Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/8FBD232482C711ED842A4450C4F9AE02.roa
File: 8FBD232482C711ED842A4450C4F9AE02.roa (raw, json)
Hash identifier: k35z/e971sP7gNmvWXg9QyDNWB1ITg7nBGmbooybowc=
Subject key identifier: A1:F9:5A:85:64:F2:77:24:C9:AF:24:9E:2A:25:51:73:64:0C:1B:49
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 0369
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/8FBD232482C711ED842A4450C4F9AE02.roa
Signing time: Fri 23 Dec 2022 13:41:54 +0000
ROA not before: Fri 23 Dec 2022 13:41:54 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 147293
IP address blocks: 103.172.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Dec 23 13:41:54 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63a5b022-e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:b2:6d:ea:f8:4d:f5:fc:f3:46:87:ea:3f:
93:7a:2b:56:54:81:af:a2:27:a3:5a:42:da:64:0b:
ba:da:8b:f7:26:88:a5:33:61:6e:b2:b8:09:c3:80:
fb:ca:85:ff:c1:d7:78:c5:69:40:29:0c:00:7e:a0:
a4:a2:6b:d6:57:c8:a6:e9:6c:e2:c3:27:80:f3:fa:
b0:c1:0a:5e:b6:fc:57:44:e4:26:41:0e:b7:18:2b:
4f:8f:c7:48:6a:8c:0a:d1:87:d5:1f:94:22:cc:29:
9c:6f:40:95:b0:1b:8d:dc:92:f7:5f:a1:82:bf:bc:
d9:05:9d:e3:b6:b1:30:87:fa:9e:d6:1d:2b:2a:13:
32:b1:a5:1d:65:4d:ae:12:b7:bf:41:85:bc:c6:87:
e5:75:54:18:a3:a5:54:1c:3b:88:31:45:6c:28:a9:
38:66:fb:7d:dc:d4:8c:c1:0a:b3:fe:7f:44:16:8d:
72:41:68:ee:88:89:47:4f:de:83:de:cf:52:eb:28:
c2:0f:eb:f1:01:7a:25:04:87:74:9d:64:24:a9:e7:
b1:f3:c6:3c:a3:db:18:67:0f:88:d3:39:20:ba:e5:
33:63:36:18:2f:99:a5:32:d7:33:c3:7e:bb:f3:b8:
37:08:7f:82:dd:77:77:f6:68:98:3c:c2:81:3d:f8:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:5A:85:64:F2:77:24:C9:AF:24:9E:2A:25:51:73:64:0C:1B:49
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/8FBD232482C711ED842A4450C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:87:4d:64:40:b2:a4:71:d2:47:4a:f2:57:a3:38:78:c9:e6:
ba:51:d2:bd:e7:80:b2:98:ee:ab:80:af:05:07:88:a4:81:54:
1b:23:6d:7f:c1:5e:7d:12:08:f0:af:6b:33:8c:3e:f5:e8:30:
a6:3a:a8:25:bd:99:f0:9a:b3:8e:df:62:f4:56:0d:00:98:da:
eb:68:09:a2:a3:cf:e2:65:9a:17:a8:04:42:30:b6:c2:6c:64:
96:63:e0:96:df:e7:9f:d1:d4:dd:02:bc:32:45:1f:79:d0:db:
a2:e0:40:a4:3d:53:f7:b4:fd:80:7f:6d:d5:47:b5:39:f1:09:
da:dd:e8:4c:e0:19:62:7b:c4:11:f4:92:ba:1c:05:54:ae:bb:
57:fd:f6:83:bf:cd:35:af:ea:ad:de:3c:e8:b9:14:45:01:81:
00:2a:3a:34:1e:a4:80:a2:2a:ed:4f:74:c9:1d:89:7d:39:0c:
dc:64:a6:4f:df:9d:dd:8e:5e:29:4f:34:51:1c:7a:71:b3:af:
8d:b4:6c:87:06:35:57:b5:cb:56:83:4f:fd:4f:c1:53:9a:98:
6f:f3:47:cd:55:f3:ac:8f:6b:05:e6:06:b9:56:70:75:09:ac:
11:24:2d:55:29:14:fc:df:1b:f4:06:7a:50:c0:dd:38:cb:58:
42:a9:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-fra.rpki-client.org