Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/B8BDDEC4767611EDA5E44566C4F9AE02.roa
File: B8BDDEC4767611EDA5E44566C4F9AE02.roa (raw, json)
Hash identifier: lH8TJbygTj1bNKn6is94cvnRn4RnGX6jTgVhFJwqrMU=
Subject key identifier: 2C:D7:94:10:B2:4F:4A:25:80:49:75:41:6F:B0:AD:E6:B2:25:E5:93
Certificate issuer: /CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Certificate serial: 0187
Authority key identifier: DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/B8BDDEC4767611EDA5E44566C4F9AE02.roa
Signing time: Wed 07 Dec 2022 21:33:00 +0000
ROA not before: Wed 07 Dec 2022 21:33:00 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 59239
IP address blocks: 103.186.56.0/24 maxlen: 24
103.186.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F42/serialNumber=DBAFFC0C002D43DC47346BC4E19FEB3EBF3BB4D5
Validity
Not Before: Dec 7 21:33:00 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6391068b-157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:19:1e:c3:c3:92:09:5a:9c:87:d6:97:7a:
f3:2b:d2:4f:14:f8:f2:11:da:f5:e1:ce:96:db:39:
3c:bd:df:a6:08:cc:a0:28:e7:dc:b9:b7:d3:e3:a0:
7c:f0:78:90:c8:61:cc:6d:f9:9b:61:ba:0f:fd:13:
34:36:48:61:1b:b0:99:d1:97:b0:a8:72:b0:fa:b9:
32:8d:e7:5f:b2:54:82:76:01:89:70:57:c4:99:29:
da:93:02:36:d0:be:e9:2d:8e:01:32:80:f7:a2:fc:
c4:0e:9e:58:d3:c1:95:64:ff:aa:ff:e7:7c:4b:91:
b9:fb:99:93:7b:5a:d9:8f:7e:6a:1b:b2:08:15:1d:
a8:c7:d8:72:48:f4:af:86:a3:60:fc:9f:13:93:8e:
bb:43:1d:9e:4d:af:6f:69:ec:84:a8:20:30:03:3d:
7d:91:8e:83:86:1a:a3:5c:02:e2:bb:d2:3e:00:05:
01:55:e7:98:af:47:a4:73:27:04:4a:b5:5a:27:98:
3a:33:cd:9a:56:03:fe:08:be:0d:a4:5c:5b:78:b5:
60:bf:c7:30:e1:67:5c:4e:7e:b1:30:71:47:c8:1c:
4f:0d:dc:cf:7f:d6:ce:9e:48:bd:61:50:b6:4a:3c:
3b:4f:da:04:ee:bc:9a:9d:e2:ec:35:0a:23:52:5c:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D7:94:10:B2:4F:4A:25:80:49:75:41:6F:B0:AD:E6:B2:25:E5:93
X509v3 Authority Key Identifier:
keyid:DB:AF:FC:0C:00:2D:43:DC:47:34:6B:C4:E1:9F:EB:3E:BF:3B:B4:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/26_8DAAtQ9xHNGvE4Z_rPr87tNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/26_8DAAtQ9xHNGvE4Z_rPr87tNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F42/61F601FCBA2411EC9750B94AC4F9AE02/B8BDDEC4767611EDA5E44566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.56.0/23
Signature Algorithm: sha256WithRSAEncryption
75:3e:0d:21:61:e5:ff:3a:63:94:bf:5c:46:53:19:0d:f8:5a:
68:34:d8:ba:00:72:a9:64:cd:69:cf:df:9a:59:75:f4:9e:88:
67:bd:0d:3e:e6:8d:34:af:ac:8e:90:d7:b7:5f:2b:d0:d3:96:
f0:e7:df:d5:a2:df:6d:d0:50:df:29:d6:7e:8a:1e:00:be:ea:
7f:e9:3a:21:2a:41:19:f9:a3:4d:f4:94:93:3a:43:74:e7:56:
a9:56:e0:a8:43:85:4a:8d:43:7d:4c:1c:ad:eb:65:d3:83:6f:
d5:a4:16:7d:3e:89:65:1b:91:49:b4:ba:ef:33:84:d6:07:17:
ec:8a:4d:99:54:eb:54:71:2e:d3:4c:59:f1:eb:06:74:6b:4a:
42:d6:8b:71:46:fb:2f:b1:12:a4:c4:52:b2:e4:70:dc:7a:1a:
75:68:e0:13:32:89:80:38:1a:d6:1f:81:93:df:58:88:b8:a3:
6d:4c:41:04:26:eb:1e:16:b2:c8:c9:a2:24:18:2e:8f:84:94:
f8:c2:3c:fb:7f:a7:83:33:73:61:b6:00:a1:f0:f0:a3:67:d3:
32:f6:94:22:34:e3:e1:85:27:18:88:d3:d9:73:90:80:c4:90:
5c:07:77:82:a9:b0:5e:2c:f3:00:d4:d2:a2:6c:c5:9b:3b:a0:
c8:39:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org