Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/B5DD240EBE8711ED91D81B5CC4F9AE02.roa
File: B5DD240EBE8711ED91D81B5CC4F9AE02.roa (raw, json)
Hash identifier: /zUMor9RDj3UtBUdXoH6txYQUPi5Y4QEUIK2ZvodLQI=
Subject key identifier: 6F:1D:B7:16:4C:23:DE:1B:36:64:74:8D:73:21:46:63:60:14:89:E5
Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial: 74
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/B5DD240EBE8711ED91D81B5CC4F9AE02.roa
Signing time: Fri 21 Jul 2023 04:03:56 +0000
ROA not before: Fri 21 Jul 2023 04:03:56 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 150774
IP address blocks: 103.167.208.0/23 maxlen: 23
103.167.208.0/24 maxlen: 24
103.167.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Validity
Not Before: Jul 21 04:03:56 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ba03ac-1368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:06:22:f4:da:e1:1c:f9:bb:12:d3:fa:e3:
71:ef:95:4b:1e:26:a9:4e:d6:98:ab:d4:e3:79:37:
a2:32:be:35:b9:44:dd:aa:7c:f3:af:7e:3d:5b:14:
8b:00:b2:b7:98:9b:35:6c:5d:5e:98:c3:a6:ac:45:
07:26:b2:ce:7c:e3:01:84:c5:79:ff:58:4b:bf:09:
d2:d5:86:99:66:98:d9:fb:48:ec:62:aa:f9:c4:86:
71:77:c8:7e:81:c7:0b:1f:62:54:20:19:27:72:1f:
3a:50:4b:36:d5:b3:bb:65:50:12:64:45:86:c1:2b:
fa:33:49:5b:88:71:ac:eb:08:e0:fe:da:04:42:dd:
a5:c8:37:82:79:98:b2:4d:65:6e:31:43:0a:38:dd:
bd:14:fb:26:cc:db:f1:7e:90:62:25:50:0d:c3:10:
33:ad:da:7f:2f:ca:05:00:05:49:ff:8d:71:dd:1d:
1d:52:64:30:c4:65:51:1c:da:1e:ce:ae:61:c9:84:
47:30:e9:d5:0d:bf:96:2d:27:3f:04:7c:ab:57:37:
45:07:11:c8:1b:6d:4f:07:7a:b1:88:67:72:ad:bc:
2c:dd:6f:36:dd:99:15:ef:3b:ef:1e:21:5f:81:27:
32:32:b1:42:0a:d3:54:da:9b:32:39:35:5f:e2:72:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:B7:16:4C:23:DE:1B:36:64:74:8D:73:21:46:63:60:14:89:E5
X509v3 Authority Key Identifier:
keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/B5DD240EBE8711ED91D81B5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.208.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:1f:17:2c:8c:81:3e:c1:60:76:76:5d:bf:ae:13:71:61:83:
51:a1:99:52:4c:8a:28:b8:f7:cc:82:6e:5e:68:d3:54:a9:3b:
07:01:5a:bb:aa:34:60:80:a2:50:4e:b6:ff:bd:24:d9:53:d8:
b9:d6:66:62:91:21:0f:b6:bb:6f:29:3e:80:3c:0c:fa:ea:1b:
4c:f1:22:d5:6b:13:eb:d1:f5:ad:02:20:0f:d7:7b:8d:36:9c:
b3:5e:aa:78:0b:a6:4d:14:bb:23:52:ef:7f:f1:0c:52:3a:58:
1f:d1:d9:98:f4:9f:3a:83:a2:c1:02:7a:bb:3f:06:03:cc:13:
08:fb:59:ec:e4:c7:ca:61:e8:7a:7b:c0:83:00:fd:22:d3:f0:
1e:0d:c0:f4:ca:1e:00:27:71:8f:b6:c5:22:00:6c:37:af:7a:
e0:d2:26:e2:be:7e:46:e1:9c:1d:17:da:1b:c0:cb:7e:8f:cf:
6b:be:44:92:7a:53:1c:45:2f:a1:3e:65:f6:7a:95:93:18:f9:
c8:a2:17:04:8a:ef:06:20:e9:93:49:aa:18:ad:c5:b3:9e:f5:
71:6d:90:3d:e2:f8:ea:12:e3:4b:2a:72:c6:67:53:63:29:41:
14:27:3b:74:ee:38:7d:04:75:71:61:06:21:dc:f1:09:09:b8:
d8:e4:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 16:39:42 2023 by rpki-client on console-ams.rpki-client.org