Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/F740BB1E553D11EB8AE96174C4F9AE02.roa
File: F740BB1E553D11EB8AE96174C4F9AE02.roa (raw, json)
Hash identifier: iZ/OFDxo33JjpVwIx38xyGRbK9vmULhKwSqb9i3djdE=
Subject key identifier: 73:EC:FF:88:02:B7:3C:20:18:0E:36:2E:B6:E9:35:30:53:C9:BE:AC
Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Certificate serial: 0DD5
Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/F740BB1E553D11EB8AE96174C4F9AE02.roa
Signing time: Thu 30 Nov 2023 18:46:06 +0000
ROA not before: Thu 30 Nov 2023 18:46:06 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 57844
IP address blocks: 103.243.162.0/24 maxlen: 24
103.243.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3541 (0xdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Validity
Not Before: Nov 30 18:46:06 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6568d86e-5563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:9e:2f:88:20:64:f4:d7:53:28:ff:7b:f3:
d7:e6:19:ed:ab:da:e8:ae:79:61:82:2d:60:6a:71:
23:82:a5:e1:28:c0:c6:2b:b8:0d:49:cc:97:de:6f:
5a:2e:8b:99:42:49:73:97:f8:59:6e:bf:5d:2a:48:
de:67:a7:ad:23:2a:39:1a:1c:2f:e9:a9:c9:f1:ed:
c1:ea:0e:ef:5e:a0:4f:02:54:ec:fb:09:2d:10:f8:
d6:29:e6:66:f8:b7:b9:31:ee:c5:c2:e0:ee:73:92:
aa:42:e0:36:d7:cf:b5:60:e2:47:b9:56:09:3e:93:
ee:bb:40:3c:d7:33:6f:f4:41:5c:b9:ed:7f:e9:38:
b5:e4:57:b1:96:3f:2b:58:0e:5f:6e:eb:c0:3f:c8:
3e:c0:e6:3e:c8:31:a7:3c:09:49:92:5c:2e:74:f0:
5f:a2:ef:02:c7:c4:36:8f:5b:23:c1:51:f6:16:96:
3c:1d:1f:e6:67:df:a6:fb:98:0d:9a:27:94:3a:dd:
80:75:16:b3:ff:3e:9e:b0:52:89:4f:97:dd:e7:4f:
67:df:17:51:ad:96:2b:31:75:5c:37:fa:66:25:96:
e3:b8:65:a7:5f:0f:7e:69:c5:d8:50:ae:8b:3d:1e:
4d:6a:14:fd:f0:a6:40:00:5a:1a:1d:e9:bd:92:0a:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:FF:88:02:B7:3C:20:18:0E:36:2E:B6:E9:35:30:53:C9:BE:AC
X509v3 Authority Key Identifier:
keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/F740BB1E553D11EB8AE96174C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.162.0/23
Signature Algorithm: sha256WithRSAEncryption
20:cc:3d:77:84:cf:5a:ec:74:b3:36:77:ef:c1:82:e5:91:19:
33:bd:ca:e0:7e:a8:90:39:57:14:86:ba:75:a4:8b:c4:01:6b:
13:e3:d0:c1:0b:dd:b5:cd:24:09:fd:b6:c2:59:01:73:1d:3b:
1b:9f:a7:34:bd:fe:5f:44:11:f6:7b:ff:a3:07:e1:31:3b:18:
a8:e0:14:34:74:86:a6:d6:d7:40:d3:88:bc:59:9c:cf:6d:82:
21:f8:1d:1f:0f:5f:74:5e:22:fc:a7:61:db:3a:ac:b6:3f:d4:
0d:03:e6:91:90:a5:e6:4f:87:8e:0f:b5:32:17:a6:6b:eb:50:
95:0f:1f:b1:5b:07:05:65:da:93:8d:16:00:b2:74:c1:42:4a:
d1:c6:24:b2:92:b4:c1:0b:f4:5e:2d:42:ab:22:bc:b8:c1:b8:
70:40:b9:f1:2b:d2:2e:4e:19:c1:58:22:20:ff:64:e7:1d:44:
41:a3:7c:b8:ab:52:eb:23:b8:63:0c:98:ec:40:b7:a3:54:9c:
92:eb:69:99:cf:f3:12:7b:49:0a:9b:7d:fa:46:b2:da:1a:9f:
58:57:f4:6c:ff:9c:7d:24:b6:90:f1:56:90:dc:08:f8:34:43:
cf:5e:fe:2f:3a:66:31:df:76:33:6c:2f:6d:3b:c7:eb:b3:80:
bc:a9:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 00:41:04 2023 by rpki-client on console-fra.rpki-client.org