Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/F7CE8BA6106B11EE900AD248C4F9AE02.roa
File: F7CE8BA6106B11EE900AD248C4F9AE02.roa (raw, json)
Hash identifier: Aji5ImB9ZWjtqbGpPb4YuvuAD5zhxKwV98mZZcZrjt8=
Subject key identifier: 08:41:5F:16:29:5C:99:B7:A9:76:CF:A2:BE:66:B8:1C:D9:1F:4F:F2
Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Certificate serial: 94
Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/F7CE8BA6106B11EE900AD248C4F9AE02.roa
Signing time: Wed 21 Jun 2023 19:44:00 +0000
ROA not before: Wed 21 Jun 2023 19:44:00 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 150683
IP address blocks: 103.19.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E
Validity
Not Before: Jun 21 19:44:00 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64935300-bc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:c6:12:02:94:39:0f:87:8e:e8:52:88:1b:
5f:eb:2c:f2:7e:d8:20:1c:ef:eb:ba:62:ba:f2:8c:
1d:86:3f:a8:d3:42:7d:ea:70:df:54:19:82:0b:e0:
9d:57:5e:f8:89:5a:8a:00:e5:f2:f9:05:ce:84:0f:
7f:a6:82:77:b6:fa:a6:20:17:96:65:49:79:f3:ed:
3f:ac:af:17:7e:4b:0f:0f:63:7e:ba:f3:48:cd:81:
9e:6d:6a:48:d4:15:bb:e2:99:8a:f3:01:73:bc:6b:
9d:46:f4:1d:25:81:da:48:23:3b:a0:c5:ee:f6:4a:
8b:da:e3:89:66:9e:04:2b:91:bd:30:b8:84:13:37:
18:08:16:77:84:01:a5:2a:d5:eb:03:f5:62:cf:2f:
51:66:6c:54:fa:28:05:23:b2:6f:ae:f7:8e:ef:b8:
4c:41:16:0e:33:0b:fc:72:59:97:ee:86:b6:96:16:
40:fa:ae:66:50:98:74:bd:3f:9f:e7:3b:7a:5f:8e:
0a:fb:19:78:88:f8:ed:10:7e:72:a2:ea:9e:98:d8:
55:14:c0:4d:23:b5:3c:df:0e:30:d0:c0:cd:8d:25:
aa:cf:e4:88:2d:88:5c:97:df:98:1d:9c:82:31:66:
37:3a:85:c9:76:bf:bc:b0:ed:43:0d:9c:1b:94:2f:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:5F:16:29:5C:99:B7:A9:76:CF:A2:BE:66:B8:1C:D9:1F:4F:F2
X509v3 Authority Key Identifier:
keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/F7CE8BA6106B11EE900AD248C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.49.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d2:87:e9:87:0d:1c:98:61:80:c1:39:bb:7e:60:0d:95:ef:
97:6a:ff:69:b4:51:f5:6c:3b:40:69:76:48:4c:12:6f:d2:03:
98:99:fb:b7:45:40:cf:96:06:fc:80:43:82:0c:b0:e0:6f:fd:
cc:6b:9b:3f:4d:4a:3f:37:04:c9:bf:aa:dd:ab:b6:0c:c1:11:
0e:fb:1a:58:7e:bb:bb:9b:34:79:7c:b9:73:99:22:74:5b:1e:
6c:11:1d:fb:59:9c:cd:61:13:63:68:38:e8:30:4d:4d:d6:28:
d3:1d:35:a8:f6:a2:b0:dc:f8:b7:34:03:50:76:a6:d0:48:39:
77:fa:bd:df:7b:9e:51:68:2d:34:69:10:e0:82:fb:54:33:09:
75:14:df:c3:45:4a:90:a8:8a:11:e1:64:c4:da:4a:7c:e7:f5:
68:96:e2:98:33:60:f1:87:20:ed:1e:81:41:26:b4:8c:3f:d8:
2d:8c:e6:4a:38:e7:d1:7e:9e:60:a0:8d:b6:d3:34:6a:1a:0e:
fb:21:43:b2:b4:c3:37:c9:43:22:64:7a:c8:de:f8:bd:d4:b6:
c8:80:9a:43:a8:ea:6f:2f:68:08:60:93:d2:57:fa:57:64:f6:
ca:c9:0e:19:c0:f6:3d:8c:5a:93:33:77:6b:7b:ff:84:95:92:
00:5a:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 19:07:55 2023 by rpki-client on console-fra.rpki-client.org