Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/F2311BD62BD911EDADF00A6CC4F9AE02.roa
File: F2311BD62BD911EDADF00A6CC4F9AE02.roa (raw, json)
Hash identifier: iadnlRXkBKxeo0mq7K64u4qHqcg1pukCmfrpi8zh/RQ=
Subject key identifier: BA:32:BB:E8:07:FA:5C:4C:C1:58:58:7D:4D:52:40:D4:FF:8B:8B:16
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 46
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/F2311BD62BD911EDADF00A6CC4F9AE02.roa
Signing time: Sat 03 Sep 2022 22:44:19 +0000
ROA not before: Sat 03 Sep 2022 22:44:19 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 271965
IP address blocks: 103.69.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Sep 3 22:44:19 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6313d8c3-b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:c4:16:f4:6c:e9:8a:5f:34:a8:6e:f9:6c:
d6:a5:58:f9:67:bc:bc:ab:27:24:71:c2:a0:fa:30:
7c:86:b5:c7:0e:8c:31:d7:71:12:23:c3:15:bf:9a:
36:5f:e0:3e:e7:61:0f:67:b8:97:31:2b:75:2c:a6:
c3:8c:88:8a:34:c5:19:f3:da:30:ae:ac:64:7b:07:
3c:93:62:87:81:99:b5:be:8e:4b:4d:a5:a8:fd:a8:
b7:da:da:0e:f5:d0:64:f4:1f:b2:ff:51:28:51:07:
ab:b6:a7:fd:9d:52:af:e1:cd:8e:70:ca:c6:c2:1e:
a7:97:3c:ca:f3:2f:71:2e:72:3f:82:13:d2:62:c8:
09:e2:a7:e7:42:ab:d6:28:a2:be:5b:52:2e:6a:1a:
93:60:cb:58:38:9c:3f:ba:61:73:76:ff:ea:23:85:
3c:fb:2c:86:ad:7f:97:fe:53:fe:dd:e1:d3:14:71:
21:d9:e9:97:41:15:6e:c8:f7:d2:56:36:dd:65:50:
ec:e6:57:26:25:fc:a3:43:bd:fc:eb:9e:f5:d3:70:
ec:7d:05:e5:3f:b3:df:ff:7e:c1:6c:63:ef:6e:9c:
50:1c:ba:20:6b:7b:cb:00:0f:99:74:16:0c:2f:31:
56:a3:fd:a1:13:b9:18:06:92:ec:cf:93:12:65:96:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:BB:E8:07:FA:5C:4C:C1:58:58:7D:4D:52:40:D4:FF:8B:8B:16
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/F2311BD62BD911EDADF00A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b3:0e:6d:e2:0b:3b:56:ea:d8:ba:a5:23:59:69:c9:41:9f:
ac:d2:54:25:ed:2b:8d:0b:7a:43:99:e9:57:5f:83:b8:76:6b:
f6:a1:86:23:83:ab:9b:5d:b7:71:36:05:e7:0a:35:50:37:78:
a4:38:ed:54:7b:79:00:35:df:2d:ef:e3:5d:1a:13:db:ca:c5:
09:2f:5d:91:da:e7:4c:36:1c:f8:e7:fc:1d:ed:2a:a2:7b:a3:
84:97:15:49:df:6c:1c:41:57:49:32:8a:47:ff:38:b1:b9:3e:
59:c6:13:f1:b0:20:37:44:b8:99:9a:d3:52:fe:5e:8f:62:44:
00:e7:b3:ce:b2:d8:dc:c4:e7:74:75:6a:4b:31:17:85:b3:a5:
d7:fd:44:d1:16:5a:48:98:7e:2b:e8:42:24:79:f8:44:2b:b2:
a6:75:bf:04:96:a6:30:cc:20:f6:71:45:7f:00:97:02:28:35:
54:8a:bc:be:4a:29:54:c5:94:2f:80:48:38:26:50:c2:30:f3:
71:5f:10:48:b1:9d:61:f1:d8:5e:09:39:36:63:75:d5:2d:8c:
7c:79:e6:9c:b0:4e:ed:51:d4:cd:d8:20:eb:d1:e6:79:5e:84:
ff:25:89:04:8e:eb:bc:80:08:b2:34:e9:3a:46:2e:50:d7:6c:
0c:94:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org