Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/D16CE19801DE11ED8236F073C4F9AE02.roa
File: D16CE19801DE11ED8236F073C4F9AE02.roa (raw, json)
Hash identifier: oXLffy7GnLkRJuG3GwYCWHNPszl6HkXeoZopIOdSd/I=
Subject key identifier: FF:F3:8C:E8:46:AD:7A:E2:7E:2D:AE:33:2A:F9:02:CE:B9:F7:F2:53
Certificate issuer: /CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95
Certificate serial: 0108
Authority key identifier: D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/D16CE19801DE11ED8236F073C4F9AE02.roa
Signing time: Fri 07 Apr 2023 05:45:55 +0000
ROA not before: Fri 07 Apr 2023 05:45:55 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 135602
IP address blocks: 103.226.228.0/24 maxlen: 24
103.226.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95
Validity
Not Before: Apr 7 05:45:55 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=642fae13-41b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:d6:6c:24:0b:32:80:05:f3:8e:95:65:a7:
7a:87:17:34:71:3e:ad:88:cc:cd:ef:a6:0a:db:d8:
66:a2:bf:dd:5e:26:85:ea:4f:5e:cb:05:05:1d:f8:
87:db:ed:7a:a9:a7:76:43:34:78:44:37:89:e5:0d:
af:da:9e:11:f4:06:e5:9b:e1:f9:f7:91:46:5f:3e:
c6:2f:a7:fd:ef:f7:16:6e:15:8b:e0:05:26:21:52:
00:f1:68:91:36:0a:3b:03:54:79:4e:c0:ec:17:b1:
ea:de:83:db:1d:b5:af:ae:e2:6d:a8:45:8e:83:74:
39:9e:9d:43:15:a2:ed:11:a5:b8:ff:07:a3:bc:50:
f3:b0:3d:46:c3:11:a7:00:1c:25:3a:3b:36:a5:21:
84:f2:3b:a4:90:ae:34:20:af:30:1f:65:fa:fc:9b:
12:eb:e1:82:59:74:ff:f6:22:1e:54:79:dc:e8:d4:
18:64:af:49:37:52:5b:a6:60:ad:0b:54:fc:d3:68:
cc:1f:6d:d9:57:4e:b3:5e:80:ff:b6:f1:23:5a:af:
d1:19:8f:16:ed:d4:aa:aa:dd:5a:3f:25:f2:be:19:
9d:2e:14:dc:e5:22:06:0f:42:4d:52:67:17:6a:9c:
c7:dc:37:74:01:f7:61:fe:ce:c3:3d:fa:dd:f1:b2:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:8C:E8:46:AD:7A:E2:7E:2D:AE:33:2A:F9:02:CE:B9:F7:F2:53
X509v3 Authority Key Identifier:
keyid:D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/D16CE19801DE11ED8236F073C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c7:93:d9:e5:a3:b9:96:8f:7c:97:0c:e4:5e:96:ee:03:09:
af:72:5c:d7:a1:8e:e0:2e:c6:5c:73:96:29:ec:eb:88:2e:4e:
c1:42:ac:6c:f0:37:bb:c7:fd:c2:be:1a:1b:da:c5:24:65:34:
d3:ae:a7:9e:83:d5:17:ff:d9:05:20:29:29:49:08:e1:92:c1:
83:90:a4:10:f8:b7:9e:a9:1a:55:6d:f4:b5:5a:2a:bb:e9:04:
43:09:3f:0d:13:95:dc:e7:7a:b1:9d:ee:c6:cd:35:88:a8:50:
0e:aa:be:fa:65:fc:bb:3a:ee:73:7f:df:e7:b1:b6:b3:78:7a:
6a:7b:f1:c0:6e:a9:08:e4:e2:1c:8c:1b:f9:69:1e:7f:b2:40:
de:a2:c5:50:d3:7b:89:f4:a5:c5:c2:0e:67:67:6d:eb:bb:71:
de:59:f1:ea:3e:c6:5f:dc:cc:df:bb:c3:9d:69:f6:04:85:2f:
2e:37:46:29:ed:09:e3:4b:5d:0e:ac:c0:4b:b0:b5:ac:cf:f8:
f6:f2:79:23:3a:5d:37:60:cc:32:2a:b8:b4:f9:1b:56:2e:87:
50:2a:1e:e9:3d:e8:5c:cc:71:4e:14:a4:bc:a4:b3:14:4a:cb:
8f:46:d0:9a:2f:24:f6:f1:fc:72:74:26:87:f3:c6:70:67:4c:
cd:dc:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-ams.rpki-client.org