Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/354F714A60C911EE9A3D5D64C4F9AE02.roa
File: 354F714A60C911EE9A3D5D64C4F9AE02.roa (raw, json)
Hash identifier: pnSWNHWvIHLUCcvv6goxkzQpHLUjTq1kKE2HutVKIls=
Subject key identifier: 36:AB:D8:A3:2A:0E:FB:63:9E:40:D3:C0:FD:B2:E7:64:DB:11:B6:26
Certificate issuer: /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial: F2
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/354F714A60C911EE9A3D5D64C4F9AE02.roa
Signing time: Mon 02 Oct 2023 02:12:59 +0000
ROA not before: Mon 02 Oct 2023 02:12:59 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 7586
IP address blocks: 103.1.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Validity
Not Before: Oct 2 02:12:59 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=651a272b-7158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:07:8a:04:35:88:d8:e1:4a:f9:13:13:5a:
99:8a:4f:5f:c4:93:27:3c:a5:94:fa:f4:a4:b2:0f:
df:3f:2d:aa:61:cd:26:c7:49:9f:f8:88:79:2d:19:
db:1f:54:7a:b2:83:52:ab:6e:d7:73:ec:fe:38:70:
88:5e:5c:12:d5:9b:b4:2e:f9:80:2e:cf:a3:34:fa:
09:39:b9:19:a4:82:33:10:03:44:bc:19:73:51:d9:
38:83:91:b4:fd:96:2f:a9:5c:1d:fc:d7:e8:66:5d:
35:cd:d5:1b:8a:61:63:8d:c7:15:a8:ab:89:bd:e1:
73:eb:4e:f9:7f:c9:45:7a:90:3b:57:e9:e9:e4:36:
21:36:a4:63:3d:ec:4b:1d:28:85:01:28:94:f4:63:
ee:d0:74:89:38:70:7f:6e:69:40:6f:a2:39:11:01:
41:35:05:60:ae:68:23:2e:cd:60:8a:df:8e:09:b9:
85:06:0f:a7:d4:c3:55:5b:12:45:45:f1:6d:8b:dd:
d9:4f:97:ba:bd:47:e8:2e:f4:c8:2f:99:d5:ec:04:
d0:c0:81:26:65:e0:c5:da:a4:56:47:92:6b:5f:0b:
d9:cb:ea:b8:ab:ab:6d:ac:31:9f:2d:2e:80:44:8b:
73:88:1e:57:48:7c:89:ef:87:5a:ce:8b:87:bc:fa:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:D8:A3:2A:0E:FB:63:9E:40:D3:C0:FD:B2:E7:64:DB:11:B6:26
X509v3 Authority Key Identifier:
keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/354F714A60C911EE9A3D5D64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.158.0/24
Signature Algorithm: sha256WithRSAEncryption
83:40:18:1b:68:c4:fb:17:74:9b:53:c8:af:21:f9:92:99:60:
df:ed:32:d0:25:a6:e9:41:dd:e4:c4:ff:ef:f5:50:8e:2d:bb:
31:40:13:22:32:0d:bb:1b:13:c2:3a:aa:8b:2f:f2:27:f3:cc:
6a:58:0f:de:e0:bf:04:46:f3:17:93:e9:d0:84:8e:11:a0:9b:
bc:b8:35:6f:8c:8e:a1:28:9e:15:e5:e2:d4:a6:90:dc:54:64:
85:49:1a:55:56:be:fb:a9:33:6f:70:35:e8:32:9a:ba:e6:30:
2a:53:bc:4c:ac:2e:9e:ef:7d:5d:46:6e:f6:d4:ba:b6:8b:a4:
39:e8:bd:e6:73:d3:6e:70:35:b1:21:bf:52:b8:2b:a2:d1:df:
1a:48:67:63:5d:a0:48:96:3d:d2:5b:bf:76:6b:8a:30:c1:49:
b6:73:66:1a:81:34:ed:db:f7:4a:50:37:94:71:ae:79:12:0e:
b2:f9:c7:a0:8f:54:57:75:3b:4c:80:1a:46:c1:f1:2b:69:d6:
15:68:d6:9a:6f:2d:ae:4b:8b:e5:f8:d9:58:4d:06:e3:47:73:
f4:fd:ea:73:c7:5f:f9:22:0b:b4:e1:92:24:ae:4c:d0:ca:30:
fd:d2:12:9c:0a:26:82:53:3d:ed:39:7a:2d:b2:6e:5d:9d:0c:
ec:7a:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 05:05:09 2023 by rpki-client on console-ams.rpki-client.org