:4e:46:41:9d:60:49:
fb:ae:71:81:57:df:31:5b:39:73:ac:9f:91:3d:92:
3b:bc:f3:3b:55:25:37:dc:6c:8b:8a:a8:d4:2f:eb:
f7:8e:0e:1f:8c:f1:9c:69:c8:76:77:c3:35:bc:27:
48:ca:6a:fb:2d:08:8b:b1:6a:8c:49:5e:99:2b:3a:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:53:46:6D:5E:F1:BD:28:B5:3A:02:65:F1:65:62:98:C1:1D:C9:28
X509v3 Authority Key Identifier:
keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/0EE8AC44441111EE9A9DBD69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.204.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:08:f7:07:78:90:e2:c6:06:e1:18:ca:d0:18:ee:4a:69:5c:
3c:e9:18:1c:1b:07:46:11:0f:e1:5c:40:84:e8:d0:16:99:69:
21:e3:49:b4:dd:57:e8:50:10:ed:77:c3:6a:f2:d6:2c:36:07:
51:e8:86:4b:39:1d:6d:0f:eb:05:c5:1f:87:7d:a5:af:a1:1c:
77:63:41:3d:80:1b:8e:ad:77:48:ac:93:a6:e1:dd:25:ff:29:
73:32:bb:e8:57:7b:e5:41:75:18:b1:1d:7d:c6:69:6a:20:0f:
6e:d0:de:70:86:14:6e:5e:11:e1:7c:58:47:8f:f8:62:ee:65:
ae:09:e6:d5:dd:b7:8d:00:7c:88:80:e1:a8:08:6f:d3:96:b7:
4c:37:82:84:0a:25:fe:bf:42:84:2e:22:75:f8:9f:f2:de:5b:
e2:55:99:70:c3:32:02:be:b4:ca:95:e4:85:38:ab:11:fc:1b:
18:17:50:5a:df:9b:96:03:69:d1:cf:13:43:b1:f5:4d:1a:18:
53:41:85:00:0a:7f:7e:0e:71:4d:28:58:36:93:76:1c:89:ae:
2d:f9:55:40:36:16:b6:6c:22:19:06:1f:1e:bf:5f:d4:9b:56:
b2:9e:57:df:cc:92:50:60:9a:1a:7c:3b:4e:01:26:40:c3:23:
d1:a5:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 15:46:58 2023 by rpki-client on console-fra.rpki-client.org