Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/49BED3340BDD11EC99F6A975C4F9AE02.roa
File: 49BED3340BDD11EC99F6A975C4F9AE02.roa (raw, json)
Hash identifier: 3vNCbwQSYJbcKjZYlGG9TyuQ9ZWpN8cOFKjwv9VpMVY=
Subject key identifier: 66:DC:96:5F:2E:4A:75:A3:4B:51:0D:33:C9:72:3C:EE:E6:28:E3:5E
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 24DA
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/49BED3340BDD11EC99F6A975C4F9AE02.roa
Signing time: Tue 02 Aug 2022 04:23:28 +0000
ROA not before: Tue 02 Aug 2022 04:23:28 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 55423
IP address blocks: 103.217.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9434 (0x24da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 2 04:23:28 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62e8a6bf-c284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:e0:1d:07:46:7e:81:bf:1e:82:91:96:48:
fd:e3:e4:93:f8:66:a9:1a:f9:75:c6:e9:35:cf:cc:
e0:d1:92:20:ba:c2:2a:9e:3e:98:6e:d2:33:6f:b5:
e6:62:ce:e5:bd:af:19:c4:62:a9:96:9d:82:9e:24:
10:0b:7c:df:3a:4e:37:3c:40:82:2d:fe:81:90:27:
75:8a:0a:de:c1:6f:d4:a9:62:c3:16:75:b5:f8:01:
aa:e3:b4:47:27:24:68:bf:78:57:31:5e:57:87:70:
eb:b6:9b:a7:8b:73:86:d5:4a:69:fb:43:27:24:cc:
89:8f:40:a6:69:66:4d:bd:62:a9:c7:a1:a3:49:48:
d8:dc:a1:32:bc:80:fa:3e:58:64:ba:0a:65:50:82:
d2:0f:6a:3b:9e:00:f1:e4:5f:a2:cd:c6:ab:71:55:
71:1d:30:56:39:9c:3b:a6:f6:dc:48:0d:1f:7d:9a:
5e:71:a7:e2:7b:32:76:b5:ec:bf:d5:bc:0f:60:3e:
73:56:86:02:68:cb:5c:72:fe:b0:be:18:3d:9e:fc:
3c:02:08:27:9b:c7:05:d0:3f:58:3a:42:cf:3b:02:
42:e7:29:2a:28:05:76:63:7f:07:3d:7b:46:fe:32:
5a:6c:61:87:99:db:76:78:d1:85:de:7b:63:f4:2a:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:96:5F:2E:4A:75:A3:4B:51:0D:33:C9:72:3C:EE:E6:28:E3:5E
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/49BED3340BDD11EC99F6A975C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.255.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d5:07:73:ce:3a:94:81:cb:62:5e:55:ec:c8:a4:2e:b6:1a:
e7:f6:a7:b6:3b:37:12:e5:44:09:c1:c3:bd:76:c9:7c:d5:d9:
3f:1d:23:cd:2f:3d:ad:3a:44:4b:56:00:1f:55:e6:93:7b:55:
b1:56:49:27:47:86:d0:87:8d:79:6e:f9:c6:18:2f:4d:05:63:
ad:ac:03:3a:2c:4a:94:71:a5:3c:c8:96:87:bc:7b:d1:31:a7:
20:cc:23:75:83:90:ea:da:42:79:2c:5d:f1:be:11:76:de:2a:
88:9b:c0:af:b0:64:c5:34:a3:ce:c4:b2:5e:be:e4:bd:47:1f:
9c:b3:7e:2d:17:40:f0:5f:b3:e2:54:16:e4:56:c0:41:63:5e:
26:cb:db:9b:11:43:90:1b:f0:d7:5e:61:9f:df:72:77:2d:7a:
7f:56:8a:c4:b6:e8:6b:bf:c7:43:f5:57:f2:75:0c:30:dd:fe:
02:c4:61:91:82:3b:f9:e6:49:de:41:b7:6d:f7:cc:a1:f7:8c:
67:7e:28:6a:2a:ca:b2:df:a6:5b:8b:86:8e:46:a7:b6:34:f3:
c8:35:0e:05:e3:37:bf:8b:09:bf:f2:16:c9:59:0f:0d:88:59:
24:81:04:7a:3d:8f:61:79:9b:fa:a6:38:ff:5f:19:01:ec:c7:
10:c8:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org