Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A3D7F4003C4011EEBF63C333C4F9AE02.roa
File: A3D7F4003C4011EEBF63C333C4F9AE02.roa (raw, json)
Hash identifier: aYZpeT49iQbKxA4HHYXntxCvW7iBMOdOgLJvLk6ga/8=
Subject key identifier: DD:D3:2B:5F:96:4B:FE:52:15:6D:9A:EF:FE:91:78:85:03:3A:7E:82
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 27
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A3D7F4003C4011EEBF63C333C4F9AE02.roa
Signing time: Wed 16 Aug 2023 14:24:42 +0000
ROA not before: Wed 16 Aug 2023 14:24:42 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.69.56.0/24 maxlen: 24
103.69.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: Aug 16 14:24:42 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64dcdc2a-82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:12:76:6c:eb:6a:31:17:01:0a:34:dd:17:
0e:31:79:6a:8c:ee:4f:f0:b8:14:fd:2b:c7:57:bf:
06:d0:17:eb:5c:06:ea:11:dd:62:21:e7:a9:d0:3c:
ab:c3:bf:da:f1:10:0a:fd:85:1e:82:69:64:cc:50:
7f:ad:e9:70:2a:53:e5:0d:29:d9:03:e4:1e:b9:2b:
86:42:28:8e:ad:f2:7f:40:81:0b:c6:54:46:33:bb:
c8:86:b1:8c:ae:01:d3:27:48:ec:65:27:12:49:d9:
1d:c5:25:1c:42:9a:49:02:a3:51:28:5d:7b:ed:53:
2a:b1:f3:b0:59:68:1f:74:84:3f:f2:6a:94:78:7a:
07:50:f3:60:4a:6d:35:3a:2c:88:c4:9c:10:36:92:
b8:31:8a:5d:fb:ce:6d:7a:76:3b:41:3a:38:53:21:
1d:4a:6f:7d:17:3f:25:81:6e:5d:3a:33:2c:47:44:
80:b0:02:cf:61:0b:9e:36:f7:ac:cc:80:78:28:ea:
b3:22:20:e4:de:54:8b:13:8c:cd:e6:2a:e0:ae:29:
0b:f4:88:42:69:5b:9d:9c:fe:54:ec:39:f7:53:86:
c0:be:b6:09:cf:0f:1d:76:9d:04:9e:c3:ea:be:78:
9c:3c:23:97:1e:8b:ba:65:17:ba:25:34:1f:dc:4b:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D3:2B:5F:96:4B:FE:52:15:6D:9A:EF:FE:91:78:85:03:3A:7E:82
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/A3D7F4003C4011EEBF63C333C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.56.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:4e:0a:b7:4f:f7:b1:cf:5d:0e:8c:d8:d1:b3:54:b5:13:c6:
b3:92:48:58:c2:c2:ff:59:ce:2b:2e:12:6e:6c:23:38:26:7c:
c0:76:e8:5a:f6:5d:83:e9:68:5e:fa:a1:b7:a2:3c:bc:ea:23:
d3:1c:f3:e4:58:4d:21:65:46:14:b8:36:31:1d:d0:f8:d6:21:
4e:2c:e7:79:8c:6c:1d:ce:65:63:56:37:00:f8:89:88:4f:12:
ae:c2:50:cc:78:e7:7d:9c:d0:4e:6e:f0:87:82:58:45:af:0c:
33:81:7f:52:6c:7a:29:64:35:47:18:43:04:11:ae:a2:10:ce:
39:55:80:24:62:1e:dd:7c:ed:ee:52:d3:97:5c:8c:35:84:52:
1f:74:31:b7:79:9f:d6:7e:1e:5e:ac:05:a5:5f:94:15:dc:f2:
d8:10:40:7a:e4:b5:78:8a:db:6d:f2:75:4b:dc:15:0c:37:aa:
68:49:a9:96:be:93:2c:4a:33:e3:aa:4a:f9:ef:a3:f2:1e:61:
e4:71:83:53:98:81:ce:38:f1:5b:39:17:5b:37:e5:7c:16:d1:
04:7f:25:a6:01:f0:58:0a:a1:09:3e:0d:4a:13:55:ca:35:c9:
07:1f:1a:2c:7f:24:aa:ab:18:a5:7d:32:da:93:21:00:df:a0:
ac:70:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 09:01:00 2023 by rpki-client on console-fra.rpki-client.org