Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/73A8DF285C9211EBAE499866C4F9AE02.roa
File: 73A8DF285C9211EBAE499866C4F9AE02.roa (raw, json)
Hash identifier: ZVBJeyEetDzsfPiEJNDCbtqdEQFe3uC/5sWgFw6ALFE=
Subject key identifier: B3:8D:8E:0F:A2:38:1F:00:16:4F:92:DC:32:F5:9B:77:CE:12:DA:A5
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 0623
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/73A8DF285C9211EBAE499866C4F9AE02.roa
Signing time: Tue 18 Jul 2023 22:39:35 +0000
ROA not before: Tue 18 Jul 2023 22:39:35 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 134520
IP address blocks: 103.42.212.0/24 maxlen: 24
103.42.213.0/24 maxlen: 24
103.42.214.0/24 maxlen: 24
103.42.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Jul 18 22:39:35 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64b714a7-6ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:d6:8c:e1:28:44:3c:9b:ca:de:d3:89:2d:
0e:8b:38:69:39:f7:80:ab:45:d1:99:9b:55:a3:46:
0e:16:ef:14:5a:6d:0c:d7:73:24:e3:02:af:ad:34:
22:5a:5c:34:04:8c:0a:25:2c:e0:76:07:4d:5f:15:
1c:80:a5:33:6c:48:23:ef:65:54:65:9e:26:c9:a9:
08:de:01:83:d6:30:7e:ed:37:63:9c:30:ad:3d:61:
58:0c:ac:51:7c:3b:f7:42:e0:38:70:8a:45:11:a7:
9a:21:8a:83:4d:67:dd:7f:99:f5:da:b6:66:59:b1:
58:8a:10:a8:3c:f9:04:b0:99:09:c4:df:c3:21:31:
9d:d7:d4:8a:7c:c9:d7:37:e5:b4:44:bf:01:aa:31:
12:2b:0a:17:de:a3:05:5e:26:a9:b0:17:f9:ca:af:
cc:f8:56:82:be:fd:c6:a9:71:ca:d1:3c:00:07:4b:
cf:df:54:e4:0e:d1:f4:64:17:52:a3:72:9e:b4:fd:
7d:2e:60:70:3b:b4:52:0c:4b:f2:95:c2:64:85:53:
3e:07:58:0a:22:d1:92:42:e7:82:6e:be:0d:3e:5b:
e6:41:cf:6a:f9:3a:76:c9:7b:36:86:8a:ba:50:16:
eb:98:b6:8f:8c:05:0e:7d:83:10:81:36:bd:6c:0a:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:8E:0F:A2:38:1F:00:16:4F:92:DC:32:F5:9B:77:CE:12:DA:A5
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/73A8DF285C9211EBAE499866C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.212.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:ee:0c:0f:47:e5:9c:a2:7d:af:ef:22:e9:f9:1d:ae:7b:54:
27:fe:b7:ed:36:9a:e6:f1:b4:91:7a:0c:ef:8b:82:3e:59:8c:
09:ec:72:68:66:29:92:28:d3:d7:5c:d7:20:83:ee:79:13:72:
3d:4c:19:ba:ad:cb:ee:f6:62:f2:f4:59:d3:90:fc:e3:76:34:
44:31:22:59:81:13:2c:f4:b6:1b:16:45:9f:b3:68:cb:4b:f9:
43:bf:dc:e2:16:4e:4b:18:63:4e:c2:d1:ba:91:04:15:52:84:
c1:03:42:66:f4:d5:31:94:3f:1d:e0:3c:31:90:5e:b8:c0:25:
05:d2:71:b7:c2:cc:e9:58:0b:e4:7e:68:e4:1b:ca:8b:fd:7a:
19:75:ce:fb:70:63:69:3a:7b:98:f8:10:13:19:26:b2:53:f6:
b2:d8:93:89:3d:8a:66:9e:0e:90:67:3b:8e:8f:68:f4:36:a3:
55:16:30:8c:2b:ff:f3:87:51:03:03:51:b2:c6:62:cf:28:1b:
cf:f0:01:91:ae:5a:58:72:4f:56:17:5a:69:f3:e2:30:dc:0f:
ca:8a:ca:af:b5:c4:2e:23:9f:b9:0e:fc:1f:d0:3e:5d:f1:c9:
c5:55:a2:f9:c5:43:6e:8b:35:4c:eb:74:6e:e8:38:9b:f2:aa:
72:9b:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 20:10:03 2023 by rpki-client on console-fra.rpki-client.org