Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/C068B98C595411EBA5B09785C4F9AE02.roa
File: C068B98C595411EBA5B09785C4F9AE02.roa (raw, json)
Hash identifier: att6ehuFJPJ/oIHhLGOUnHDntR8ruRLST1se9b06rp8=
Subject key identifier: BD:9C:D7:20:C2:D4:F8:17:18:F6:BB:01:41:CC:66:0B:67:70:D4:E6
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 04F8
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/C068B98C595411EBA5B09785C4F9AE02.roa
Signing time: Fri 25 Nov 2022 02:50:35 +0000
ROA not before: Fri 25 Nov 2022 02:50:35 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 133044
IP address blocks: 103.99.101.0/24 maxlen: 24
103.242.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Nov 25 02:50:35 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63802d7b-6c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:76:35:f8:c6:a9:19:d8:e1:a6:7c:ad:e4:
80:d3:82:9e:fc:7c:52:0e:16:67:28:92:25:bc:55:
01:08:e5:6d:6a:0d:8f:e3:53:54:38:a8:57:24:65:
39:23:ba:a5:eb:0f:f0:3c:80:97:df:b2:ca:c9:cd:
98:64:ea:84:71:7e:0d:62:26:04:86:4e:8f:83:56:
7b:f7:cb:61:c5:cd:39:42:df:22:d4:bc:8c:91:bc:
66:96:78:ed:26:a9:f5:43:47:d6:5e:e0:d1:a8:bb:
ad:1f:43:d7:47:a3:c9:b9:93:b1:a1:ed:1c:32:22:
a3:5a:99:76:08:01:67:5a:7b:13:2a:d1:61:5c:03:
83:b5:c6:79:41:1e:c6:dd:27:84:cf:2c:80:e4:7e:
75:e9:25:e8:4d:59:50:88:7b:6d:69:98:1f:46:82:
23:73:0b:8f:a0:64:a8:54:ce:64:9c:e0:37:f9:f3:
71:70:e5:ca:b9:f9:86:43:83:5e:e6:73:5e:c5:e8:
0b:ae:58:01:7c:7a:0c:80:4e:32:69:99:a3:2f:18:
80:04:36:8e:00:40:2c:55:70:4d:56:ec:39:76:d4:
6e:0a:a7:c8:a9:44:17:44:17:02:5c:87:1f:2e:df:
23:a0:ac:af:53:b8:85:12:42:82:1b:dc:02:34:ca:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:D7:20:C2:D4:F8:17:18:F6:BB:01:41:CC:66:0B:67:70:D4:E6
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/C068B98C595411EBA5B09785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.101.0/24
103.242.49.0/24
Signature Algorithm: sha256WithRSAEncryption
71:15:ce:5f:7d:7c:39:d4:e6:4e:56:44:97:59:35:4d:00:21:
b3:03:08:8a:4b:90:56:d1:ab:79:c0:af:e3:7a:31:3e:8e:1d:
1b:d2:06:fb:d7:61:7e:9b:75:fb:0b:7f:a2:3f:40:74:e1:f5:
11:1b:7a:03:00:8e:22:4f:f3:39:ae:63:97:3d:c3:34:31:3d:
56:07:bb:8b:7d:9b:bb:12:08:0d:a0:9e:5d:a2:a2:01:5c:35:
77:84:59:83:3b:5c:30:6f:4a:85:e7:a4:35:22:bb:14:12:74:
75:07:e1:09:ec:aa:14:39:43:00:49:d9:5f:47:f6:9e:05:88:
f6:67:a8:c1:19:e6:a0:cf:2f:f1:03:3f:ee:66:f1:a0:1c:ed:
4b:e8:74:2e:f7:13:b1:07:88:23:57:5f:40:b2:6b:96:05:be:
9f:31:6d:15:81:a9:65:3a:29:ec:bd:a3:e3:fe:1d:c7:ad:1e:
91:8f:fa:52:bb:65:8c:78:34:45:5e:f5:60:6a:16:c2:62:2b:
6e:9d:2b:c1:25:0d:e8:ef:9d:97:38:2b:a2:e0:5e:c8:ec:ba:
8f:a2:c8:d9:0d:56:c7:4f:e5:32:0e:e4:0e:17:b3:40:1a:1a:
7c:83:a0:72:3c:c9:ab:10:4c:ce:80:9f:33:24:fa:74:b0:3c:
fa:6b:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org