Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/13FF809831A811EE939F1D33C4F9AE02.roa
File: 13FF809831A811EE939F1D33C4F9AE02.roa (raw, json)
Hash identifier: z1WoHFHJyzUWISXGVAEgfMy9qU69d9/6fG/0sk4QY5o=
Subject key identifier: 48:49:C7:F1:DA:99:E1:07:E1:2B:10:12:39:27:55:24:CA:17:11:1C
Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Certificate serial: 1A
Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/13FF809831A811EE939F1D33C4F9AE02.roa
Signing time: Tue 05 Sep 2023 02:32:23 +0000
ROA not before: Tue 05 Sep 2023 02:32:23 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 135889
IP address blocks: 103.79.23.0/24 maxlen: 24
103.102.50.0/23 maxlen: 23
103.102.51.0/24 maxlen: 24
103.102.52.0/24 maxlen: 24
182.16.152.0/22 maxlen: 22
182.16.152.0/24 maxlen: 24
182.16.153.0/24 maxlen: 24
182.16.154.0/24 maxlen: 24
182.16.155.0/24 maxlen: 24
202.62.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Validity
Not Before: Sep 5 02:32:23 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64f69336-e58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:07:06:1d:c3:0e:f4:b7:73:f5:76:7a:3e:
67:47:d9:48:32:00:b7:c8:b1:f3:d3:12:73:90:c8:
6a:aa:c6:c3:c4:a7:dd:52:ec:a2:51:72:68:0c:00:
73:b5:ac:bb:8d:fc:ad:cb:2b:0f:34:34:cc:9f:b4:
40:b4:ba:8d:5f:2d:68:74:72:09:7e:e0:dc:5e:cc:
ff:7a:37:e2:72:42:fc:19:96:9d:29:45:28:7b:84:
41:ea:9f:e4:ab:dd:7b:b1:be:a9:11:bc:65:80:09:
c3:07:80:25:31:4e:b5:ab:71:64:6d:75:7c:63:f4:
68:c0:9b:f0:1e:75:ca:73:5f:0b:85:5a:08:8e:73:
8d:03:aa:16:21:0d:89:d7:b3:84:f1:64:5f:e9:be:
9f:ee:17:fc:6c:af:f6:09:f8:d4:da:a6:b6:1a:1d:
ac:e4:c2:b0:6a:54:7e:f6:37:4a:cc:01:3c:09:33:
40:f8:d8:7c:a7:06:f5:d1:a0:f9:c5:a3:6f:cc:73:
15:c1:16:15:a3:2d:b5:c8:a4:31:c6:9a:4b:43:d0:
9c:28:82:c5:6d:49:bd:fd:5b:22:8a:f1:db:b5:93:
73:7d:3e:ce:d3:5c:5e:27:67:5c:b1:43:03:68:c0:
c0:8e:6f:10:ac:7a:ee:d5:ee:c7:27:4b:4a:d7:71:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:C7:F1:DA:99:E1:07:E1:2B:10:12:39:27:55:24:CA:17:11:1C
X509v3 Authority Key Identifier:
keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/13FF809831A811EE939F1D33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.23.0/24
103.102.50.0-103.102.52.255
182.16.152.0/22
202.62.245.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f1:ea:8e:a1:ba:98:15:da:a1:5c:bf:a4:7b:19:fa:00:bc:
01:5d:a2:59:7f:ef:af:b8:04:d2:86:80:3f:5e:39:da:2a:d7:
5b:d5:61:09:67:91:24:e1:3f:2d:02:39:20:23:5e:dd:74:2b:
4f:c3:d8:42:28:15:7e:91:44:7c:03:94:20:d4:6a:dc:e9:03:
c5:e5:3b:c5:19:ac:9a:4b:73:e4:6f:fa:33:25:92:9a:ee:3e:
bc:10:96:4e:82:66:32:76:44:17:5b:7b:c7:82:47:92:6e:10:
89:96:ea:ed:fa:3b:4a:4e:ac:44:c1:fe:60:4e:38:3c:32:dc:
72:7c:57:ce:f3:ef:43:8d:3f:31:30:ac:ef:bf:ed:f1:3c:fc:
67:fb:8f:c3:3f:aa:bc:5c:1a:86:84:ec:59:09:26:3d:a9:97:
21:d1:df:58:45:1f:1c:2f:2a:1e:29:d6:39:13:06:08:1b:41:
d9:fb:f7:35:3a:3c:f7:23:e7:6a:8c:16:b9:04:81:68:c4:38:
46:77:bb:48:31:e1:a3:2f:f1:89:d5:0b:2e:c2:58:b1:ac:19:
87:e3:20:c8:4a:a5:4b:10:c0:f7:ac:50:b1:6f:b2:47:4a:9a:
22:a8:91:00:6b:24:62:92:29:5e:18:36:98:e8:e8:9b:a8:de:
a3:78:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 23:39:58 2023 by rpki-client on console-ams.rpki-client.org