Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/F1292B9C1F7411E78A000033C4F9AE02.roa
File: F1292B9C1F7411E78A000033C4F9AE02.roa (raw, json)
Hash identifier: yLftZq7EhlpMnMSCk2V6LiqF9DXZqZ2GfMt4Jf32PKg=
Subject key identifier: 17:9B:12:A8:28:9D:63:3B:87:4F:9B:CC:1B:B8:29:BA:34:84:F9:4D
Certificate issuer: /CN=A912FF6A/serialNumber=3CB0B8300C51D0691EE609B1E8FDD650B929C631
Certificate serial: 19FC
Authority key identifier: 3C:B0:B8:30:0C:51:D0:69:1E:E6:09:B1:E8:FD:D6:50:B9:29:C6:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLC4MAxR0Gke5gmx6P3WULkpxjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/F1292B9C1F7411E78A000033C4F9AE02.roa
Signing time: Tue 31 Oct 2023 17:04:01 +0000
ROA not before: Tue 31 Oct 2023 17:04:01 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 134785
IP address blocks: 103.9.176.0/22 maxlen: 22
103.9.176.0/24 maxlen: 24
103.9.177.0/24 maxlen: 24
103.9.178.0/24 maxlen: 24
103.9.179.0/24 maxlen: 24
103.71.136.0/22 maxlen: 22
103.71.136.0/24 maxlen: 24
103.71.137.0/24 maxlen: 24
103.71.138.0/24 maxlen: 24
103.71.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6652 (0x19fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6A/serialNumber=3CB0B8300C51D0691EE609B1E8FDD650B929C631
Validity
Not Before: Oct 31 17:04:01 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65413381-7e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:58:a1:7f:6f:c9:af:43:33:4b:9c:0c:03:
22:52:f9:a8:41:b6:0d:a8:6b:d9:f6:9e:2a:a7:74:
7e:15:c3:5e:d4:77:d2:92:11:56:5b:56:9d:a7:65:
c1:dd:9d:6f:75:eb:3e:ff:21:09:9c:83:63:86:b9:
17:5b:a2:95:cb:ff:7a:c6:79:a9:45:c4:72:cb:74:
3b:75:7a:8c:b0:e0:86:ae:04:63:51:8a:c6:5b:df:
50:29:5f:55:08:d0:90:d3:4a:b4:af:1a:bf:f5:76:
de:4e:0b:a9:20:e4:84:79:b9:30:1d:d5:c1:26:92:
82:63:13:4e:45:fa:38:98:67:c5:65:5b:d7:55:91:
87:d6:47:aa:a2:ac:d0:d7:71:f7:2a:80:d1:8a:cf:
4b:54:53:74:73:29:48:a2:eb:c0:17:7c:36:2d:3d:
aa:6c:4c:fb:a2:c3:69:3e:97:33:32:f3:18:d9:0a:
08:34:11:b2:1d:1f:55:ba:fa:92:aa:de:31:8f:9c:
8b:42:d3:8c:91:9f:89:73:0e:24:4c:a0:fd:6e:8a:
a0:6a:22:73:6d:34:ec:4d:a4:e5:ab:fa:fe:f8:6d:
0b:ac:92:d1:93:be:31:d8:87:26:0d:1c:a2:08:de:
38:1f:7a:5c:7b:f5:48:a1:a1:c5:63:22:8a:3d:cd:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9B:12:A8:28:9D:63:3B:87:4F:9B:CC:1B:B8:29:BA:34:84:F9:4D
X509v3 Authority Key Identifier:
keyid:3C:B0:B8:30:0C:51:D0:69:1E:E6:09:B1:E8:FD:D6:50:B9:29:C6:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/PLC4MAxR0Gke5gmx6P3WULkpxjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLC4MAxR0Gke5gmx6P3WULkpxjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/F1292B9C1F7411E78A000033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.176.0/22
103.71.136.0/22
Signature Algorithm: sha256WithRSAEncryption
65:5f:b9:02:de:2b:80:b5:33:26:a5:5e:78:02:33:81:02:67:
1e:6c:61:b9:a2:bd:0b:21:95:79:f6:e3:47:10:d5:89:7f:55:
29:fa:dc:6c:55:76:ee:19:54:90:08:9c:75:bc:8f:d8:e6:b6:
fb:38:1a:4a:c3:61:6f:fb:86:93:60:7e:41:c9:72:ac:eb:ee:
d8:ff:4d:a4:a8:01:d1:a7:e2:93:98:51:1f:83:a0:d3:1f:b5:
84:be:f9:9b:3e:0c:1b:12:78:a5:a9:74:45:de:08:85:97:b0:
58:e5:f9:1b:75:4c:bf:05:54:ad:64:9c:63:63:6e:02:a6:9b:
8b:77:8e:d6:5b:76:49:eb:f0:91:4a:64:62:00:2a:b2:66:66:
4a:27:3d:e1:f9:4a:f2:f0:82:ae:64:a4:0f:20:6f:c3:17:c3:
cf:b3:45:a8:8a:9f:c5:5f:dd:a9:3f:a7:d6:4a:26:77:72:ec:
1c:43:be:f6:e6:1f:eb:46:42:ff:12:f5:39:92:1b:86:fb:8a:
01:76:ec:82:44:ef:ba:be:8a:b4:31:25:6e:72:34:50:04:3b:
b4:48:b9:02:c7:ef:ed:c4:df:fc:90:0d:8e:89:9c:91:fa:fa:
cf:7b:9b:41:1e:91:ad:19:a6:d0:b3:5e:53:e2:59:fb:f4:d2:
9c:2a:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 09:30:57 2023 by rpki-client on console-fra.rpki-client.org