Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/A1907D1ECAB011EC843D6C55C4F9AE02.roa
File: A1907D1ECAB011EC843D6C55C4F9AE02.roa (raw, json)
Hash identifier: zNFAq8iaXkERrdTMVN43E/DYD49LsPw5LpzKRNRF+lE=
Subject key identifier: BE:3C:FF:60:FF:49:03:D3:F8:45:89:85:81:71:B9:21:D7:F5:3C:8A
Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial: 0278
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/A1907D1ECAB011EC843D6C55C4F9AE02.roa
Signing time: Thu 30 Nov 2023 12:38:11 +0000
ROA not before: Thu 30 Nov 2023 12:38:11 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 138161
IP address blocks: 103.121.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Validity
Not Before: Nov 30 12:38:11 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65688233-2902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:4b:d4:8b:54:86:e0:e7:69:20:ce:64:b3:
0b:a9:77:db:33:0d:c4:b0:a9:a9:f7:4d:bc:87:9b:
91:92:c6:25:d5:2e:18:50:61:f8:b3:8c:6e:63:b1:
65:1b:3e:af:44:4a:ba:cf:8d:53:61:ad:0c:21:59:
e5:ee:d0:7a:d3:54:30:08:c5:37:26:0d:5f:f5:9c:
7a:d1:f6:83:a6:74:c6:01:2e:8c:56:12:5d:67:14:
ab:5e:11:61:41:d5:bd:95:4b:fa:0c:bd:c5:e1:c9:
75:36:85:9e:e2:a9:13:c8:65:08:e4:82:3d:6c:c2:
09:55:d2:51:0b:27:b6:4b:b2:33:52:32:41:ae:7d:
75:e5:89:a6:1e:97:95:38:10:7b:2b:1c:5b:82:19:
3c:c0:ec:de:36:9d:03:41:b6:ec:d8:c7:50:90:da:
8b:1b:30:1c:f3:a7:4e:cd:2e:7a:ae:62:ab:58:26:
d9:e2:06:5c:33:f3:b9:11:1f:21:93:c7:6b:b1:62:
0a:7d:62:0e:7e:e4:d3:2e:31:3d:a3:55:2f:e6:03:
1e:16:9b:1e:bb:98:7f:be:72:e1:dd:0b:fe:99:a0:
55:b9:77:b7:4f:b3:5c:4d:48:61:1b:fd:99:cb:1e:
2a:5e:a5:cd:74:20:63:2a:6c:bd:8f:13:c4:0f:d8:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:FF:60:FF:49:03:D3:F8:45:89:85:81:71:B9:21:D7:F5:3C:8A
X509v3 Authority Key Identifier:
keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/A1907D1ECAB011EC843D6C55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:93:33:02:f9:44:37:4f:c5:b5:5e:a8:a5:79:c6:2e:66:5f:
9a:8c:46:d3:51:73:80:9d:91:c4:32:1f:87:27:34:77:1c:fc:
12:41:91:7d:2d:7c:48:6d:46:92:22:1c:00:ff:b7:20:88:3d:
db:61:a2:d9:3f:c7:ef:42:cf:b4:90:0e:32:f9:bf:ba:de:7a:
cc:c6:aa:0e:2d:cb:27:18:1c:26:42:c5:ce:9f:bc:71:1a:17:
c1:d3:3e:89:d7:85:bf:31:ac:76:51:d3:ae:91:8f:0d:1b:67:
c3:ac:57:1e:a2:95:73:2d:35:71:b2:31:0b:98:4a:79:14:62:
04:29:b3:a1:4c:40:47:3c:1c:46:e2:d8:5b:7a:8d:fd:6e:90:
0f:0c:99:b3:75:93:75:46:3d:c7:7b:a9:4a:c1:9e:e3:96:40:
43:ed:a3:80:3d:05:e9:88:40:51:6d:27:be:c4:66:94:cf:55:
c8:66:55:63:ed:9e:d0:c8:e6:e1:7a:8f:52:69:db:5a:18:58:
57:1f:75:b6:cb:0a:34:5a:55:cb:40:22:81:54:52:fe:ee:ce:
1e:16:e9:cf:02:48:9e:e7:60:66:32:ae:82:f1:eb:3d:84:1d:
37:75:e3:8c:53:e4:fa:7a:2c:00:9d:a4:f5:09:dd:ab:f1:18:
4d:f3:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 06:59:54 2023 by rpki-client on console-fra.rpki-client.org