Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/A2B72AFCBD9F11EDA1909C3EC4F9AE02.roa
File: A2B72AFCBD9F11EDA1909C3EC4F9AE02.roa (raw, json)
Hash identifier: URU0a4OHFlI52vNnH/pahytuHEsWjLhlMTWVqNiPdcA=
Subject key identifier: 40:88:C2:4E:80:66:4C:DD:33:62:FB:96:BF:A4:B0:AB:39:D3:B2:41
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 46
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/A2B72AFCBD9F11EDA1909C3EC4F9AE02.roa
Signing time: Wed 08 Mar 2023 10:54:45 +0000
ROA not before: Wed 08 Mar 2023 10:54:45 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 23607
IP address blocks: 103.23.252.0/24 maxlen: 24
103.23.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: Mar 8 10:54:45 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64086974-7c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:31:cf:35:31:c4:c2:94:25:bd:62:3b:f0:
78:90:17:d3:65:30:35:b8:d6:30:28:54:0a:98:d1:
0f:37:7c:70:e7:75:09:e7:1a:aa:90:32:9f:1f:7a:
7b:f3:53:20:7e:f7:80:25:95:0d:3e:76:05:45:3f:
3d:5c:63:16:67:a4:cd:c2:73:c4:e2:1e:1d:4f:2a:
d3:fb:84:5a:0d:a1:55:1e:40:17:f4:90:3a:72:ab:
96:bb:60:9d:44:e4:9e:40:eb:ce:0a:00:46:6b:10:
a8:3f:d7:68:04:ef:50:a3:7d:d3:02:e6:e7:e1:09:
6c:63:be:f0:57:6e:1a:64:2a:2c:2a:09:ee:ba:7c:
37:76:61:66:3b:ff:25:d4:34:51:bb:fc:04:46:65:
a0:11:27:29:ee:60:1a:89:72:87:74:fd:0d:aa:5a:
1a:e6:56:92:3a:40:40:57:c5:f6:c3:13:56:1d:18:
a0:cb:1a:88:da:9b:ea:f0:43:ae:c2:a8:2a:6e:68:
1d:f4:69:95:ec:02:02:58:f0:a8:59:17:b4:b9:6e:
d7:82:be:3b:82:c6:9a:37:fb:85:8a:5b:6c:4b:6e:
ed:a2:ea:1c:e5:11:e6:5f:79:d7:32:58:45:2b:3e:
bb:5b:9c:b4:94:83:5b:35:49:e3:d5:9e:23:4e:e2:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:C2:4E:80:66:4C:DD:33:62:FB:96:BF:A4:B0:AB:39:D3:B2:41
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/A2B72AFCBD9F11EDA1909C3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.252.0/23
Signature Algorithm: sha256WithRSAEncryption
55:f2:9a:9e:ec:60:11:df:96:a2:08:3e:26:6b:4f:f8:f6:3b:
00:de:70:16:8d:7b:7b:2e:9a:48:f4:74:1e:b6:f3:4b:e1:21:
32:5b:8b:4c:e3:fb:d5:7a:53:2f:e2:b5:44:a6:76:27:d1:f0:
fa:4a:b9:fe:d9:f8:1b:eb:1b:af:b9:95:a8:dd:f6:1f:d7:f8:
bb:94:53:74:31:3e:43:6f:43:63:5b:35:a8:0e:93:e3:e6:f1:
f5:ea:4e:c6:7b:68:f7:d9:a0:99:ce:69:34:2c:c3:1b:21:41:
d1:d1:31:da:bd:11:af:c5:b1:6f:27:d2:9f:be:a5:75:e9:89:
a3:23:57:f3:20:b0:ba:1f:69:ed:a7:9c:20:ca:0d:08:e2:dd:
10:80:6a:80:be:89:cf:9b:20:13:b4:9d:f1:76:41:e2:e8:d6:
f5:6c:61:0d:76:22:3b:ba:cb:87:23:eb:b7:9e:c7:d4:be:ef:
1a:56:eb:c6:93:df:e5:9b:c9:f5:0f:7e:f2:0c:01:b8:f8:7a:
af:4c:1c:77:9b:49:3d:9b:d1:10:bb:8b:89:73:30:c2:52:5a:
63:8d:83:36:c3:40:e6:d8:08:b2:2d:ca:50:bc:79:8e:fa:4a:
80:a9:34:03:44:49:42:33:1f:4b:1b:ed:e5:86:74:19:c4:94:
8a:be:f9:9b
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 2 14:15:47 2023 by rpki-client on console-fra.rpki-client.org