Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/B5F65CF4362C11EEA7A8E378C4F9AE02.roa
File: B5F65CF4362C11EEA7A8E378C4F9AE02.roa (raw, json)
Hash identifier: WJDPHM/QI3Js7Vg9kStRvnTfUZr0PIbx1hCL+yqLYSk=
Subject key identifier: 7F:90:74:99:98:27:6D:44:49:72:C2:A5:4A:6D:0C:39:94:9B:3E:97
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 2C
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/B5F65CF4362C11EEA7A8E378C4F9AE02.roa
Signing time: Tue 08 Aug 2023 20:55:17 +0000
ROA not before: Tue 08 Aug 2023 20:55:17 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150142
IP address blocks: 103.213.38.0/23 maxlen: 23
103.213.38.0/24 maxlen: 24
103.213.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: Aug 8 20:55:17 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64d2abb5-b361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:62:18:b6:a1:a8:e2:af:c4:92:98:57:18:
13:29:2c:25:55:b6:7c:74:76:32:a3:7b:07:b5:72:
16:41:e4:df:65:9f:e3:6f:7f:11:57:0b:25:c2:d6:
ea:9b:c7:78:4a:d5:e0:c8:70:a2:3a:05:fe:88:9c:
0f:f8:fd:7a:a6:a0:1a:0e:e5:28:80:df:7b:3f:ab:
76:4e:5b:89:34:9f:89:75:ce:4a:fb:6c:e8:3c:46:
ac:5d:ae:c8:d0:8c:d6:2b:c9:a6:c7:88:69:8a:89:
02:90:f5:e9:ab:b3:89:91:5e:0e:04:90:fb:53:ca:
0a:30:ce:4b:e5:29:c3:a7:b4:33:75:a3:a0:dd:98:
97:21:85:e2:25:ca:23:8d:9c:b3:27:61:ce:2c:b4:
74:88:d5:fa:60:6c:23:9b:ba:54:6c:cc:2b:20:d8:
94:72:2d:d4:b4:2e:dc:cc:f0:33:49:35:cc:c1:d0:
1f:35:a6:7e:0f:84:f8:02:e7:b6:67:8e:c3:b9:34:
3f:65:db:8e:df:09:f4:3d:f5:9f:e9:ce:a1:3e:01:
fb:18:fc:72:1e:fe:75:56:1e:18:eb:f4:c7:c9:c8:
cc:8c:97:4c:b1:ea:1d:8d:ba:3e:ba:9e:93:87:0e:
c1:39:14:a1:28:d4:3f:79:ec:69:10:4b:d7:c4:62:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:74:99:98:27:6D:44:49:72:C2:A5:4A:6D:0C:39:94:9B:3E:97
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/B5F65CF4362C11EEA7A8E378C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.38.0/23
Signature Algorithm: sha256WithRSAEncryption
97:77:5f:a5:0b:a4:a4:bd:b6:2d:7c:99:28:5a:9e:51:35:7d:
69:c6:36:08:14:79:6c:85:50:9e:f6:07:92:9b:54:53:70:32:
fa:e8:15:24:14:1e:84:39:7d:f7:06:2c:9b:e5:5c:57:7a:9b:
c5:58:84:97:1f:35:b2:1a:fa:c1:82:13:e5:88:b4:4b:29:34:
9c:da:b9:80:8a:1c:3b:a7:60:54:a8:92:8c:c6:eb:8d:e1:0a:
79:b1:a1:ea:48:b9:bd:bc:1a:80:20:a1:fb:48:c2:0c:f6:85:
2b:dd:18:15:68:b7:aa:95:29:b8:51:56:aa:04:7b:9c:b0:5d:
1c:40:51:3d:09:94:ed:be:dc:b4:68:c1:44:57:91:83:6d:33:
1a:f1:60:d2:a5:fe:f7:ac:8b:c9:e7:6a:c5:a5:1c:4e:d0:c5:
7d:90:31:5a:ac:88:b7:52:c7:3d:ba:a8:19:48:86:41:c3:b2:
87:62:82:38:2c:77:8e:01:a7:e0:7e:cb:31:fb:a1:ab:58:e1:
53:33:88:2e:1c:ea:07:79:2c:6c:23:02:ab:1d:4a:3c:42:e7:
41:60:a2:01:bc:b9:fa:81:72:82:37:29:24:e3:14:42:3c:5e:
a0:b2:53:df:00:6d:2e:17:e6:1c:00:3f:ad:dc:d1:92:93:83:
61:8e:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 09:56:11 2023 by rpki-client on console-ams.rpki-client.org