Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/52B9E048067F11EE8D18A940C4F9AE02.roa
File: 52B9E048067F11EE8D18A940C4F9AE02.roa (raw, json)
Hash identifier: jKTO7vyDF88a+BiOmbfD7NZ8UqCwHCi+ZQbbWmxbVbk=
Subject key identifier: A0:52:63:F8:59:53:67:81:9D:38:7A:FB:11:15:CB:31:E2:E0:FD:3D
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 05A7
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/52B9E048067F11EE8D18A940C4F9AE02.roa
Signing time: Fri 09 Jun 2023 04:37:22 +0000
ROA not before: Fri 09 Jun 2023 04:37:22 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 30938
IP address blocks: 103.110.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1447 (0x5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: Jun 9 04:37:22 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6482ac81-7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:34:7d:47:d0:f8:4d:c5:68:d4:82:e8:08:
60:71:6f:9a:17:78:09:df:f0:0a:a0:ff:1a:7e:77:
52:e7:a8:67:cc:1d:ed:1a:3c:57:93:5c:52:72:71:
1f:2c:da:7e:bb:0d:b7:e5:c1:b2:e2:05:4b:67:e6:
c6:30:fc:1d:9d:45:e2:98:eb:03:00:b6:78:f8:0b:
be:77:2a:cf:20:e5:66:52:26:e3:df:68:3d:b3:e4:
c4:ef:fd:b1:1f:c9:8b:5c:b0:fc:8b:72:55:d9:74:
6a:e8:78:f2:6e:dc:1d:c0:39:a6:6f:ae:30:00:0c:
a2:95:ea:ba:18:cd:5d:ad:ed:04:02:de:98:5e:96:
79:10:60:9c:0b:6a:75:c8:bc:0a:3b:9f:df:0b:f4:
6e:fe:ba:c9:c8:80:4d:0a:60:77:85:14:ec:af:1a:
af:ce:33:a2:8d:31:3d:84:16:fe:46:ee:d3:bb:d7:
e2:cc:11:30:15:4c:5b:26:5a:af:e5:3c:da:1e:31:
d6:da:46:6e:d6:e2:da:41:33:47:55:0e:0a:39:d6:
89:bc:5a:b0:f5:01:43:a4:90:f0:e1:b7:86:b3:48:
62:62:04:fa:99:68:3c:49:c0:81:a8:21:00:99:f2:
b2:c8:dc:0d:1b:73:cb:0d:16:b3:1a:28:f9:6f:df:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:63:F8:59:53:67:81:9D:38:7A:FB:11:15:CB:31:E2:E0:FD:3D
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/52B9E048067F11EE8D18A940C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.105.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:1c:8f:b9:bd:d8:4b:ea:ad:f9:5b:4a:68:20:78:4f:2b:23:
2c:d3:e6:17:db:a1:be:a2:32:55:aa:a4:78:ea:44:54:af:6a:
ca:a1:a2:4e:28:28:f9:c7:76:b0:f4:5e:aa:48:b0:37:18:60:
ba:c5:83:39:72:90:58:ec:62:68:d2:8d:c1:21:ef:1c:3a:af:
f2:3f:5b:fb:5e:93:e8:90:94:c3:1b:60:74:bb:9f:95:4a:49:
cb:37:24:15:3c:6d:77:7d:6d:13:8a:54:05:4d:9a:db:34:17:
3f:1a:30:cd:84:4f:e1:79:cb:8c:52:57:34:0e:0e:86:5e:e7:
bb:54:1e:40:1c:e7:ba:06:6d:78:38:9f:d3:df:b2:1a:13:9a:
14:67:94:7e:d2:9a:0d:9a:71:4b:7f:39:8e:27:14:aa:3e:9f:
6a:17:06:40:8f:fb:12:f8:89:16:29:2b:0e:64:e3:09:52:b7:
a1:c4:fb:f2:08:1f:cf:8a:8f:e2:53:a0:85:f6:2f:ef:40:04:
21:5a:a8:32:2d:75:01:56:25:84:15:67:2a:7a:0d:17:d5:af:
1f:4f:21:d3:63:2e:50:88:97:ee:1f:01:e0:58:bd:c9:6c:2f:
2c:c4:e7:fa:c0:ad:ed:e6:0b:31:db:52:c0:61:35:1b:ba:14:
39:06:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 07:56:35 2023 by rpki-client on console-fra.rpki-client.org