Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/E99BE922EEEA11EDBCF13A5EC4F9AE02.roa
File: E99BE922EEEA11EDBCF13A5EC4F9AE02.roa (raw, json)
Hash identifier: Nz0DOnkp6sojhLFSihmzTDYrA0T/GDs8Hw7idO0Pq44=
Subject key identifier: 4E:45:E1:E4:0A:B3:5E:7B:E2:3F:E0:2C:D1:28:3E:C2:A6:DF:56:9F
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 5F
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/E99BE922EEEA11EDBCF13A5EC4F9AE02.roa
Signing time: Tue 19 Sep 2023 05:05:29 +0000
ROA not before: Tue 19 Sep 2023 05:05:29 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 135097
IP address blocks: 103.209.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Sep 19 05:05:29 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65092c19-536e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:3a:8b:e3:ab:5b:c9:5e:63:1f:38:fa:36:
1d:9e:9a:5f:87:95:53:42:0f:24:a3:d5:cd:e2:8f:
b8:28:5c:6c:4f:ad:28:05:a5:04:26:9c:96:08:99:
10:03:df:07:6f:dc:12:3d:98:8b:53:31:84:c8:bb:
29:5e:a2:1d:65:33:92:4f:c8:8a:47:93:a1:dd:13:
dc:b5:03:ab:c9:ca:f5:37:d8:d2:27:7f:1d:8a:4d:
e9:05:af:cf:3c:62:85:d5:98:d9:12:49:5f:cd:53:
04:bb:ae:d1:a0:4f:ee:ba:91:0b:ae:60:2d:9d:51:
67:34:02:27:c9:09:63:ad:ef:32:66:94:30:8c:ac:
24:f3:d7:fa:44:f5:38:b2:1e:a7:5c:c0:51:49:ec:
24:e0:ce:56:8b:00:d3:51:6c:19:43:ea:69:e9:21:
a0:fb:f6:6e:1f:9d:51:2e:96:98:f3:c0:c6:66:83:
fb:e0:91:61:d9:84:51:67:e4:d1:34:79:10:c1:68:
d0:43:19:82:9a:d2:c2:75:99:f4:01:4d:2c:ce:dd:
a9:e1:cd:81:9c:74:64:c5:1a:7d:dd:ec:c8:89:a6:
51:bd:2d:1c:d0:93:b1:05:01:b1:03:1d:6d:ae:ce:
02:cb:20:48:fd:f3:ba:c3:11:cb:fb:51:67:3f:09:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:45:E1:E4:0A:B3:5E:7B:E2:3F:E0:2C:D1:28:3E:C2:A6:DF:56:9F
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/E99BE922EEEA11EDBCF13A5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:32:31:10:0f:25:ca:dd:ab:41:40:13:75:b3:7c:9e:99:d4:
dc:c0:7e:19:5c:3d:c6:9e:c1:cf:0d:38:c9:1b:d3:70:30:95:
ce:45:29:8d:ec:f6:8b:94:37:37:08:ef:d1:6d:ea:5b:44:29:
c2:19:33:81:c1:ec:aa:ea:5a:b0:eb:68:2e:65:e8:72:07:d2:
ab:3d:ae:5a:69:19:a7:7c:3c:ea:8c:9d:29:51:b8:64:92:e0:
19:db:12:ae:aa:fb:26:60:a7:95:50:64:0c:a1:13:d6:27:cf:
07:19:cd:48:07:8e:fc:1a:f7:49:ea:97:26:31:38:08:08:bf:
d1:74:e4:e8:a3:1f:ac:c9:5a:b3:7f:91:8e:21:ff:4d:3e:e7:
f1:42:ad:b5:aa:a8:20:89:d5:0b:97:c1:83:4b:f0:36:1d:64:
ff:d4:10:d0:2e:92:32:70:a2:8d:69:17:ec:0c:fa:66:05:75:
66:6c:05:a9:23:0a:ae:ce:a0:73:de:2f:f2:33:fe:8e:68:42:
bd:01:d0:3a:76:a3:3e:4e:a1:ac:7b:2f:96:d7:23:b6:4f:6b:
38:58:82:d9:d6:32:a9:e5:8b:94:9f:1a:15:79:21:06:f3:a6:
72:bb:81:34:72:07:f6:f7:a1:d2:de:ef:dd:96:78:5e:7a:60:
dd:b5:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:19 2024 by rpki-client on console-fra.rpki-client.org