Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B13F378CFED511EDB175A954C4F9AE02.roa
File: B13F378CFED511EDB175A954C4F9AE02.roa (raw, json)
Hash identifier: mzd0B8L0TBJ0EELJvulBSMmRn74y4vypuUrpeCu3/Bs=
Subject key identifier: 7F:25:AF:E3:B7:E5:A9:05:44:63:3C:9E:5D:11:8E:36:7E:C0:5F:0B
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 03E2
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B13F378CFED511EDB175A954C4F9AE02.roa
Signing time: Tue 30 May 2023 10:35:27 +0000
ROA not before: Tue 30 May 2023 10:35:27 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 200482
IP address blocks: 103.231.58.0/24 maxlen: 24
103.231.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: May 30 10:35:27 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6475d16f-d1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:c2:54:9d:cb:1b:e8:f7:4c:1a:1f:63:d2:
a6:e3:76:45:58:b8:8a:5a:63:f8:0e:b8:60:01:d6:
0b:d2:77:f6:b5:4f:ed:f9:89:9c:f5:44:d4:7c:8b:
7b:d8:b8:10:65:63:23:50:a5:72:1d:87:d7:63:3e:
14:dd:91:22:94:13:49:fe:16:7b:af:ec:17:02:f9:
e5:0a:3f:69:7a:46:b3:2a:22:89:7a:7b:a6:07:b3:
e5:db:b2:fe:f0:83:d7:9c:25:5d:6c:76:50:36:2b:
21:ec:07:16:ab:c1:20:3a:d9:0b:a3:35:98:8e:83:
48:71:af:a4:4c:f3:c0:c0:ce:e7:df:a8:fe:49:31:
db:a4:c3:0f:81:36:e5:d8:22:72:94:f8:26:5e:07:
d7:c5:8c:e8:c2:c9:85:90:07:ef:64:f4:6f:83:ca:
ed:97:ae:b6:3b:bc:c6:b5:98:08:80:f8:68:e5:e0:
00:4f:23:cb:2d:a5:9f:34:6b:94:1b:1b:e4:62:3f:
1d:a3:7d:4f:92:78:8f:1f:cd:1b:28:80:38:5d:ec:
34:b0:eb:1e:cd:c4:ba:88:37:3e:c2:b7:a6:97:03:
bb:1c:b8:88:2d:82:a2:e3:cd:40:2f:3c:46:69:67:
59:70:bc:71:cd:3c:99:bf:ed:0c:2a:a3:95:f8:71:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:AF:E3:B7:E5:A9:05:44:63:3C:9E:5D:11:8E:36:7E:C0:5F:0B
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/B13F378CFED511EDB175A954C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.58.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:cc:0d:d5:39:0e:b4:91:69:96:7b:61:a5:cf:af:33:5c:fb:
c6:e5:91:8e:3b:b1:2b:d9:6b:34:76:d3:79:79:9a:32:7d:c1:
1d:ed:a1:00:c8:2a:dc:68:6e:a5:cf:f4:b4:bb:14:76:41:17:
17:d7:9c:94:15:09:bf:7e:f2:35:a2:ad:7c:d7:c2:5f:a7:ae:
ab:bd:65:79:89:62:4f:ce:3d:eb:4d:b5:d3:71:94:60:a3:fc:
9d:f3:6a:ee:7e:1a:ea:bf:2a:73:4f:0e:22:c8:8e:4a:6c:6f:
57:be:1a:5b:72:3d:76:f1:e9:34:d0:66:92:f8:09:d6:c3:b1:
fd:e4:d7:fd:99:ae:7f:b4:f7:8a:30:0f:01:17:22:a1:7d:ed:
45:c3:50:6b:1f:f3:43:36:ab:bb:1c:e4:bf:9c:43:2a:9e:df:
79:f4:ea:1f:76:c7:09:fe:c8:85:ef:00:c8:68:6b:80:b5:89:
9d:ec:f1:64:c1:9d:eb:3e:de:3e:3e:68:34:34:0b:c1:a2:07:
6c:26:57:a1:3a:7b:4b:32:99:de:40:95:39:5e:ca:21:94:c7:
a4:ec:30:2d:93:a9:8f:ca:f6:3d:ac:62:84:b0:20:a9:4f:5f:
78:2a:af:eb:d9:95:1b:19:b2:3b:c9:01:06:74:9d:e3:5f:d5:
e5:28:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org