Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/5A5A58324BEE11EEA17CCC80C4F9AE02.roa
File: 5A5A58324BEE11EEA17CCC80C4F9AE02.roa (raw, json)
Hash identifier: A2sirkcSOeVQV8lURnzhu8C4ba4i8TrhhFPyQ6dTlN8=
Subject key identifier: B8:85:86:2C:FA:6A:87:33:32:34:FD:86:1F:EC:6C:51:BE:9F:CD:2D
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 04CC
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/5A5A58324BEE11EEA17CCC80C4F9AE02.roa
Signing time: Tue 05 Sep 2023 13:15:59 +0000
ROA not before: Tue 05 Sep 2023 13:15:59 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 6134
IP address blocks: 103.30.76.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 5 13:15:59 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f72a0e-c8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:6b:5f:07:43:b9:d7:7e:37:82:93:74:ac:
c0:0f:2d:a3:d2:51:c4:4d:59:6d:7e:44:82:08:c1:
6c:b3:fa:f4:ec:9c:07:cf:34:f3:f5:01:13:95:0e:
d0:2c:f5:f8:72:16:b8:cb:6d:af:0d:ac:d4:66:74:
e0:69:f0:b0:ec:89:f6:61:81:c3:d0:10:d6:c2:b3:
b8:1f:1e:fa:86:61:03:d2:4d:9e:aa:d0:3c:87:b2:
e7:f5:9f:cd:22:3e:e5:ce:7b:a0:42:81:c9:8a:c2:
65:11:cf:25:bd:ae:15:60:29:bf:93:c3:3d:51:5e:
af:d0:51:a2:75:0c:74:6d:66:a3:86:84:38:43:ab:
8e:9d:dc:3f:b8:2d:79:4d:d2:84:e0:8c:0a:93:ac:
92:17:0b:41:cb:3f:e5:b9:16:1f:e1:0b:ce:b0:50:
c5:f8:64:5a:a1:b5:80:6b:b0:02:c2:b7:eb:c9:98:
72:20:76:97:cf:c0:d2:6b:33:1c:83:0b:2d:88:cb:
08:b0:2e:87:88:01:c4:ef:99:75:50:c9:53:be:da:
0d:3e:47:3c:c6:f8:0a:73:d7:d6:ae:a7:ed:7e:fb:
48:64:91:e9:51:2a:71:ea:f0:6b:71:fc:7e:00:a0:
e6:4c:d4:2f:39:cc:4c:81:e6:be:18:55:e4:f3:69:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:86:2C:FA:6A:87:33:32:34:FD:86:1F:EC:6C:51:BE:9F:CD:2D
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/5A5A58324BEE11EEA17CCC80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.76.0/22
Signature Algorithm: sha256WithRSAEncryption
80:15:09:d0:f0:f2:34:e6:2d:8c:a4:b6:14:42:4b:78:e8:2b:
00:b8:0d:d1:8d:6c:6f:92:bd:5e:db:a0:25:84:5b:80:64:99:
fd:76:e0:76:2e:70:42:0a:cd:78:df:3e:6c:88:c5:43:84:9e:
a7:3b:88:e9:a7:46:c2:19:13:88:cc:ec:2a:24:ac:f9:10:cd:
fa:a2:0c:09:bc:8e:23:35:a2:45:75:a2:15:5b:05:13:b4:6c:
13:09:35:1b:91:22:67:c1:1d:bc:8b:be:74:57:83:8c:ac:61:
a0:4f:3e:b0:f7:7e:d7:81:f8:c2:cf:ff:0b:af:bf:a1:da:83:
f4:8a:af:29:32:85:cc:2f:ab:25:d4:b3:35:ea:58:e1:79:be:
f3:77:ed:d9:83:b3:17:97:92:a1:db:bd:b1:57:e4:06:e6:8f:
82:53:92:b0:c4:92:31:08:ac:c3:77:a3:b6:d7:f6:bc:1b:59:
0b:65:7f:6c:ee:70:01:3b:8b:0d:6f:e7:d5:3d:9e:27:14:52:
09:6c:19:ea:8f:14:e0:64:44:4e:e4:34:70:06:02:a1:fa:43:
35:7a:ae:2a:52:4a:9e:31:6c:02:a9:9a:bb:c2:77:be:62:3c:
cd:9b:b6:65:d9:ec:30:a2:ef:72:61:96:87:e5:f8:41:2e:e5:
9f:1e:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 23:04:05 2023 by rpki-client on console-ams.rpki-client.org