Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/34BC16C8DDBD11ED80796D6EC4F9AE02.roa
File: 34BC16C8DDBD11ED80796D6EC4F9AE02.roa (raw, json)
Hash identifier: c3xNHJ2ktMehp5L76kFWGK4mlhfHGzQLsyat0dxKl84=
Subject key identifier: B2:1F:E9:84:CC:BD:21:C5:E0:A7:DD:AA:B9:84:A7:FE:2E:70:4B:9B
Certificate issuer: /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial: 02
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/34BC16C8DDBD11ED80796D6EC4F9AE02.roa
Signing time: Tue 18 Apr 2023 07:47:02 +0000
ROA not before: Tue 18 Apr 2023 07:47:02 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 140036
IP address blocks: 103.132.42.0/23 maxlen: 23
103.132.42.0/24 maxlen: 24
103.132.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Validity
Not Before: Apr 18 07:47:02 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=643e4af6-e89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:86:7d:1e:6e:f5:4a:eb:bc:49:0b:1b:05:
ca:0f:ac:7c:0b:19:91:f9:fe:19:14:77:ec:d4:54:
48:69:89:7f:ba:51:9b:9e:2c:ea:4c:dd:49:ea:bd:
72:e2:f9:bf:0a:37:9a:8f:8b:47:03:97:59:3a:a9:
ea:45:af:65:6b:d6:2b:fb:4b:05:63:3c:b4:73:22:
6f:91:c5:60:f0:6e:cc:a3:28:d1:8e:f8:a2:ee:9a:
36:14:f8:c2:21:1e:b1:bb:77:3d:9c:25:b9:e8:5c:
d2:6e:42:f1:e6:a0:81:3c:6e:25:97:d5:53:b9:2e:
03:b0:9c:dc:fa:55:e4:ff:b5:9a:61:0b:31:fe:2b:
47:fa:59:d6:ca:17:99:86:a0:df:85:aa:7e:58:77:
1d:b5:25:f3:48:cd:4f:ea:ab:41:13:54:78:ab:00:
5f:dc:1e:9d:9c:e3:28:5d:2b:1c:b1:58:48:99:b6:
4e:ce:f0:94:6a:c5:6f:0a:28:0b:a5:54:ea:48:43:
39:40:34:05:2d:9a:2f:10:b9:2f:97:28:93:f1:17:
6a:f0:14:a4:ab:e6:d6:04:89:0d:73:c4:1c:88:29:
5c:45:b4:cb:8f:c2:16:0b:0e:a2:2c:bf:24:8d:bc:
f9:2b:d6:75:2e:6d:38:47:c3:09:42:5f:0c:db:9f:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:E9:84:CC:BD:21:C5:E0:A7:DD:AA:B9:84:A7:FE:2E:70:4B:9B
X509v3 Authority Key Identifier:
keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/34BC16C8DDBD11ED80796D6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:63:60:66:0f:b8:db:55:6d:39:1c:88:c3:fb:d0:0e:9b:e5:
6a:7b:88:a4:af:53:54:e0:4d:8e:15:80:37:04:4a:7a:78:d8:
f0:cb:3c:9c:9d:a8:2e:4d:eb:eb:d7:76:ca:6d:30:0c:3e:fd:
11:e1:06:53:cf:f9:62:a5:2e:95:ee:34:53:d9:73:bd:d4:8b:
7b:21:43:4b:55:6b:52:05:4c:95:19:e3:16:ac:fe:cf:75:5a:
75:4e:97:32:18:3c:b5:06:a8:cf:51:ef:ac:b3:99:eb:5b:37:
17:61:e6:6c:22:01:02:f1:e5:d7:c5:51:77:44:a2:16:87:c4:
4a:49:70:4c:b0:f5:ef:76:bf:02:b0:1f:63:51:ed:fc:f2:9e:
2e:ab:76:e6:8f:f9:98:4d:ae:11:72:9a:1f:92:bf:ea:a2:83:
cb:a6:29:98:a5:21:05:d9:07:1e:8e:d8:a7:87:84:3e:f5:58:
cc:40:86:66:b7:ac:35:f1:ca:c3:d6:8b:6d:a6:d0:ca:7a:3a:
cd:47:9f:db:e2:54:14:30:33:c1:f4:60:be:b1:27:e5:ec:9e:
5d:21:0d:ba:b7:fe:8a:99:b1:0d:29:79:f8:d8:1d:ef:c0:fb:
44:77:0d:5d:50:69:06:88:58:ce:9f:d2:67:e2:e9:f4:2a:1c:
f5:d1:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-ams.rpki-client.org