Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C54B592E63E611EE95F7000FC4F9AE02.roa
File: C54B592E63E611EE95F7000FC4F9AE02.roa (raw, json)
Hash identifier: C8i0BCLRnJ+UEX3WEAE/7voFvoGyqnHAfNbqxTNsYm0=
Subject key identifier: C9:3E:77:4D:A0:31:E9:E0:E0:63:4C:97:23:4F:F8:F1:45:F3:7E:74
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 52
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C54B592E63E611EE95F7000FC4F9AE02.roa
Signing time: Fri 06 Oct 2023 01:22:10 +0000
ROA not before: Fri 06 Oct 2023 01:22:10 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 400377
IP address blocks: 103.92.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Oct 6 01:22:10 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=651f6142-707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:2e:8f:4e:51:bf:6e:69:53:29:93:ff:3a:
db:7a:2d:22:ee:04:e8:1c:3f:18:95:5d:a2:f8:7c:
c2:37:08:73:d5:4a:b7:76:3d:d9:4a:44:65:3a:c8:
3f:b9:b0:18:04:a5:b3:b2:ce:da:dc:d6:0a:13:dd:
5c:af:be:80:33:a1:1c:dd:f6:70:2a:ae:29:45:18:
ce:86:86:d1:df:14:48:a2:0b:78:86:ce:11:3e:79:
51:47:0f:24:da:42:9e:d4:7c:3a:ed:bd:5d:9f:ff:
a4:26:9a:f4:b1:93:f4:55:a1:bb:1e:fd:bb:15:54:
7d:63:fa:04:fc:66:da:3f:c4:91:b3:3b:ff:d2:a3:
a1:9a:40:bc:80:30:02:dd:c3:74:6c:58:35:a7:0a:
b6:cb:eb:3e:2e:3f:d2:66:a0:b7:c5:54:b0:4a:55:
20:d7:e5:0b:77:b4:39:e3:aa:ff:ed:9b:18:10:23:
3b:5d:1e:c1:ba:cb:27:5d:45:6d:31:e2:fc:f8:92:
31:56:4e:e9:7c:e1:cf:94:f5:42:94:0b:ad:b8:36:
67:4c:3b:ce:f1:d6:06:2e:6a:13:ee:31:9f:95:28:
ed:a9:55:40:d1:df:58:d7:8e:84:f8:99:15:9f:8c:
ad:0b:76:58:d6:b2:d4:42:41:ff:c9:d1:3a:52:f7:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:77:4D:A0:31:E9:E0:E0:63:4C:97:23:4F:F8:F1:45:F3:7E:74
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/C54B592E63E611EE95F7000FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:e3:8c:4f:89:b2:08:10:d8:f9:d3:26:3d:ce:69:38:b3:1d:
d0:b0:80:ed:cf:91:9c:6d:cb:6b:1b:1d:c3:29:d8:46:ba:0c:
13:5d:ba:81:81:9c:91:a0:56:3b:93:ba:46:28:80:1f:34:1c:
19:f2:f0:85:b0:77:51:0b:c2:5d:3c:ed:4f:9c:03:60:3c:31:
14:42:5f:26:bf:2d:3d:6c:8b:b8:50:32:c9:53:e4:d5:83:9e:
89:7f:f7:42:83:cd:9e:23:f1:86:be:2c:2b:91:04:68:c3:8f:
e0:33:21:94:1e:82:71:07:e0:9b:43:7f:d0:3c:e7:fa:26:7c:
35:a8:4f:c4:70:3c:7f:a5:44:52:0c:8e:5f:10:bd:9f:ae:e5:
a4:99:e9:77:3c:20:b8:ef:d7:2f:7e:03:3b:11:fc:39:a3:36:
bd:1a:ce:9f:48:69:1a:76:f8:f2:6b:e3:f4:13:e8:fb:89:fe:
f1:8c:b4:34:c8:a9:6a:3e:ee:fe:ff:26:ab:42:7f:63:cf:35:
3c:33:b7:43:1d:a1:ac:f0:63:33:09:26:a4:c8:4f:36:b9:90:
c2:43:ec:60:18:92:3e:63:b9:94:07:fd:11:60:d4:0f:76:db:
65:e4:b5:5e:b8:67:11:22:78:51:ad:e2:60:ee:a6:65:f9:72:
33:00:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 04:37:23 2023 by rpki-client on console-fra.rpki-client.org