Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/923AB8F84F0B11EEBC54924EC4F9AE02.roa
File: 923AB8F84F0B11EEBC54924EC4F9AE02.roa (raw, json)
Hash identifier: Nf1zctT0XqwHnVoCh2hlj5mHacE05hPklJKamafEbDI=
Subject key identifier: 19:F2:2B:77:B9:69:48:6C:CB:E9:5F:0F:9A:EE:5E:18:B3:5F:0A:25
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 013F
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/923AB8F84F0B11EEBC54924EC4F9AE02.roa
Signing time: Sat 09 Sep 2023 12:22:41 +0000
ROA not before: Sat 09 Sep 2023 12:22:41 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 47585
IP address blocks: 103.69.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 20:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Sep 9 12:22:41 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64fc6391-f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:98:88:8e:d9:6f:35:1f:fb:52:31:41:30:
3f:16:60:47:be:64:f4:f0:e3:fd:b0:a1:90:81:63:
22:ba:6a:65:44:c8:cb:31:c2:43:79:05:3b:09:8f:
7d:a0:00:b6:ef:05:5d:91:2c:15:33:bd:41:6f:ca:
48:c7:1a:e5:68:a1:7c:03:73:c5:d3:8d:78:d4:08:
d6:96:7d:05:f1:16:aa:b1:10:36:67:a1:5d:04:b7:
e6:8b:d7:b7:84:1a:20:f4:10:92:10:db:4c:92:fe:
6a:97:f7:40:49:e9:c9:c9:5f:2d:d2:a1:d6:36:28:
b1:5b:03:d1:26:05:33:a1:b8:98:9a:de:58:57:7d:
85:40:69:3f:66:79:87:b8:82:2f:41:22:18:eb:08:
89:b1:a3:6f:bf:6f:80:03:53:ab:eb:5c:81:75:11:
8d:69:1c:09:ef:8e:53:ae:b1:28:83:22:0b:d6:ac:
66:7b:ad:03:c9:81:81:1e:49:45:54:1d:f2:a6:ac:
16:ae:4a:93:8d:44:40:8f:52:be:8a:1a:42:00:43:
72:bf:6e:e6:87:14:97:4c:78:c5:f1:15:56:0c:1e:
4f:0f:72:96:f6:7c:5c:42:41:71:74:28:36:10:c5:
5a:42:c7:d8:83:bb:f2:7c:10:55:2b:6a:b7:de:8b:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:2B:77:B9:69:48:6C:CB:E9:5F:0F:9A:EE:5E:18:B3:5F:0A:25
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/923AB8F84F0B11EEBC54924EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:03:2b:74:c8:b9:d7:75:1c:57:be:53:51:60:6b:57:3c:27:
39:a5:4c:3b:de:f4:fc:89:d1:24:ef:52:d5:53:f3:6f:68:96:
21:f1:84:67:25:a5:11:88:c6:b6:df:64:59:ac:9e:b9:df:88:
7f:a0:bc:15:82:ca:e4:c3:00:79:8a:e2:ad:bf:9f:3f:0e:37:
f6:7b:97:35:1a:95:d2:e9:20:1d:ac:75:ea:aa:7f:ff:03:76:
b5:02:1b:7d:b9:76:52:d7:4f:fa:2b:d8:d5:47:a9:90:f9:23:
85:7c:28:63:b7:34:c9:5c:d8:8d:79:c3:ff:1c:9f:05:d8:2a:
46:99:80:db:3d:2f:6c:ab:bd:9f:47:db:3c:90:9a:22:19:61:
8d:d7:d0:84:a7:c6:93:5c:11:b7:05:e2:9e:bd:03:ca:db:32:
98:98:cd:49:e8:2a:47:b4:83:88:1f:0e:4d:6a:67:a4:c1:7b:
5d:01:3d:60:a9:23:a5:d5:30:a7:25:45:f5:29:64:bc:74:1b:
80:6f:35:5d:9f:fe:dc:e0:31:f3:92:91:e9:83:00:be:9a:6b:
77:59:0f:4c:7b:e8:ec:66:09:35:68:ee:ca:19:de:bf:77:fb:
2f:57:c3:67:38:c4:a1:bc:61:2d:29:5c:5e:2a:11:70:f9:8d:
a1:63:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 23:46:04 2024 by rpki-client on console-fra.rpki-client.org