Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FC8B2E86FEA711EDBC673B4BC4F9AE02.roa
File: FC8B2E86FEA711EDBC673B4BC4F9AE02.roa (raw, json)
Hash identifier: TaSYktmpoHhasns7BrIloqCmFWt2gaUG+vaaOacP238=
Subject key identifier: 15:26:4D:3E:5B:FF:65:15:CB:12:70:AF:72:30:62:AC:46:77:B1:D8
Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Certificate serial: 02
Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FC8B2E86FEA711EDBC673B4BC4F9AE02.roa
Signing time: Tue 30 May 2023 05:08:17 +0000
ROA not before: Tue 30 May 2023 05:08:17 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 139330
IP address blocks: 103.42.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85
Validity
Not Before: May 30 05:08:17 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=647584c1-cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:e5:43:a7:d9:ca:33:e5:32:a2:08:8d:02:
b7:c8:75:38:76:32:a4:ca:76:e8:0b:ed:43:d4:29:
57:d2:98:cb:36:51:d6:be:a5:d2:89:78:25:d1:fb:
45:2a:15:25:e0:2a:0c:41:d2:b7:24:df:ab:54:70:
8f:8d:5b:7d:5b:66:17:dc:d2:97:3f:37:1f:34:92:
6c:b5:be:57:c1:1c:d9:e5:c6:3f:ba:a3:c2:46:57:
6b:27:18:6c:1e:bd:b3:7c:95:09:96:93:e1:dc:5b:
d5:ca:da:83:c3:fe:b0:f1:ac:91:e0:87:ee:98:60:
8c:28:16:c6:c2:e8:aa:73:07:32:98:0b:f3:ee:63:
96:c9:9a:c8:31:a8:4b:f2:7d:0f:df:c2:90:6e:c4:
e7:17:fc:18:cd:2f:c8:63:d3:d8:c0:10:fd:c5:f3:
dd:57:58:cb:2f:26:06:ab:d8:fa:71:b4:80:26:3c:
21:7d:8b:c3:d8:55:86:df:df:b7:c4:d6:f5:a8:b9:
ba:f7:64:a0:0e:5d:5a:97:7a:05:e8:8f:93:c7:00:
bc:c4:e8:9a:2f:0d:36:61:cb:c5:aa:cc:14:b4:7b:
bc:b1:7c:1b:6d:e7:58:b1:8d:06:05:fe:8f:bb:a4:
65:9e:b1:58:c4:43:3c:83:9c:01:1e:d0:d0:a1:ac:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:4D:3E:5B:FF:65:15:CB:12:70:AF:72:30:62:AC:46:77:B1:D8
X509v3 Authority Key Identifier:
keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/FC8B2E86FEA711EDBC673B4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:91:7c:20:57:a5:8c:0b:4d:c6:d8:7b:88:60:64:49:97:ad:
05:56:c5:83:4a:77:85:83:12:23:0c:5d:fb:04:21:d8:36:67:
de:07:4c:a8:7d:10:e2:64:0d:8e:99:db:fb:ca:e4:f1:c8:6c:
e8:72:25:25:7e:eb:18:3f:9e:11:db:20:4c:32:55:cd:27:a2:
0c:a1:3c:18:a0:21:5a:b0:1e:81:6a:89:03:c7:54:1d:96:42:
73:45:ef:3c:66:4d:3d:ef:e9:03:a6:cf:2b:01:9a:f2:44:12:
e0:31:06:97:75:21:ba:64:79:24:38:08:ff:5b:1c:ec:d2:c5:
21:e5:6d:d8:be:fa:be:2f:8e:a7:bc:52:7f:cb:59:34:b2:eb:
ca:20:d7:69:3d:24:eb:9d:8a:84:c5:14:8e:ab:64:b5:bd:d5:
96:87:af:69:2a:0a:25:09:54:8c:94:04:3e:cc:b0:23:7a:c0:
df:97:d5:28:dd:e6:60:b2:34:13:ad:55:59:8a:1f:1a:db:26:
c0:b4:52:22:ab:dc:b6:c3:5e:11:f5:50:3c:ac:da:2a:cc:8d:
e2:12:67:87:13:4f:c3:99:51:be:b4:98:69:0a:ea:03:64:69:
0b:3b:87:a5:f4:3b:59:0e:3d:82:5f:22:1c:da:1f:32:28:6c:
e7:94:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 12:11:02 2023 by rpki-client on console-fra.rpki-client.org