Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/3A4254D00A5511EEBCBC9A6CC4F9AE02.roa
File: 3A4254D00A5511EEBCBC9A6CC4F9AE02.roa (raw, json)
Hash identifier: Ubzzw2GJd5ionyYUcmLaPyYtgftt6v7jNcCfNPzye3w=
Subject key identifier: 3C:CA:C2:A9:76:50:B3:43:FE:3B:8B:5A:0A:31:C8:A8:78:B2:CC:C8
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 0F
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/3A4254D00A5511EEBCBC9A6CC4F9AE02.roa
Signing time: Sat 01 Jul 2023 05:13:52 +0000
ROA not before: Sat 01 Jul 2023 05:13:52 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 51722
IP address blocks: 103.92.144.0/24 maxlen: 24
103.92.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Jul 1 05:13:52 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649fb610-53b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:d2:0d:8b:97:d1:c9:a0:cf:ea:58:b8:70:
44:c5:00:2e:de:a1:1f:14:dc:d8:df:7f:03:a0:7b:
f8:77:d9:b3:9a:ad:fd:42:c3:42:21:0c:19:d7:2f:
f8:32:1d:57:bb:af:0e:eb:fc:90:47:c1:ae:37:9d:
01:64:6e:dd:af:b0:fd:0f:e7:f7:dc:08:0a:3b:87:
0e:e6:43:9a:24:7f:1f:16:44:fc:38:4f:c7:8b:93:
a8:35:c2:fa:87:89:4d:f1:52:e8:09:12:7c:d6:f7:
35:36:6d:e1:aa:8e:82:da:49:3f:7d:f6:0e:e9:03:
77:b9:af:8f:49:4c:46:e0:7e:03:c9:72:9b:fb:ab:
50:72:ef:12:ed:b5:36:79:cd:03:ed:53:80:2b:cc:
d6:af:12:64:ea:43:68:19:82:47:d7:db:b6:8b:ac:
2f:0b:e1:a9:0c:ff:05:80:d6:62:3a:db:4c:1b:8f:
23:38:bb:ba:00:38:50:0c:73:37:99:2c:8a:e1:3b:
95:ce:5d:bd:6d:5c:20:6b:dc:ea:b5:d1:c2:de:e8:
89:dd:40:d6:9d:0a:1a:e6:22:30:ba:8a:98:cd:8b:
90:df:d4:80:ea:24:3b:12:f4:0c:a9:10:da:26:b5:
09:10:6f:63:40:25:a8:09:08:3b:3e:96:e2:c5:e4:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:C2:A9:76:50:B3:43:FE:3B:8B:5A:0A:31:C8:A8:78:B2:CC:C8
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/3A4254D00A5511EEBCBC9A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.144.0/24
103.92.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a5:56:88:28:2c:2a:5e:b3:03:f8:12:da:3f:56:07:16:f3:
4d:bc:d6:10:6c:9d:0e:42:83:dd:11:36:ec:3c:9f:30:9a:d2:
94:9a:62:ad:d8:92:77:6f:0c:cf:c7:8b:68:f3:1c:3a:74:ee:
14:b5:89:b4:e3:2c:99:21:c1:02:52:2b:7e:eb:23:ef:f2:bf:
19:67:69:61:a8:8c:09:49:c3:4c:c5:e2:54:62:83:f0:c3:96:
6c:da:fd:be:da:06:52:40:63:96:2c:32:7b:96:c9:d1:20:c4:
a1:d4:25:08:fa:a9:78:6b:01:4b:5f:59:83:2b:3a:ee:a2:65:
91:0f:8e:f8:2d:0c:6d:d8:c7:a3:d0:31:33:1f:81:bd:3f:2a:
c7:51:8d:54:a8:08:fc:61:bb:d8:22:d2:f5:5b:e0:af:d2:6e:
5f:76:8c:45:93:0f:9b:77:76:54:42:30:92:48:2e:10:89:d8:
0b:ed:d1:5e:71:ec:fb:3f:9c:8a:cb:04:91:be:63:29:96:22:
86:66:31:88:fc:2c:a4:4b:bf:79:2f:7e:73:27:ab:96:86:63:
3c:c7:d4:95:37:9d:e3:41:65:30:96:17:7a:0b:d7:9a:c7:2d:
61:4a:3a:da:fe:1c:6d:f5:4d:38:2e:81:a6:af:95:6f:76:6e:
ce:ce:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 10:36:17 2023 by rpki-client on console-fra.rpki-client.org