Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/5E56DD44D71711EDBC28A85BC4F9AE02.roa
File: 5E56DD44D71711EDBC28A85BC4F9AE02.roa (raw, json)
Hash identifier: A8vYjI+fPvO5yQUVYKvFwBfIPyTAPHKdyV5unV4KiKk=
Subject key identifier: 03:7E:3F:39:4B:6B:A1:54:CE:B0:65:C5:C6:26:00:31:AE:5E:36:2E
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: E4
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/5E56DD44D71711EDBC28A85BC4F9AE02.roa
Signing time: Sun 09 Apr 2023 20:44:49 +0000
ROA not before: Sun 09 Apr 2023 20:44:49 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.69.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Apr 9 20:44:49 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=643323c0-e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:5e:ea:5d:37:6b:e5:9c:1f:50:4d:a5:de:
23:ac:01:2d:ac:04:13:be:71:80:3a:39:7f:87:4b:
9a:f9:4b:77:75:60:e2:63:0a:b9:4a:c5:6c:9c:e2:
a2:2c:00:33:24:2b:13:e4:63:a9:12:c1:85:85:76:
99:0a:22:87:00:ba:a6:96:c5:a9:70:30:15:12:98:
49:49:e2:06:db:ec:20:85:da:e0:35:ae:2b:46:b7:
07:82:5d:2c:31:ea:d9:14:b0:fb:e8:1d:9f:70:09:
8c:79:ca:bd:40:22:0c:aa:c2:b6:28:23:10:ad:42:
aa:88:25:da:73:b5:74:98:5d:1e:8e:60:3f:da:3e:
55:d4:22:93:4c:11:e1:6f:b4:ff:d9:b7:e2:72:ee:
86:ac:f0:4a:40:68:f6:91:2f:57:48:ee:42:7d:b7:
15:07:b4:2e:54:9b:af:21:05:5d:c5:a2:c7:f4:67:
3c:db:07:e4:e3:68:8a:60:d1:df:dc:84:55:48:31:
e5:68:0b:8f:eb:14:ee:6d:56:3d:5b:ab:3c:76:45:
db:55:0d:96:17:93:cd:11:f1:96:bb:c7:aa:61:09:
91:41:2f:2c:6e:8f:76:d5:ff:d5:9d:a0:be:88:c0:
93:b6:b9:91:f2:d5:c5:42:3a:ba:a7:02:19:0e:e6:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:3F:39:4B:6B:A1:54:CE:B0:65:C5:C6:26:00:31:AE:5E:36:2E
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/5E56DD44D71711EDBC28A85BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.3.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5f:e8:a4:1a:ea:99:54:ab:d4:12:d7:3b:b5:49:5d:39:e1:
95:6b:f5:46:a9:95:27:f6:19:78:9c:36:7b:3a:47:96:94:07:
3a:71:3a:c4:17:58:29:51:d2:7b:7e:20:6d:18:33:69:a1:85:
de:40:47:29:89:7f:35:52:d7:4a:5d:6a:36:a3:4a:c4:a2:d4:
a7:19:86:2e:08:75:22:56:c5:cc:33:ed:c1:a2:26:fe:cf:c4:
9a:49:b2:bd:b1:db:10:6d:1c:33:60:23:88:4e:87:04:fe:00:
fe:97:b4:50:79:1b:c6:9c:f1:95:19:23:97:15:7c:e8:76:06:
57:08:d0:40:72:6f:3a:e5:b8:61:39:bc:78:a7:97:79:0c:32:
7a:06:f6:0a:c2:5e:25:16:eb:cd:eb:22:ec:10:d9:49:96:cc:
59:51:c3:39:ab:f7:40:ca:b7:a6:f0:01:13:33:75:73:ec:7f:
60:6a:5c:89:e7:01:c6:70:60:2c:6a:d4:b2:8d:67:91:44:ed:
b0:e8:bd:58:c5:d1:10:dc:61:d3:7d:e9:d8:12:38:9c:22:d0:
41:2e:94:79:eb:eb:4a:7a:7e:f6:c4:d1:85:a0:0f:fa:b3:18:
ae:a7:88:07:a2:5a:ef:26:9f:40:f1:e2:6f:6d:dc:21:60:8c:
70:35:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org