Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/BCE33FD028F411EAABBBA468C4F9AE02.roa
File: BCE33FD028F411EAABBBA468C4F9AE02.roa (raw, json)
Hash identifier: 8uslGrVFVjiAzsRl5ZHn5SuPkYp3tacjY2EKIM2uDnY=
Subject key identifier: AC:C6:E5:F2:2E:F2:6E:C5:5D:B6:AE:4D:3F:4A:DE:FA:13:F3:A6:59
Certificate issuer: /CN=A9162B3A/serialNumber=C5430E246D38781E266A18D641510FB99FB623A7
Certificate serial: 09E2
Authority key identifier: C5:43:0E:24:6D:38:78:1E:26:6A:18:D6:41:51:0F:B9:9F:B6:23:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMOJG04eB4mahjWQVEPuZ-2I6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/BCE33FD028F411EAABBBA468C4F9AE02.roa
Signing time: Thu 02 Feb 2023 21:07:29 +0000
ROA not before: Thu 02 Feb 2023 21:07:29 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 32708
IP address blocks: 103.108.188.0/23 maxlen: 23
103.108.188.0/24 maxlen: 24
103.108.189.0/24 maxlen: 24
103.115.204.0/23 maxlen: 23
103.115.204.0/24 maxlen: 24
103.115.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2530 (0x9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162B3A/serialNumber=C5430E246D38781E266A18D641510FB99FB623A7
Validity
Not Before: Feb 2 21:07:29 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63dc2610-d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:cc:97:f2:22:89:ad:ef:58:85:2c:09:79:
09:72:63:03:86:2e:81:99:9d:2b:25:77:47:7d:93:
8c:c8:8f:b2:26:d9:2b:9a:20:38:64:4b:06:b6:e1:
d0:7b:d0:41:aa:e5:47:7e:15:ff:05:e3:7a:b5:a8:
45:25:58:1a:69:96:36:ea:76:33:89:76:a9:b1:24:
df:be:17:b6:c8:21:13:f6:72:f4:05:9b:37:7d:45:
31:75:e5:56:2b:03:1d:a3:30:87:56:8a:35:a5:25:
3d:bb:89:0d:06:89:4c:d8:65:75:39:74:9f:6d:2c:
82:70:d4:a5:2d:68:61:63:e2:e4:ec:ef:b0:2d:78:
2b:b0:fc:2e:77:7f:70:9d:3b:90:41:d7:e6:39:9a:
e2:09:06:78:df:5d:a1:d0:a2:2a:de:50:6e:7f:e8:
e9:34:c3:81:10:62:60:ce:ec:cf:47:65:04:a4:ec:
5e:b4:9b:e9:20:dd:ed:30:0e:20:e8:eb:c8:8d:18:
04:8c:e2:d5:17:e0:aa:8f:45:33:64:7b:f1:82:19:
5e:ba:6b:9a:4f:f3:06:aa:a2:80:ad:ae:5e:48:8b:
1b:13:c7:20:f3:91:45:27:ba:b1:6b:23:61:e9:36:
06:40:d1:bd:67:b0:a4:0e:15:f2:9d:8a:64:1c:32:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:E5:F2:2E:F2:6E:C5:5D:B6:AE:4D:3F:4A:DE:FA:13:F3:A6:59
X509v3 Authority Key Identifier:
keyid:C5:43:0E:24:6D:38:78:1E:26:6A:18:D6:41:51:0F:B9:9F:B6:23:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/xUMOJG04eB4mahjWQVEPuZ-2I6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMOJG04eB4mahjWQVEPuZ-2I6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B3A/00945B1628F411EA9A6D0168C4F9AE02/BCE33FD028F411EAABBBA468C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.188.0/23
103.115.204.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c0:e3:d7:e3:32:7d:41:39:7d:aa:05:91:96:5f:61:7e:ae:
ee:0d:63:f8:ca:46:d7:9b:a3:36:50:51:e3:31:6d:30:c9:c5:
52:c0:ad:e9:8c:2e:90:fe:fd:4b:01:67:49:4d:fc:47:ee:28:
c2:d3:93:08:34:38:19:bc:3b:29:c8:77:fd:90:74:a1:88:81:
c7:17:af:de:b8:05:7e:95:5f:4c:2c:7c:1c:cc:9d:96:a7:a6:
44:10:84:de:95:1c:32:9c:bd:14:72:b0:54:d1:40:3f:2a:60:
7f:5a:8b:71:bc:a9:58:19:d2:fa:5a:b6:9d:4e:a9:a7:0b:45:
bc:26:95:66:f9:d8:1b:25:e1:b9:a2:e5:5c:56:ad:e7:55:9b:
74:2d:1f:45:28:75:7f:3b:2b:c8:17:ea:4d:05:70:bc:f0:89:
c2:de:30:26:66:e1:a2:3c:e0:ea:fa:0f:e5:71:8f:7a:67:7f:
12:cf:80:8a:2a:88:c0:a6:6e:97:88:f3:d0:c1:fa:81:21:c2:
f9:c3:5b:91:78:38:f3:f5:29:93:72:e3:d2:e1:de:3c:09:53:
f0:cf:9e:63:a5:9f:a0:5d:b6:ed:65:54:24:e1:65:9f:99:75:
c0:12:e5:c2:8b:d0:c3:ab:d1:55:f9:f4:02:96:9c:cc:2c:ab:
94:a7:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 16:05:03 2023 by rpki-client on console-ams.rpki-client.org