Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/CE0D5068D3E411EDB0E7CA45C4F9AE02.roa
File: CE0D5068D3E411EDB0E7CA45C4F9AE02.roa (raw, json)
Hash identifier: ZcyhQkRKo/hwzUDdsx3KW20xOWAtKcKF9WbY/j1PV2I=
Subject key identifier: C3:51:FD:83:B2:26:F1:89:B6:22:F7:0F:3E:6B:15:F1:DD:C2:35:2F
Certificate issuer: /CN=A9185EFE/serialNumber=7EE8CE64A7B4005121460AA3BA59443C956E35D0
Certificate serial: 011C
Authority key identifier: 7E:E8:CE:64:A7:B4:00:51:21:46:0A:A3:BA:59:44:3C:95:6E:35:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fujOZKe0AFEhRgqjullEPJVuNdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/CE0D5068D3E411EDB0E7CA45C4F9AE02.roa
Signing time: Sun 01 Oct 2023 03:44:04 +0000
ROA not before: Sun 01 Oct 2023 03:44:04 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138197
IP address blocks: 103.141.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185EFE/serialNumber=7EE8CE64A7B4005121460AA3BA59443C956E35D0
Validity
Not Before: Oct 1 03:44:04 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6518eb04-a607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:58:c1:60:ae:70:95:0a:fc:98:58:c3:4a:
38:ae:27:3c:e3:e9:dd:83:e3:c6:dd:80:29:f1:8c:
59:cb:e7:44:f2:73:84:96:48:0b:91:ea:bf:4c:cb:
15:5c:e9:06:06:1a:16:11:7f:a1:6c:94:40:c8:71:
e8:c3:e1:3a:2e:40:01:43:c5:f1:03:25:ed:fe:88:
bc:5e:f9:ad:78:c1:fc:bd:49:b9:40:c8:0e:68:5e:
1b:d2:c1:42:f1:ec:e9:b0:b1:47:ca:5e:61:97:ff:
91:f6:32:67:e3:0b:01:25:b0:dd:e7:81:e3:03:a1:
08:34:ad:01:40:a6:d5:a7:25:96:4f:a2:07:55:96:
32:91:5e:cc:07:d0:c9:3b:d8:76:03:f6:63:ab:6e:
63:fb:2b:21:4d:1d:b3:e5:ca:6d:5b:ee:7a:06:b9:
fe:d5:1f:42:cb:e6:0b:aa:52:97:e1:2e:f6:fb:9d:
33:2e:23:82:d1:07:0b:17:bf:c5:9f:17:40:79:dd:
75:e8:6a:38:05:2b:59:de:00:02:ff:55:63:65:43:
dc:1c:6e:0c:50:22:ef:65:61:c8:ff:33:b2:a7:65:
85:59:d8:4c:0c:6b:1e:43:27:8a:9c:8d:aa:2f:67:
38:a6:2b:27:1a:7f:86:91:3b:36:45:36:05:5e:bc:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:FD:83:B2:26:F1:89:B6:22:F7:0F:3E:6B:15:F1:DD:C2:35:2F
X509v3 Authority Key Identifier:
keyid:7E:E8:CE:64:A7:B4:00:51:21:46:0A:A3:BA:59:44:3C:95:6E:35:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/fujOZKe0AFEhRgqjullEPJVuNdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fujOZKe0AFEhRgqjullEPJVuNdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/CE0D5068D3E411EDB0E7CA45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.37.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e6:14:dc:69:3f:b8:47:63:cd:68:4a:e6:62:7a:55:8b:85:
b9:23:8a:77:88:b9:a5:10:c5:d2:98:99:35:a8:a9:22:16:dd:
c5:f7:95:c7:25:e1:9c:09:41:cd:1e:1a:c6:69:3d:93:9b:ba:
0b:e5:36:a7:6a:ca:58:38:05:ed:1f:28:a5:df:1f:d9:fc:02:
3b:3e:ca:0c:66:6d:52:c4:00:1b:46:5a:16:ef:56:65:66:b9:
db:ab:23:d7:13:e9:53:6e:cf:e0:30:4f:12:dc:bb:e4:ad:9f:
34:18:a9:51:50:62:0a:60:8b:6b:45:ed:27:f4:48:e2:fb:82:
88:95:f7:ae:84:4f:f5:1f:4b:b8:88:9b:c7:20:bd:21:11:44:
95:4d:d9:3b:0b:ef:6f:39:64:e6:5c:8e:91:57:6b:ac:75:e2:
fe:95:1a:b6:e6:15:28:a3:04:56:04:57:e1:38:c7:43:ad:fb:
fd:a8:4c:45:fe:87:bc:78:65:d8:6a:df:d8:88:20:b9:7e:ff:
5a:cd:85:3d:4b:9f:4b:9e:a7:e3:9f:4e:bf:91:45:2b:60:fe:
64:5c:ae:46:3f:b2:f6:89:77:76:7f:d5:76:49:e0:a3:43:3f:
c6:0f:52:84:12:bd:b6:58:5c:7a:59:61:92:32:53:2b:54:bb:
16:c6:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 01:50:26 2023 by rpki-client on console-fra.rpki-client.org