Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/83BD1B0E8EA611EB9DE62D3FC4F9AE02.roa
File: 83BD1B0E8EA611EB9DE62D3FC4F9AE02.roa (raw, json)
Hash identifier: yZBXP8QEdZR30PwfkJdO1eUALuRMo0x61xzhZ+vVvxQ=
Subject key identifier: B3:EF:6F:24:E6:DB:2C:C0:CC:D4:A8:CB:49:EC:00:47:59:EF:9C:D7
Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Certificate serial: 06AE
Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/83BD1B0E8EA611EB9DE62D3FC4F9AE02.roa
Signing time: Wed 31 Aug 2022 10:38:22 +0000
ROA not before: Wed 31 Aug 2022 10:38:22 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 55707
IP address blocks: 103.1.108.0/22 maxlen: 22
103.1.108.0/24 maxlen: 24
103.1.109.0/24 maxlen: 24
103.1.110.0/24 maxlen: 24
103.1.111.0/24 maxlen: 24
103.23.104.0/23 maxlen: 24
103.23.106.0/23 maxlen: 24
163.47.252.0/22 maxlen: 24
203.31.114.0/23 maxlen: 24
223.25.112.0/21 maxlen: 21
223.25.114.0/24 maxlen: 24
223.25.115.0/24 maxlen: 24
223.25.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C
Validity
Not Before: Aug 31 10:38:22 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=630f3a1e-677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:1e:68:d8:a6:60:2f:16:67:1c:57:6f:37:
1f:0a:40:d6:2f:da:28:7d:ed:42:cc:7a:b0:f8:07:
70:e5:dc:ad:b7:5f:b1:3c:0e:b6:99:80:74:78:6e:
9e:13:46:59:03:6e:ac:56:2f:f9:91:a4:46:67:ce:
7f:4a:a9:c4:2d:5b:05:8c:cb:15:de:7d:b5:64:22:
f1:ca:68:8a:92:a5:4a:38:13:49:01:55:09:08:58:
6d:cd:19:2a:ac:e3:56:a0:d9:15:ff:44:c2:27:f4:
58:d2:d3:8e:36:6e:ff:d6:51:10:93:8a:f0:b1:10:
8d:71:da:1c:aa:34:33:d0:27:df:4c:89:6a:d5:a6:
4e:48:34:62:bc:7d:c2:dc:2e:2d:cd:71:e4:2a:e1:
6e:19:de:03:7f:a9:db:70:35:3b:b3:11:1a:8c:d4:
6f:73:fe:a9:da:bd:59:99:82:75:bb:e1:a2:b9:8c:
f2:54:4c:d4:e0:c6:1f:13:34:53:ba:27:3a:a1:e0:
e4:ce:f3:9e:77:dc:19:48:f7:69:0c:6d:98:40:df:
16:50:20:33:b5:e7:ff:66:73:e9:6c:69:c0:bc:f1:
14:69:d7:27:a3:c0:63:97:49:8d:df:29:0c:6b:c6:
10:01:d8:79:42:2c:33:2b:d3:b0:06:d7:0c:c0:34:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:6F:24:E6:DB:2C:C0:CC:D4:A8:CB:49:EC:00:47:59:EF:9C:D7
X509v3 Authority Key Identifier:
keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/83BD1B0E8EA611EB9DE62D3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.108.0/22
103.23.104.0/22
163.47.252.0/22
203.31.114.0/23
223.25.112.0/21
Signature Algorithm: sha256WithRSAEncryption
85:2b:41:01:75:10:25:1a:89:0a:4d:ac:8e:5b:64:a8:b0:f8:
13:2b:9f:a2:b9:1e:5c:af:99:60:b6:27:55:3b:a5:31:b2:51:
8b:c5:27:6a:ae:9e:97:5f:80:f1:87:9d:fd:c3:fd:6e:9b:76:
db:53:94:41:20:01:2c:fc:02:6b:55:6a:df:9d:49:43:f1:5f:
11:74:95:d3:42:c1:23:62:26:ed:e3:3f:19:4a:c3:d6:d1:16:
bf:dc:ff:a5:6e:b3:0f:23:44:07:52:9d:9d:77:80:8f:ff:8d:
44:c5:7d:b3:bf:54:5a:9f:75:94:5d:e1:9c:38:18:ba:83:70:
c4:cf:08:df:51:c2:e5:6a:b6:0e:05:ea:de:fb:48:f2:50:e0:
99:58:ec:e0:b6:56:97:ae:58:d6:ee:b2:67:f7:d1:65:12:35:
3d:6c:cd:b8:6c:b9:87:f3:69:87:43:93:84:2c:0f:be:0f:0d:
c4:13:da:b7:52:73:a9:38:5a:ee:b9:dc:f0:9e:b3:eb:01:60:
47:33:02:f5:5a:1b:a3:20:d7:2c:5f:a2:c2:7f:5b:cf:2d:fc:
ac:e2:41:3d:8a:e8:94:58:b4:03:bb:db:53:e1:02:ef:ce:c7:
d3:31:6c:15:47:19:60:d7:49:43:68:63:47:ec:8c:68:9d:de:
4e:23:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org