Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/B05FB592057111EE90D17C1CC4F9AE02.roa
File: B05FB592057111EE90D17C1CC4F9AE02.roa (raw, json)
Hash identifier: OuD9ht2Q3OVZQn6TXqCZvc56mdnsDJ3JgcEZyOMbzAc=
Subject key identifier: 68:5A:DE:31:D3:1C:FF:2D:E3:03:F1:02:6C:E0:F0:5F:AB:AE:BB:1B
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 02
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/B05FB592057111EE90D17C1CC4F9AE02.roa
Signing time: Wed 07 Jun 2023 20:27:16 +0000
ROA not before: Wed 07 Jun 2023 20:27:16 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.213.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: Jun 7 20:27:16 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6480e822-6027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:ad:59:fc:06:df:cb:3b:74:7b:e1:2f:30:
c3:92:8e:24:ac:d2:9d:75:55:0e:34:4a:62:30:fa:
c6:65:6f:c1:74:d3:3e:07:27:6d:bf:9e:42:0d:6c:
67:0b:37:8c:52:f0:f3:f8:b3:1f:69:53:4f:ae:2b:
cd:ef:0d:6c:37:ff:fd:b2:c6:ba:e8:68:70:48:8a:
33:8f:27:20:40:19:d3:61:d5:90:1b:87:13:83:f9:
bd:3c:6a:4b:17:6c:44:96:ee:57:21:bd:ec:32:ec:
82:18:0e:15:96:48:e6:59:8a:a5:03:be:40:08:46:
38:ce:9e:80:f0:59:b0:95:58:7e:5c:ec:96:0e:42:
8f:f9:72:0d:d5:cc:50:07:f1:85:a5:5d:7e:5e:08:
c2:28:7a:dd:1b:fa:c5:cb:89:44:03:b7:9e:30:3d:
43:c7:cd:07:46:85:89:c5:3e:ce:04:54:35:94:fe:
f0:cc:6c:13:74:17:57:b2:6c:38:eb:c2:5e:5c:00:
b0:79:64:56:10:06:6a:6f:19:e8:bb:8b:1d:bd:ca:
b6:84:6e:08:3f:68:cb:50:2b:6b:44:4f:37:8d:07:
51:70:28:8c:68:a3:a2:65:27:12:e1:c7:c5:35:00:
07:01:44:6e:fc:ee:da:e0:82:f0:42:9e:62:09:d8:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:DE:31:D3:1C:FF:2D:E3:03:F1:02:6C:E0:F0:5F:AB:AE:BB:1B
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/B05FB592057111EE90D17C1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.38.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:ea:39:a1:b4:9d:46:4a:2d:e0:73:76:c2:21:ab:f1:87:ef:
c8:1a:a7:7a:5c:10:6b:20:b1:3c:c1:dc:22:e2:8c:a8:92:bc:
81:97:c7:84:34:8b:14:ef:0f:1f:1c:9c:0d:5f:87:a9:02:2e:
d0:cc:09:5d:02:68:72:4e:58:d2:71:be:11:b5:1f:8d:d5:ff:
b7:3f:22:25:89:12:48:d6:39:f0:cd:84:6e:54:a3:19:20:f0:
7d:b4:5c:b3:76:48:45:cb:42:91:e3:d4:49:c0:cf:52:3e:fa:
5f:2d:a3:d2:bd:e0:29:95:78:3e:1f:3e:cc:ec:05:6c:01:2f:
c6:47:06:7a:a6:b3:ca:8e:1c:31:b4:09:f7:4e:0c:58:07:62:
30:66:00:78:e4:84:c1:e0:64:c6:e9:66:6f:74:71:c0:21:ed:
9f:e4:f0:13:45:69:f6:f1:60:f8:66:fc:ff:a1:6a:57:0d:bf:
2e:d2:fc:f1:83:9a:e9:47:5c:63:ef:70:8f:30:80:9a:0c:4e:
5a:2d:bb:3a:84:2e:58:cd:40:35:48:89:f3:8d:e6:47:72:2e:
28:c1:0b:27:36:4c:cd:e0:1f:f6:b7:a0:18:3e:af:5a:9c:86:
a7:91:c8:bf:4a:8a:99:ba:09:70:a0:b8:39:6f:55:d1:d9:b7:
32:e8:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org