Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/178949BE8C6A11EB91832D52C4F9AE02.roa
File: 178949BE8C6A11EB91832D52C4F9AE02.roa (raw, json)
Hash identifier: WmxpAa5Q4O6CfypWPSLSYTp/RBvkaLTVdJLM4LtsKxU=
Subject key identifier: C8:62:3E:56:B2:BB:E5:75:88:2D:D9:A4:97:07:39:49:AD:2D:FD:F5
Certificate issuer: /CN=A913128C/serialNumber=141028051870364BD139C60B562CBAA47BFFB9DB
Certificate serial: 0484
Authority key identifier: 14:10:28:05:18:70:36:4B:D1:39:C6:0B:56:2C:BA:A4:7B:FF:B9:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBAoBRhwNkvROcYLViy6pHv_uds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/178949BE8C6A11EB91832D52C4F9AE02.roa
Signing time: Fri 23 Dec 2022 01:41:29 +0000
ROA not before: Fri 23 Dec 2022 01:41:29 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138379
IP address blocks: 103.131.221.0/24 maxlen: 24
103.145.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913128C/serialNumber=141028051870364BD139C60B562CBAA47BFFB9DB
Validity
Not Before: Dec 23 01:41:29 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a50748-dcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:72:3d:c6:70:06:cf:f1:f0:0a:80:fe:a4:
13:f7:ca:9a:6d:6f:f4:72:c3:f1:da:0e:13:cb:2a:
b7:21:82:47:fe:46:68:59:da:0b:fe:0a:88:a8:f4:
c5:63:d7:51:a4:0a:d5:63:76:ef:d6:30:34:16:0a:
e0:0e:2d:2f:2b:fa:5f:74:39:d3:32:24:76:28:12:
ed:05:64:0f:3e:7e:25:1e:16:0d:39:13:be:f7:32:
e9:85:db:fd:92:b6:88:d0:05:77:bd:bd:fa:b1:1a:
f0:25:ba:8d:c2:1d:82:4e:d7:3b:4e:65:92:22:66:
4a:47:16:20:a3:2a:db:e4:b7:8a:74:49:8d:f2:77:
84:88:74:1b:ba:7b:56:07:4a:ad:fb:f5:90:50:9d:
eb:72:42:77:09:d8:1a:c2:9d:36:c9:fd:da:db:5c:
e8:e4:5b:40:94:81:66:3c:8a:c5:f0:94:30:48:0c:
8d:6d:eb:7d:55:95:04:03:cd:ca:c0:ab:24:ab:04:
13:b7:96:26:d1:eb:a2:0d:bb:86:f0:69:43:16:b4:
2c:f0:8f:13:87:e8:7c:10:31:98:5c:93:a1:01:81:
1b:4c:24:5a:f0:3e:f9:f3:ff:03:06:a7:b0:62:9f:
93:1d:42:02:2d:7d:b4:a5:39:81:b2:65:48:3d:8e:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:3E:56:B2:BB:E5:75:88:2D:D9:A4:97:07:39:49:AD:2D:FD:F5
X509v3 Authority Key Identifier:
keyid:14:10:28:05:18:70:36:4B:D1:39:C6:0B:56:2C:BA:A4:7B:FF:B9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/FBAoBRhwNkvROcYLViy6pHv_uds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBAoBRhwNkvROcYLViy6pHv_uds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913128C/92E2C4F88C6711EBA61A8A3EC4F9AE02/178949BE8C6A11EB91832D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.221.0/24
103.145.159.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e6:b8:7b:b5:83:34:06:ee:be:23:07:75:0f:22:7e:68:e0:
63:1b:16:d8:34:97:76:0f:80:fd:64:bc:be:46:d1:d5:30:8b:
83:bf:f7:01:67:98:50:ee:f4:de:07:85:d1:0d:b5:2b:24:8c:
54:49:36:0c:be:e9:4c:b7:23:e0:c1:23:e5:87:27:95:5c:75:
67:7c:96:79:46:a4:71:67:0b:0b:c5:75:27:18:2b:7a:f4:78:
64:2a:cb:a4:83:b8:18:d2:ea:88:7c:d5:15:c6:a0:39:1a:15:
b1:74:a0:87:8f:cf:2e:c0:41:80:6c:99:92:dd:fd:8b:21:ec:
35:66:75:ed:43:98:d9:da:45:7e:ac:6c:64:bf:d8:8a:8a:a4:
e6:54:7b:1d:d5:0e:d0:6f:94:d5:b2:b9:e9:d3:40:aa:2c:6e:
d3:20:ec:a1:35:f8:fa:a5:80:37:fc:0f:0c:03:72:79:be:fc:
40:f4:2a:fb:fa:5a:a3:47:99:b6:4b:e1:bd:c5:ba:36:b3:ee:
ed:0a:ea:4d:34:7b:32:eb:08:ab:fd:2e:92:32:2a:50:54:68:
2c:b0:6a:e1:6d:04:12:6f:bc:53:5d:f8:d5:13:05:f2:6c:1d:
02:79:b7:e7:87:08:76:20:56:db:9f:5e:48:41:a1:09:e7:b2:
59:c9:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 07:44:29 2023 by rpki-client on console-fra.rpki-client.org