Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/7C7D2B84BB2011ECAB080E31C4F9AE02.roa
File: 7C7D2B84BB2011ECAB080E31C4F9AE02.roa (raw, json)
Hash identifier: s4slfJ4fHTiNQ3ahHKQwyahvPd3Lb9EJ7WzxgJ2y8tM=
Subject key identifier: 6C:17:68:FF:6B:44:7B:15:AB:98:51:66:7B:2A:05:DF:1D:9E:60:3F
Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Certificate serial: 019F
Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/7C7D2B84BB2011ECAB080E31C4F9AE02.roa
Signing time: Fri 03 Feb 2023 05:34:15 +0000
ROA not before: Fri 03 Feb 2023 05:34:15 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 149426
IP address blocks: 103.179.58.0/24 maxlen: 24
103.179.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Validity
Not Before: Feb 3 05:34:15 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63dc9cd6-4192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:4f:dd:0b:99:6b:6f:df:20:04:47:44:8e:
44:55:aa:dc:6c:e3:da:94:d2:c2:5b:fc:c9:86:cb:
2e:27:17:27:b4:7e:3d:59:ca:7c:bc:4f:2a:d1:1d:
79:69:4a:80:7e:f5:de:7e:77:b9:df:23:53:c3:cf:
17:9c:d7:81:a5:2d:e4:84:32:0e:57:e2:0a:8f:da:
cd:c4:c1:2e:79:af:cf:1c:c3:82:6c:df:5f:6a:07:
b9:0b:95:db:38:4d:65:b3:ba:21:6a:b3:17:77:e7:
0d:6a:6d:22:fc:f0:36:44:d5:01:44:64:4d:a7:a1:
26:2c:72:b3:0f:95:f1:56:26:b5:cf:03:8b:c5:22:
45:4f:4f:46:79:d7:a8:88:8c:7d:75:f2:22:2c:80:
37:33:19:ab:76:d0:ad:e5:2a:3a:ac:be:47:2a:1e:
f0:2d:14:a7:9a:7c:9a:87:0b:f2:68:19:38:dd:c8:
d3:82:db:21:c3:0b:aa:c3:1d:1c:f4:16:88:c8:80:
59:a0:85:bf:bf:a2:26:90:ee:39:b2:a1:3c:c3:a0:
db:f3:71:b1:d5:88:d8:c6:61:6a:fc:4b:be:15:e8:
6d:32:40:1e:94:3b:d8:ba:eb:c7:95:8e:d1:81:91:
36:20:ab:e1:94:df:e0:d4:30:5f:53:04:0c:25:ca:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:17:68:FF:6B:44:7B:15:AB:98:51:66:7B:2A:05:DF:1D:9E:60:3F
X509v3 Authority Key Identifier:
keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/7C7D2B84BB2011ECAB080E31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.58.0/23
Signature Algorithm: sha256WithRSAEncryption
59:00:6a:42:38:7a:75:b7:dc:15:90:b0:e3:21:e1:39:c3:c0:
32:05:53:c5:21:34:00:ce:75:12:1a:85:ca:7b:b3:f0:1a:ec:
94:63:74:92:05:3a:0e:f5:05:ee:32:62:ce:32:63:ab:b5:74:
93:dc:f8:32:09:bb:d2:24:e7:46:6a:12:5a:20:46:93:47:4a:
47:06:56:1a:38:3c:59:70:ca:e3:1a:19:f2:a6:06:0c:11:ec:
cf:21:02:46:ac:12:cb:5c:94:7e:c3:2b:ef:b1:14:a7:ca:c1:
ba:a6:f8:7e:83:bf:13:35:f9:5d:af:1d:b1:d5:f4:49:12:85:
20:2d:b3:d6:16:ef:a6:1b:53:7a:64:3f:1d:69:3c:c2:22:38:
6d:87:db:00:7f:3f:0e:66:a9:22:12:90:0d:49:45:21:0c:9e:
0c:11:ef:dc:fb:9e:65:2b:d7:eb:55:a7:1d:7c:42:1e:b4:5a:
c3:36:cd:3b:33:37:1e:d0:5e:90:10:5b:7f:7a:0e:ee:f7:d3:
1b:6b:13:c1:9a:f6:93:0c:ae:9b:1d:89:0e:ce:9a:8c:f9:07:
b5:c1:89:f9:7b:ca:eb:46:80:c4:62:36:15:95:43:61:5b:a5:
7e:3b:37:4b:65:d7:83:a6:4f:eb:6d:35:2d:60:fc:88:93:f1:
bd:ac:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org