Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/E48926C4C3C611ED8419AA64C4F9AE02.roa
File: E48926C4C3C611ED8419AA64C4F9AE02.roa (raw, json)
Hash identifier: TjL8xdICsuyd+E6s0NPWSQAD2TklvQNnkB8LVU+ybUE=
Subject key identifier: C1:EE:C8:66:91:AC:B9:A9:57:C3:CE:5D:D2:4E:9B:79:86:94:E6:DD
Certificate issuer: /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial: 04E4
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/E48926C4C3C611ED8419AA64C4F9AE02.roa
Signing time: Thu 16 Mar 2023 06:50:52 +0000
ROA not before: Thu 16 Mar 2023 06:50:52 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 133441
IP address blocks: 103.151.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Validity
Not Before: Mar 16 06:50:52 2023 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6412bc4c-3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:49:ec:6d:b2:20:e6:52:b3:74:77:d3:0c:
6b:7f:15:41:2e:d0:6b:40:e6:8f:d6:0e:db:57:cc:
64:0f:8c:dc:2c:2c:8c:8e:d1:47:0a:56:c9:27:fb:
bc:87:5d:ea:3c:2c:19:21:f7:f1:b6:9e:02:33:cf:
67:33:6f:6a:7c:06:ee:13:70:a6:6b:f2:88:44:cf:
77:df:1e:cd:38:df:99:28:32:d8:59:ef:8e:71:26:
18:46:cb:fc:02:50:a9:ba:e8:44:e1:61:a1:57:b6:
2e:c8:6f:96:84:14:4a:6e:ad:6b:5a:df:fe:3d:dd:
47:10:9b:f5:28:38:af:c9:e6:ce:4d:de:33:60:26:
2b:42:f4:94:82:1b:b0:1c:2d:b4:e4:49:29:3b:34:
f8:86:e0:a6:49:54:b0:b2:9e:86:1f:3d:14:48:34:
ff:9e:9a:70:73:04:7b:c7:91:51:f6:bd:7e:56:26:
ef:c4:a0:08:1b:85:68:39:b6:81:5f:3b:84:20:fd:
95:41:27:f9:ce:22:1c:4d:80:fd:40:6f:12:b2:bf:
8c:68:49:60:27:e4:e0:3d:b0:2a:b1:60:95:2b:6d:
b0:d3:eb:58:ea:e0:1f:d8:aa:e7:b6:1d:ab:85:36:
f4:b1:4a:db:ea:31:ce:00:0f:ba:3c:b8:2c:ee:2e:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:C8:66:91:AC:B9:A9:57:C3:CE:5D:D2:4E:9B:79:86:94:E6:DD
X509v3 Authority Key Identifier:
keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/E48926C4C3C611ED8419AA64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1e:bf:98:60:d9:37:f5:56:61:42:04:51:94:78:c9:e6:c4:
19:dd:ed:1b:6b:77:9f:ec:fb:15:2e:1c:2e:e5:03:f5:80:c1:
52:f8:64:b9:52:10:40:82:bf:bb:25:a2:73:15:b2:8a:9f:dc:
82:85:db:74:1a:6c:67:bb:f3:2e:7d:ac:11:6d:d8:f3:f6:72:
0d:16:14:33:9b:40:fa:cc:7d:5e:c9:03:40:11:26:96:0a:c0:
c6:48:15:57:6e:e0:5e:07:57:90:64:57:0a:43:2c:ac:5e:ce:
7b:3b:0d:20:8a:01:38:bd:5c:e1:b8:86:aa:3a:ef:52:97:36:
ba:3b:43:52:e0:be:f8:3d:e5:9e:c4:1c:30:17:5d:42:5d:ff:
50:b5:d5:1f:a6:d2:e3:82:46:42:a7:86:01:f1:24:b7:2f:dd:
6c:2f:17:12:f4:fe:0d:8a:ee:6f:9c:71:bd:7f:72:34:3f:9d:
26:58:3b:38:ba:5e:6d:e3:cd:80:35:39:a0:f0:f5:9c:98:6c:
87:9c:29:0f:3d:11:ee:52:8f:c4:7b:3e:91:a3:81:66:60:9e:
85:ea:56:c3:e6:e3:b5:8b:21:db:be:56:9d:5b:a1:ef:06:30:
fb:da:3b:d3:6e:7a:a4:5e:89:dd:ef:3b:0e:5f:7b:4f:2e:bd:
57:f7:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-ams.rpki-client.org