Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/EA307830EEEA11EDBCF13A5EC4F9AE02.roa
File: EA307830EEEA11EDBCF13A5EC4F9AE02.roa (raw, json)
Hash identifier: 2mfp+1BchZ1IOOM43Vc0BZAbaUb7a3Ii8tNTMvpKxKE=
Subject key identifier: EE:2C:5A:D3:C8:C0:C9:DF:73:15:6F:64:7E:84:AE:54:D8:B9:49:50
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 61
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/EA307830EEEA11EDBCF13A5EC4F9AE02.roa
Signing time: Tue 19 Sep 2023 05:05:31 +0000
ROA not before: Tue 19 Sep 2023 05:05:31 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 140683
IP address blocks: 103.209.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Sep 19 05:05:31 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65092c1b-0008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:17:32:82:c0:d1:a9:bf:e1:49:fe:8f:7a:
16:48:ba:a9:af:1f:a4:a5:a6:6c:e6:5b:70:02:33:
06:92:42:75:87:e3:c1:8b:ff:4f:83:b0:b7:ba:d5:
e5:e0:ad:ed:5d:61:6c:a3:3a:88:87:0a:63:ba:3e:
0c:75:30:a3:dd:53:93:f0:d0:ec:58:9f:11:bb:56:
67:00:6b:64:fd:af:fd:df:be:27:47:c4:cb:b8:fe:
cc:1d:2c:4c:95:6b:ed:a6:30:61:a6:94:02:f9:de:
c1:3e:e0:67:00:37:28:ff:4e:19:c0:ca:09:9d:b1:
8c:89:bc:a6:b2:ea:e5:e3:8a:be:9a:b8:6d:d2:20:
7f:40:ea:04:7a:4c:9c:b1:50:2c:e5:8a:2b:da:67:
86:56:50:59:ae:a5:d7:6e:31:c4:82:08:98:d8:b4:
84:24:0e:16:22:73:1f:93:cd:0e:89:7d:fe:2c:47:
24:14:30:9a:0b:28:37:bd:a1:09:0f:cf:82:33:74:
f3:55:04:e3:8c:28:44:9c:9f:3d:72:ab:0d:58:25:
18:7a:a2:ef:24:7a:b5:f8:ea:6c:26:87:b2:64:f1:
f5:c7:89:62:1d:f2:c7:94:94:d9:f5:19:6f:b6:17:
d4:48:98:5f:eb:33:ab:6a:57:f7:05:0a:fa:4d:40:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:5A:D3:C8:C0:C9:DF:73:15:6F:64:7E:84:AE:54:D8:B9:49:50
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/EA307830EEEA11EDBCF13A5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:54:ad:e0:07:db:27:74:cb:8f:fd:c6:6b:7b:02:71:b7:3f:
a0:80:1c:08:a9:bd:88:fe:05:e5:f5:3d:9e:7b:ac:2d:ea:dc:
9d:91:06:e6:c4:d3:ae:4e:98:bf:d5:68:af:81:b9:7a:cd:5c:
fb:ad:50:7d:c3:4a:58:d7:bc:5f:8a:ef:b2:b3:34:3c:f4:0c:
58:db:c4:5e:1d:87:a7:15:e8:a6:0b:c3:52:42:ba:87:3c:67:
66:f2:9e:f3:20:f4:96:18:57:d7:1a:84:60:ce:f7:a0:3c:b6:
13:d8:dc:19:73:ee:05:c5:df:d4:7b:ee:ad:3b:61:84:1d:bb:
b7:fd:e3:f4:a9:a9:01:5d:c9:6b:5f:22:01:53:87:7d:d3:47:
d7:a0:a5:05:89:98:bd:d0:ef:1e:51:42:5e:40:09:57:50:d5:
82:98:76:4a:6e:ec:c5:46:34:32:cb:d5:2d:4b:ba:43:81:5f:
f8:d6:80:a1:80:59:6a:69:9b:34:89:26:36:41:3b:a0:e4:6c:
0a:a2:80:fc:19:09:f9:a9:ec:15:f6:33:f1:6e:90:ac:dc:d0:
d7:b2:cf:bf:cc:f6:af:42:df:f7:49:e4:22:5c:25:f3:7f:84:
b8:ee:23:cb:a7:70:5f:79:1f:4d:ba:9d:8f:6e:fc:8f:ea:63:
cd:a6:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:19 2024 by rpki-client on console-fra.rpki-client.org