Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/CB868B4C7EDF11EE844CFE7BC4F9AE02.roa
File: CB868B4C7EDF11EE844CFE7BC4F9AE02.roa (raw, json)
Hash identifier: uhoKGNIRnbCo3Jx9YymFhvtWejs8R+VYoExBgW48nSI=
Subject key identifier: 91:07:42:64:E4:CE:17:CE:25:64:D5:2C:08:9D:CB:E3:9D:F5:E0:9E
Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial: 62
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/CB868B4C7EDF11EE844CFE7BC4F9AE02.roa
Signing time: Thu 09 Nov 2023 09:10:15 +0000
ROA not before: Thu 09 Nov 2023 09:10:15 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 29802
IP address blocks: 103.213.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Validity
Not Before: Nov 9 09:10:15 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=654ca1f7-3c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:1a:38:a3:02:98:cd:1e:ce:b9:06:10:2e:
c1:1a:f5:fa:b3:7d:17:78:22:e9:44:6d:19:10:00:
3b:cd:0d:5b:91:e2:49:d0:0d:97:a6:23:05:d6:69:
ca:19:2a:8d:01:ac:a7:fa:f4:a9:58:01:1a:9e:07:
30:18:e8:c4:32:7b:07:3b:12:22:70:a6:42:7a:0a:
b3:9b:ba:f0:ab:bf:80:c0:6a:17:2f:58:e3:6b:7e:
c0:33:d5:ef:1e:d3:ad:44:fb:39:16:87:33:b0:87:
a0:78:d0:31:f3:b0:e3:05:40:c6:9e:ab:17:d4:6d:
cf:2f:32:00:a5:c5:65:40:5d:aa:4b:4d:bc:3b:e2:
61:ec:41:c1:24:fc:86:30:4e:f1:df:02:09:3c:70:
d2:e4:6c:08:26:3d:04:31:0b:79:25:da:5b:c9:a1:
96:74:14:f9:6d:cb:47:9e:cf:de:b7:9a:51:40:bd:
8b:5a:00:ea:81:fb:6b:73:c1:61:71:f9:3f:6b:f8:
84:84:6a:11:b0:c8:a0:ee:12:22:2e:c2:cf:3f:4e:
9b:d1:85:34:cd:f5:41:9e:42:9d:5e:51:80:6f:ac:
32:8e:3e:2c:7b:0b:69:f3:7e:95:08:97:03:86:16:
51:85:eb:fd:c6:2b:3b:e8:2e:02:46:0c:ae:2c:43:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:42:64:E4:CE:17:CE:25:64:D5:2C:08:9D:CB:E3:9D:F5:E0:9E
X509v3 Authority Key Identifier:
keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/CB868B4C7EDF11EE844CFE7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f8:d1:0a:b4:d4:0e:52:a8:09:0a:ea:9f:9c:d7:89:33:9e:
6f:cb:29:7d:ea:e4:e8:a9:ce:b2:3c:75:31:1d:c4:fd:f1:4e:
7e:61:98:f5:82:d6:10:62:00:5c:da:fb:3a:df:5b:d5:7c:40:
eb:39:61:fb:f6:c2:84:03:fa:fc:c9:40:d4:71:7a:2e:2a:29:
0c:af:8d:9d:f2:39:4d:89:7e:e6:f0:08:aa:10:b3:2d:7e:32:
90:83:7b:a5:7e:a3:5b:2a:ec:0d:ef:01:36:a1:df:f7:d1:91:
45:f4:b6:6d:2e:b6:62:53:d4:67:2f:74:01:00:74:3e:f4:47:
8e:a8:80:98:ec:3b:6c:04:8e:ed:14:6a:05:ee:1f:94:4d:eb:
89:27:70:10:81:c9:4d:09:5b:88:ca:9c:d5:9e:a5:1d:34:23:
8a:e8:03:71:02:dc:ef:8f:78:72:67:03:59:b4:e2:b7:39:24:
54:4f:0b:14:ae:f4:ab:ca:be:0d:41:6f:e1:d0:63:18:68:77:
e6:3d:ca:33:cc:ac:36:93:a7:e2:92:5b:4f:2d:8f:04:a8:58:
23:ec:98:be:08:7c:99:40:de:24:e3:9f:8e:53:da:e9:5e:a5:
21:ed:c8:4c:1c:4a:87:22:c9:b3:56:f2:72:b0:6a:54:35:60:
93:ba:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 16:53:57 2023 by rpki-client on console-fra.rpki-client.org