Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/B7B9A1E8767611EDA5E44566C4F9AE02.roa
File: B7B9A1E8767611EDA5E44566C4F9AE02.roa (raw, json)
Hash identifier: bz8mvE1Ly2FCSVArrKkqB5R6PRIfmnaZRfWYYXQEYD8=
Subject key identifier: 86:D0:48:25:60:23:77:A2:03:70:B9:35:DC:76:4F:FC:0D:B1:CA:3C
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 0186
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/B7B9A1E8767611EDA5E44566C4F9AE02.roa
Signing time: Wed 07 Dec 2022 21:32:58 +0000
ROA not before: Wed 07 Dec 2022 21:32:58 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 38139
IP address blocks: 103.186.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Dec 7 21:32:58 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6391068a-b1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:4d:62:57:1e:17:40:60:e8:b2:fb:0c:08:
a4:3d:f3:63:e0:a9:87:92:6c:26:43:4d:7f:ae:7f:
07:d4:f0:7a:0f:17:7d:5f:16:ed:9a:60:45:9b:1a:
eb:05:fe:1b:37:06:b7:60:98:6d:11:20:3e:e7:95:
fd:0b:ea:61:d8:41:2f:15:fc:b7:3e:45:99:11:96:
42:ef:dd:82:92:8a:30:39:d0:a5:82:4d:ff:cf:af:
d4:12:8b:25:53:97:d3:28:c4:0f:42:e4:0d:65:77:
26:68:c7:46:b9:b2:71:4f:76:3b:39:ea:48:5e:7e:
c3:c3:48:a2:da:2d:9b:bf:35:f0:9b:52:92:21:7c:
e0:34:b7:3e:fd:fa:e2:72:cb:99:71:08:df:0f:e0:
ff:d5:9b:87:cb:41:61:98:19:82:2d:d2:f3:91:c9:
4e:61:4a:dc:a0:f1:11:a8:c3:0a:f5:98:bd:f1:db:
fc:b3:49:d8:14:c7:ab:26:e4:28:e7:99:55:27:9d:
6b:f2:b7:ab:4a:6a:9e:1b:a2:dc:3a:f4:12:9c:1c:
57:55:b9:87:9f:a8:5a:68:fb:ca:b4:45:93:0b:bc:
18:24:bf:40:62:74:4f:2d:7d:0e:9b:2e:28:2f:81:
bf:27:e8:5e:ac:6c:c9:5c:d1:54:cc:be:05:c1:61:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:48:25:60:23:77:A2:03:70:B9:35:DC:76:4F:FC:0D:B1:CA:3C
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/B7B9A1E8767611EDA5E44566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.56.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f5:44:8b:57:70:eb:89:71:ba:f4:9b:5a:7f:6a:49:a8:a3:
57:d6:24:f2:fd:e8:39:2a:af:71:d0:e2:4b:d8:fe:53:94:76:
a1:3b:39:a1:a8:50:d1:61:51:1a:3c:a6:95:d3:26:d2:4c:81:
23:eb:84:0f:78:de:54:36:15:0f:ca:fb:df:68:df:ec:ff:a9:
e3:14:a8:7b:98:ff:2e:5d:e1:81:cd:b8:3c:9c:3d:71:f5:e9:
7d:00:dd:db:00:17:aa:54:2c:a1:3f:71:d3:bb:dc:f9:af:61:
6b:f8:63:17:a3:c0:f9:ee:73:b4:5d:b3:34:6b:bd:32:ff:80:
54:a7:ed:51:58:10:b9:b9:2b:d2:ed:ee:ee:3b:27:2a:4d:aa:
29:b1:69:3a:22:b6:7e:e7:ec:7e:1c:54:dc:c2:7d:d3:90:2e:
3e:82:b8:8d:7c:d9:49:23:3f:47:8b:99:9a:31:1e:e2:36:4b:
d0:7a:5b:18:c5:e3:92:b8:38:45:93:0f:53:47:32:02:0c:58:
8c:b1:af:1f:f5:34:b9:99:e1:2f:c3:e4:75:b8:e7:bd:68:07:
fe:2b:83:8a:74:72:0d:37:9f:cd:a7:af:78:86:c4:58:20:39:
28:1b:af:92:aa:38:77:a8:b2:11:eb:20:26:34:fa:6a:77:9e:
fc:e4:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org